Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa
File:                     3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa (raw, json)
Hash identifier:          gaeaMdKBn6igzKtdE5jToTd97QJCx/hpEnjfGuItiSo=
Subject key identifier:   52:88:46:A9:25:78:27:D9:E4:DE:49:DB:44:6A:10:68:02:19:B1:78
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       6915EF6CE1633886068B5130F4977190D9091451
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa
Signing time:             Fri 27 Mar 2026 14:35:05 +0000
ROA not before:           Fri 27 Mar 2026 14:30:05 +0000
ROA not after:            Fri 26 Mar 2027 14:35:05 +0000
asID:                     273467
IP address blocks:        170.245.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:15:ef:6c:e1:63:38:86:06:8b:51:30:f4:97:71:90:d9:09:14:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Mar 27 14:30:05 2026 GMT
            Not After : Mar 26 14:35:05 2027 GMT
        Subject: CN=528846A9257827D9E4DE49DB446A10680219B178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:88:0f:89:f3:bb:06:70:b7:47:f8:cc:4f:
                    e0:f1:fb:de:61:2e:b1:81:6d:db:09:11:e6:26:d9:
                    44:d0:90:18:cc:8c:d1:7a:17:29:31:dd:f9:8e:f4:
                    fe:2b:0e:d8:fc:73:cc:ca:f7:71:28:92:71:09:eb:
                    6c:f6:81:b4:b5:b6:c7:fb:56:33:77:24:23:d8:f7:
                    ab:5c:6b:6b:5c:4a:fb:87:4c:57:25:eb:b0:d3:ff:
                    16:cc:9a:ab:aa:51:45:51:e5:e7:3e:04:d2:95:2e:
                    5e:be:23:50:b7:b0:31:1f:49:f8:3f:0b:e7:6e:1f:
                    06:36:ec:6b:2c:12:0f:30:48:5a:cf:c3:bc:e8:5b:
                    c0:d4:d3:25:a9:63:84:66:6e:fb:b4:fa:ed:cb:2c:
                    4d:98:4c:4c:88:36:65:54:19:73:9c:d4:b8:4a:ed:
                    1e:d6:a6:53:e4:c2:f7:0e:07:9b:8b:94:66:20:25:
                    58:be:1d:94:c4:42:5e:30:22:56:48:b6:7d:4a:49:
                    24:a5:db:eb:7c:17:18:0d:aa:80:44:5c:aa:70:52:
                    71:52:b7:6c:d3:cc:03:39:e7:ad:60:0b:96:53:37:
                    3a:cb:3a:83:a7:43:05:14:52:8c:1c:38:de:99:0b:
                    6a:c6:31:53:dd:33:f5:9e:d9:48:e4:b9:8f:ac:4b:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:46:A9:25:78:27:D9:E4:DE:49:DB:44:6A:10:68:02:19:B1:78
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:e7:44:73:ae:4c:df:c8:24:7d:35:af:d0:14:8d:cf:9e:
         e0:e2:0a:1a:60:7a:90:fe:dd:ac:f3:c1:16:ce:70:10:b6:a3:
         fb:5a:42:d7:ad:a6:35:a0:0c:ec:41:33:4c:d7:4c:74:b9:ea:
         69:d6:62:e8:8a:e2:ff:76:8f:b8:5b:c9:30:6d:d7:8a:11:72:
         49:42:bb:b7:7c:63:2c:52:41:15:49:55:01:60:f3:77:57:f7:
         ad:4b:1a:93:f1:4c:47:88:4d:a3:70:40:8d:c5:8f:36:62:89:
         50:83:80:19:64:8a:66:7f:52:ac:71:68:37:84:6d:0a:1e:65:
         85:3f:90:51:ff:91:2b:88:fc:12:62:f6:2a:8c:7b:fa:33:4c:
         bc:5c:a8:55:67:78:4d:7d:c7:0a:a3:f0:2b:58:c7:d0:b9:5a:
         b2:d0:e6:f5:7a:0a:75:e8:fe:c2:aa:56:24:a4:5b:b6:d4:89:
         4e:1f:dd:8b:c1:20:5d:5b:4e:89:5e:23:63:b7:da:40:0b:a9:
         bc:e8:57:87:f3:c2:44:c8:55:66:a9:7f:db:48:7f:d5:7b:f6:
         c2:34:a7:2f:5d:60:ba:52:cb:3b:d9:62:b5:f0:25:90:03:3f:
         91:f2:1c:5d:2a:e7:06:60:97:f9:50:8b:db:7d:97:68:dd:29:
         c7:e5:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:28 2026 by rpki-client