Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323634393639.roa
File:                     3137302e302e3230312e302f32342d3234203d3e20323634393639.roa (raw, json)
Hash identifier:          /e/tYBdAPBCg4ooSW+F3/6mntl97MTNZvynon46QiKo=
Subject key identifier:   AB:42:D8:DF:FC:61:0A:A4:3E:58:79:84:63:42:F3:6B:F9:64:F5:86
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       766C8B2DB3C6FA97BA4DE62A83C555B60C8E14CD
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323634393639.roa
Signing time:             Tue 23 Jun 2026 21:14:32 +0000
ROA not before:           Tue 23 Jun 2026 21:09:32 +0000
ROA not after:            Tue 22 Jun 2027 21:14:32 +0000
asID:                     264969
IP address blocks:        170.0.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6c:8b:2d:b3:c6:fa:97:ba:4d:e6:2a:83:c5:55:b6:0c:8e:14:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:32 2026 GMT
            Not After : Jun 22 21:14:32 2027 GMT
        Subject: CN=AB42D8DFFC610AA43E5879846342F36BF964F586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:a3:20:b1:d4:77:ea:0f:60:74:80:72:a6:
                    1c:c1:90:8f:cf:97:96:2c:97:d5:d2:85:5e:da:e3:
                    33:3f:36:f5:21:0c:e8:57:7c:a1:4e:05:b3:c9:fe:
                    11:81:6f:c1:c1:3b:65:6f:12:c6:a4:af:f6:42:df:
                    4f:78:44:ce:24:ff:f0:55:0d:ae:87:8a:a8:0b:cd:
                    d7:c4:4c:65:cd:fd:b9:d8:01:79:8a:5a:63:0e:fd:
                    19:db:05:08:6a:a2:b1:61:75:cb:21:c2:03:e0:34:
                    64:5f:0d:4d:f9:f0:c1:3f:85:fa:c6:a3:8b:60:c8:
                    8b:56:02:b8:1f:27:20:76:34:3e:4a:81:60:3e:8d:
                    f6:8d:79:3b:f4:1b:fb:50:54:f3:bf:44:f8:6c:30:
                    0c:0a:ae:32:5d:39:2b:ee:f9:81:8e:10:f0:ef:90:
                    bb:7f:71:90:5c:6e:02:30:a4:f0:4b:03:4e:e6:c8:
                    4b:16:86:9a:32:98:c4:84:71:b0:32:6a:cc:32:b4:
                    56:ae:eb:1c:71:0c:25:ea:06:5b:fb:f8:e1:99:47:
                    9e:c2:5e:6d:0e:7c:63:40:b8:87:3e:85:3d:48:cc:
                    5a:4f:92:14:6a:f3:08:69:e6:14:db:c1:9a:bb:0a:
                    1a:68:af:f9:e4:89:0e:e9:ff:9e:a1:55:0e:41:8f:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:D8:DF:FC:61:0A:A4:3E:58:79:84:63:42:F3:6B:F9:64:F5:86
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:2e:47:9d:cb:31:93:94:b3:22:f8:9d:10:8e:98:d1:ac:
         49:ac:95:d7:e3:d3:2e:0a:22:06:4a:2b:e5:82:5e:e8:5b:63:
         9a:e5:1e:f7:ba:29:c2:b9:0e:94:f5:bf:47:6c:65:c1:7c:27:
         ad:15:19:e3:64:e7:2b:62:80:43:78:7f:78:b8:67:79:cf:28:
         23:98:08:ef:7d:e7:00:b6:22:38:93:be:c5:9b:93:d1:dc:b6:
         9a:5a:8c:5f:c1:b6:3c:8c:ed:db:0d:c0:c5:83:54:f2:49:06:
         71:31:f2:ad:db:fb:7d:19:3e:2b:71:e1:31:78:32:39:89:c1:
         b9:e0:db:55:74:0b:c3:47:bd:02:58:07:a2:c3:ec:bf:0b:42:
         ff:4e:65:0c:d9:f0:b6:f8:df:8c:9a:e4:25:ae:c8:ce:ef:76:
         2e:a4:14:22:c8:1c:3b:17:4d:dc:ab:1e:77:18:cc:3f:e8:e1:
         e1:b4:16:2d:15:df:78:56:25:ee:60:76:00:44:cc:7b:c8:0c:
         10:c8:b2:f2:a5:71:d5:ff:67:6f:53:39:d5:c6:9e:e6:ee:ff:
         b2:ce:ac:29:6e:fc:59:63:aa:56:7f:ca:ea:ad:56:ce:6d:c5:
         a4:f8:46:18:2b:22:95:89:3f:a6:67:85:cb:eb:e7:ec:9c:c0:
         c5:66:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:52 2026 by rpki-client