Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
File:                     3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa (raw, json)
Hash identifier:          qhyVGLhC4jdFmtJFEcpTj4xfRXmrsX6rI9dVmj8F0OI=
Subject key identifier:   B9:49:F4:CC:3F:0F:4B:29:59:46:8E:C9:36:3B:95:56:F6:46:40:07
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       76440429AE9693289286503C0050F427E009B6B9
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa
Signing time:             Wed 29 Jul 2026 13:42:15 +0000
ROA not before:           Wed 29 Jul 2026 13:37:15 +0000
ROA not after:            Wed 28 Jul 2027 13:42:15 +0000
asID:                     266385
IP address blocks:        170.80.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:44:04:29:ae:96:93:28:92:86:50:3c:00:50:f4:27:e0:09:b6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Jul 29 13:37:15 2026 GMT
            Not After : Jul 28 13:42:15 2027 GMT
        Subject: CN=B949F4CC3F0F4B2959468EC9363B9556F6464007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9d:bf:55:50:4b:de:e5:53:b6:3c:d6:a5:92:
                    52:ae:c5:9f:d9:85:fa:81:9e:a6:e2:17:14:75:ef:
                    b6:47:01:f3:60:63:29:67:7a:3b:62:f3:b3:e3:be:
                    18:55:99:d5:e0:7c:0d:92:83:68:d8:c6:ee:95:f0:
                    50:8e:ca:ca:3b:f4:94:2e:44:2e:e9:67:81:22:ba:
                    fd:83:94:dd:54:07:34:44:c2:c4:42:d9:f4:7b:99:
                    5b:90:8c:69:84:38:c8:8a:82:be:45:23:01:fe:22:
                    46:3b:42:f0:75:27:73:94:7c:6a:32:01:a8:48:e0:
                    f5:b5:38:0f:aa:f3:2c:6d:c2:22:59:6d:6f:2a:12:
                    d2:c9:37:7d:b2:c1:a7:3a:34:59:01:7d:fe:08:5c:
                    e5:c9:f0:d3:38:a9:47:9d:0c:32:96:dc:49:c9:b0:
                    cf:7c:c7:8a:94:b9:67:ad:81:69:67:35:da:c5:87:
                    95:c5:46:20:33:38:48:1f:2a:dd:af:75:8e:17:1f:
                    85:fc:a5:42:9a:24:7d:f6:cc:c9:ed:18:f8:0d:b1:
                    3d:00:52:49:98:3f:00:08:03:04:5c:ca:ae:ac:b9:
                    8a:6d:c1:7d:c7:f7:ae:57:71:3f:0e:61:fa:ab:09:
                    75:a7:71:8e:13:18:b9:fb:68:3b:3e:df:1b:6a:84:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:F4:CC:3F:0F:4B:29:59:46:8E:C9:36:3B:95:56:F6:46:40:07
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:91:45:c1:e1:c0:f7:06:4e:1d:33:96:37:b3:45:3f:2f:0d:
         10:8d:1c:a8:c1:c9:55:3d:aa:f8:48:f2:ce:a4:b4:2c:45:26:
         5b:95:50:8d:46:68:36:c2:89:7d:ec:7f:d8:41:9f:fc:c4:8f:
         3a:bf:87:41:17:7d:52:58:84:ab:b4:8e:12:0a:80:44:37:97:
         20:1f:ac:b9:c3:74:e1:26:e9:77:8e:5f:a8:3c:c9:34:e0:a0:
         72:fd:14:07:86:d0:1b:d5:07:f6:4b:8e:ac:f7:57:ec:e0:4d:
         6a:ad:6b:c2:af:ae:1c:3a:5e:64:60:41:ca:ef:6c:24:91:60:
         ad:22:7d:ee:0c:20:25:2c:e2:e0:b0:fa:a9:4f:72:82:84:eb:
         ed:c6:7c:b4:2a:87:da:dc:6f:76:13:68:61:19:5b:9f:13:e2:
         58:67:34:85:8e:11:1f:99:ac:f3:ad:b2:82:b1:c4:59:79:f2:
         55:bd:9b:b9:63:19:e9:ed:fa:61:a6:7f:04:ac:c4:82:c9:5f:
         51:37:0a:ae:bd:b2:22:57:fd:13:2b:45:13:f9:0a:c5:76:04:
         3d:9c:b6:c1:bb:a6:39:0c:83:05:77:b2:5a:6b:27:2c:ba:1a:
         80:9d:f2:58:22:e5:15:82:b3:f4:c0:c0:d2:c2:c7:08:8e:56:
         24:e4:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:06:26 2026 by rpki-client