Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/3137302e3234362e34342e302f32322d3332203d3e20323632333739.roa
File:                     3137302e3234362e34342e302f32322d3332203d3e20323632333739.roa (raw, json)
Hash identifier:          e5493FK5uY8KdPFDhTNU+a4ce+HSgxvWl7WI3AgO7aU=
Subject key identifier:   1A:B8:05:CC:B9:38:7B:BD:67:26:C5:8B:AC:E1:AE:3C:96:A2:41:06
Certificate issuer:       /CN=59E78C5D795BF2F8B474AFD99A924B31257A16E5
Certificate serial:       6BAE8656FB76380FEB83B209A95354B6D71A99A9
Authority key identifier: 59:E7:8C:5D:79:5B:F2:F8:B4:74:AF:D9:9A:92:4B:31:25:7A:16:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E78C5D795BF2F8B474AFD99A924B31257A16E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/3137302e3234362e34342e302f32322d3332203d3e20323632333739.roa
Signing time:             Tue 22 Sep 2026 19:51:43 +0000
ROA not before:           Tue 22 Sep 2026 19:46:43 +0000
ROA not after:            Tue 21 Sep 2027 19:51:43 +0000
asID:                     262379
IP address blocks:        170.246.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/59E78C5D795BF2F8B474AFD99A924B31257A16E5.crl
                          rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/59E78C5D795BF2F8B474AFD99A924B31257A16E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E78C5D795BF2F8B474AFD99A924B31257A16E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ae:86:56:fb:76:38:0f:eb:83:b2:09:a9:53:54:b6:d7:1a:99:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E78C5D795BF2F8B474AFD99A924B31257A16E5
        Validity
            Not Before: Sep 22 19:46:43 2026 GMT
            Not After : Sep 21 19:51:43 2027 GMT
        Subject: CN=1AB805CCB9387BBD6726C58BACE1AE3C96A24106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:43:2f:7b:f1:0b:01:a3:63:3c:3f:2c:28:
                    03:65:6d:81:fc:c5:b1:d7:2d:31:6f:04:18:d9:6d:
                    95:58:5d:72:16:78:05:0a:45:82:cb:00:83:f3:41:
                    83:5c:3c:3c:c1:04:69:b1:28:e1:0e:8a:2c:71:a9:
                    f2:31:67:e0:bb:4f:6e:49:00:0d:2a:fa:27:04:bc:
                    1d:d4:ea:ea:e9:66:44:9e:a3:93:be:c6:b2:fa:62:
                    86:fb:80:af:4a:87:9e:d4:3e:32:f2:39:1f:28:2b:
                    f1:eb:93:49:fe:51:66:ac:7b:65:82:d8:02:be:39:
                    f1:bb:d4:aa:9c:ba:94:5f:3f:ab:bb:e9:58:be:cc:
                    a2:b0:5a:ec:96:03:2c:cf:ec:d0:6d:dd:8d:3c:7b:
                    38:f1:49:d7:ca:69:7d:72:a2:ee:e8:f5:a4:66:c4:
                    2d:a7:a8:a4:0f:c2:e6:34:0a:3e:4e:76:c6:2a:8e:
                    05:c8:ae:cf:db:99:33:57:ec:22:30:0a:5b:12:c4:
                    be:d0:d6:96:fc:60:51:13:9f:c3:8e:33:51:4d:ad:
                    05:78:42:10:a5:ce:91:3c:70:f3:09:f9:96:8d:d7:
                    e2:48:cf:bd:31:b2:fc:82:24:6f:57:21:ad:bd:11:
                    9d:a1:a0:c5:4b:ef:30:9a:c1:7a:e7:28:bb:ce:a3:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:05:CC:B9:38:7B:BD:67:26:C5:8B:AC:E1:AE:3C:96:A2:41:06
            X509v3 Authority Key Identifier:
                keyid:59:E7:8C:5D:79:5B:F2:F8:B4:74:AF:D9:9A:92:4B:31:25:7A:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/59E78C5D795BF2F8B474AFD99A924B31257A16E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E78C5D795BF2F8B474AFD99A924B31257A16E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6knu2zDfsorMHnDWZJZRbGtcTEwbY1rdWNn8gFjJzzW2/0/3137302e3234362e34342e302f32322d3332203d3e20323632333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:c0:07:46:5f:f0:93:1b:05:26:ad:7f:a4:eb:8b:0f:e2:
         1c:ce:7a:69:56:4d:35:37:59:17:d5:64:cb:7f:40:da:e1:57:
         48:7a:30:1a:cb:1e:cd:0d:44:82:47:93:ee:f6:43:8e:84:ed:
         b6:1c:5c:41:fc:1a:1f:9f:9c:09:2a:28:90:ed:92:49:9f:98:
         14:ff:0f:21:c5:d2:19:43:71:30:db:bb:25:5c:fd:39:57:c4:
         a9:0f:f0:44:29:87:69:6d:0a:51:49:f3:44:12:5f:b3:57:8e:
         1a:22:23:f9:dc:51:86:b2:d7:75:94:3a:46:35:73:a3:8b:f3:
         62:a9:92:3d:05:26:4e:62:69:5a:d5:3f:a5:4a:8a:b5:36:c1:
         ab:b8:ea:b2:35:f9:f4:3c:7d:45:a8:29:95:00:57:82:6e:39:
         99:91:5c:17:8f:a3:17:02:59:ae:fc:60:a1:3e:49:59:83:5b:
         56:e3:ef:27:d6:c5:84:61:d2:06:33:e8:12:a3:af:10:47:23:
         50:90:0c:47:5d:3e:89:63:0f:cf:cf:90:c6:7f:ef:72:b1:1d:
         0f:66:24:0b:26:fa:1e:8b:83:12:d9:cd:9d:90:35:36:5f:24:
         1c:60:c3:d4:b5:7c:04:4f:e0:3c:90:a1:70:0c:73:20:a9:48:
         2e:31:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:39:39 2026 by rpki-client