Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          glhtRlXgpHUOUpQmsXt71OCrC/uF2mH9vXj93FSGAUk=
Subject key identifier:   3D:23:20:BA:76:BA:67:E5:9C:D3:70:B9:5A:AD:A9:E3:D4:F0:CF:96
Certificate issuer:       /CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
Certificate serial:       17B2A4F86D57FAF08BEECE3B314F28D0E9DB97CC
Authority key identifier: DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa
Signing time:             Fri 04 Sep 2026 15:59:08 +0000
ROA not before:           Fri 04 Sep 2026 15:54:08 +0000
ROA not after:            Fri 03 Sep 2027 15:59:08 +0000
asID:                     265106
IP address blocks:        170.254.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:a4:f8:6d:57:fa:f0:8b:ee:ce:3b:31:4f:28:d0:e9:db:97:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
        Validity
            Not Before: Sep  4 15:54:08 2026 GMT
            Not After : Sep  3 15:59:08 2027 GMT
        Subject: CN=3D2320BA76BA67E59CD370B95AADA9E3D4F0CF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:3d:f3:fe:5e:61:dd:df:c8:7f:d0:62:34:
                    11:2a:35:54:31:d4:67:98:54:50:5c:d4:90:07:e3:
                    00:7f:fb:39:8d:d1:a2:a0:dc:f3:21:18:7f:70:32:
                    8a:9a:e9:c6:02:7d:b6:4e:fd:9f:a9:46:f6:d8:47:
                    c8:7d:95:5b:22:74:9c:16:13:4f:13:08:f6:53:1f:
                    69:63:b6:a5:67:62:9a:63:3e:52:fd:0a:e7:f5:a7:
                    a1:f7:8c:5c:67:2f:49:4c:58:8a:5a:12:ed:05:fa:
                    a6:7a:d3:7b:a7:13:ce:44:ed:0f:de:01:8c:48:72:
                    36:db:60:8d:6d:ed:77:12:a8:de:af:85:60:cf:69:
                    d2:ad:83:70:e4:18:27:68:6b:00:1a:df:6f:88:9f:
                    36:35:39:c4:56:01:ab:49:73:3d:4a:c0:de:06:38:
                    31:b7:00:65:b3:40:b8:7a:df:a3:50:ef:1f:c3:84:
                    15:ac:23:65:0a:dc:02:9c:6d:12:a3:66:2e:59:da:
                    12:ef:02:14:82:e5:d3:b2:1c:fd:29:6b:d1:6d:05:
                    b6:ac:8c:e3:1b:99:b3:b3:82:9c:24:8d:ca:15:0a:
                    63:e7:89:75:92:16:b0:1a:a6:95:ba:59:43:ca:50:
                    43:33:b2:23:54:63:23:4b:75:28:0a:0f:8d:68:d2:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:20:BA:76:BA:67:E5:9C:D3:70:B9:5A:AD:A9:E3:D4:F0:CF:96
            X509v3 Authority Key Identifier:
                keyid:DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:be:89:a4:03:48:10:25:31:b0:77:6f:8c:cf:25:de:42:
         05:bf:b9:b1:06:9c:87:9e:7a:3b:c9:70:7a:0f:ac:64:32:c8:
         fe:42:62:7a:b0:a2:9f:1d:6a:42:09:d5:db:ea:9d:76:d3:dd:
         6b:69:de:03:ba:ed:71:92:b9:be:18:df:18:9d:65:3d:e7:8b:
         34:79:6f:1e:a7:02:9d:05:13:bb:dc:7b:cb:a2:40:10:f1:95:
         db:e4:95:85:f5:14:cd:8d:ea:6f:49:50:3c:57:5e:4e:ad:2d:
         d9:05:75:82:73:7e:16:31:ce:57:7a:1f:01:ad:9f:84:a2:89:
         fa:63:c5:ba:47:88:d7:47:ba:cf:f6:24:04:31:be:57:2e:f9:
         a6:d7:69:2b:43:cf:02:7d:60:42:e3:7f:a8:9d:c1:98:92:b1:
         b3:12:93:44:61:7a:14:ad:4f:e4:d9:e9:95:f3:a3:93:d0:52:
         10:8c:14:55:7a:67:46:d8:22:70:d1:d5:bf:34:b5:76:14:6c:
         5b:99:3e:55:2e:74:a6:f3:e9:35:0f:68:a2:e7:eb:8a:a9:2d:
         d3:7a:bc:ce:17:59:a3:f5:35:31:a6:6f:d3:02:54:64:34:4f:
         13:39:31:03:17:40:b6:2f:37:71:55:81:d9:45:44:16:92:8b:
         be:20:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:07:54 2026 by rpki-client