Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          JK6jPDwBTQ6Vp00hoHgrDk0wNWLGIcUIw4+PJzY7tBo=
Subject key identifier:   27:2F:D4:DF:7A:15:65:74:42:41:40:3A:BE:EF:EE:A6:E2:73:2F:69
Certificate issuer:       /CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
Certificate serial:       66320527F94D4EA71B8A67FBC4586AE278CA5468
Authority key identifier: DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
Signing time:             Fri 04 Sep 2026 15:59:01 +0000
ROA not before:           Fri 04 Sep 2026 15:54:01 +0000
ROA not after:            Fri 03 Sep 2027 15:59:01 +0000
asID:                     265106
IP address blocks:        170.254.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 11:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:05:27:f9:4d:4e:a7:1b:8a:67:fb:c4:58:6a:e2:78:ca:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
        Validity
            Not Before: Sep  4 15:54:01 2026 GMT
            Not After : Sep  3 15:59:01 2027 GMT
        Subject: CN=272FD4DF7A1565744241403ABEEFEEA6E2732F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:1b:b0:26:cd:61:e9:f7:13:39:b8:1d:f0:
                    5e:69:28:6c:fd:a7:05:0d:e3:2b:e9:9c:f1:13:e0:
                    3e:05:18:2d:38:46:d1:65:c2:0f:ca:2a:02:8b:5d:
                    4b:7b:d0:0a:81:dd:88:21:37:f2:7a:5b:5f:af:12:
                    1c:62:9a:0c:95:ac:55:ce:af:2e:bb:f6:f3:8a:fd:
                    1e:64:d1:08:ac:2f:f5:91:7f:eb:72:da:e9:81:96:
                    ae:ff:0d:b2:2c:72:a6:7f:cc:a5:aa:22:f4:97:50:
                    72:c4:bb:96:f2:b3:73:d4:2e:1d:26:53:80:d8:25:
                    58:c0:41:3f:a9:38:5c:04:7f:d3:03:2e:af:01:14:
                    70:1b:de:df:e6:cf:e8:a1:0f:75:39:01:81:9f:1e:
                    b9:e4:16:86:0c:de:c6:3b:b3:b2:3b:40:65:ae:48:
                    0b:90:03:d3:9a:64:e7:3f:70:fb:46:c6:bf:f4:76:
                    f5:0a:80:a9:ea:ad:e9:44:b6:05:67:88:5a:94:06:
                    20:37:bc:e8:f7:79:90:20:68:7f:e0:6b:55:ee:6d:
                    fc:b1:05:c8:df:3b:53:ae:70:b6:0f:de:94:7c:f6:
                    41:19:1f:de:74:28:1d:9b:42:db:34:ff:68:e4:0a:
                    b4:12:d1:77:54:b3:4e:33:b0:32:34:74:62:86:12:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2F:D4:DF:7A:15:65:74:42:41:40:3A:BE:EF:EE:A6:E2:73:2F:69
            X509v3 Authority Key Identifier:
                keyid:DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:16:35:74:16:22:9f:13:67:1d:58:b0:c9:77:f6:6d:8c:f2:
         cc:8b:e1:65:30:9a:2a:a4:45:69:b3:b0:9d:69:05:90:f4:79:
         38:2b:e0:ed:89:ab:34:ff:8e:24:bd:1f:6e:5a:84:52:80:b5:
         28:e3:53:1f:f6:86:17:72:24:7a:92:f4:66:f0:99:12:ca:3b:
         04:ae:2c:95:ae:07:98:37:ed:e1:19:a0:1f:e6:84:ab:c8:59:
         d7:d6:5d:9d:2f:62:a2:77:75:b1:d0:c2:b0:aa:3d:62:14:34:
         fb:ae:b1:ec:65:e1:23:16:62:e7:f0:62:88:93:b9:a2:41:7d:
         1a:4b:07:f7:4e:81:11:62:f4:7f:e1:2b:c3:67:c2:66:10:68:
         db:32:d5:11:cf:57:25:c5:ba:fe:bf:34:fc:24:9b:33:b4:d1:
         99:39:bb:e1:30:4b:56:01:18:a2:4f:6c:46:54:db:9c:d1:1c:
         01:83:e9:cd:b7:ca:26:0e:69:a2:80:e6:4e:0e:cc:9f:14:27:
         b4:0f:20:98:c8:c3:d0:48:77:35:41:5d:ba:db:38:b2:ea:4a:
         92:9e:36:cc:76:a4:54:78:41:ed:96:17:40:31:8a:2c:fe:2f:
         0c:f7:20:19:e9:f8:7c:75:d6:15:01:88:17:75:08:39:55:28:
         83:70:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:10:17 2026 by rpki-client