Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa
File:                     3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa (raw, json)
Hash identifier:          CRmFRnq71AwX9QvTfETWJJJ7VS2Udjb877tG7Ri6/T0=
Subject key identifier:   BA:F8:98:B4:E0:94:46:12:3B:B0:88:97:92:44:45:17:F8:00:57:DF
Certificate issuer:       /CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
Certificate serial:       12539947B1FFCFD9F82474D89044FBAB943D217C
Authority key identifier: DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa
Signing time:             Fri 04 Sep 2026 15:59:04 +0000
ROA not before:           Fri 04 Sep 2026 15:54:04 +0000
ROA not after:            Fri 03 Sep 2027 15:59:04 +0000
asID:                     265106
IP address blocks:        170.254.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:53:99:47:b1:ff:cf:d9:f8:24:74:d8:90:44:fb:ab:94:3d:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
        Validity
            Not Before: Sep  4 15:54:04 2026 GMT
            Not After : Sep  3 15:59:04 2027 GMT
        Subject: CN=BAF898B4E09446123BB0889792444517F80057DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:4b:da:83:d7:b1:c4:81:ad:23:6c:e8:07:
                    d9:45:1f:be:d9:8d:2c:2e:92:68:01:c7:0f:38:e7:
                    69:04:61:5f:d0:04:05:79:60:3c:f1:e0:af:4a:73:
                    4a:ab:81:f6:87:ab:24:c6:88:eb:96:61:9f:16:15:
                    7f:12:fa:6d:28:b8:9a:8d:e4:da:0e:8c:86:30:0b:
                    b6:f7:94:17:b9:20:2c:dd:9b:a3:c3:cb:0d:8b:87:
                    f9:0d:da:1a:55:12:26:12:80:c5:87:c1:98:b9:7d:
                    41:4e:53:47:0a:48:45:ac:d7:27:a1:28:6b:35:64:
                    4d:33:34:d4:88:78:ff:5c:a6:52:04:ee:c3:f9:28:
                    03:21:d1:ae:56:79:fe:8d:85:5a:08:47:e7:6a:97:
                    14:e3:38:20:ce:ac:28:19:79:42:e4:76:23:e9:20:
                    fc:4e:0e:7d:59:17:19:89:54:c3:46:d1:80:b9:fb:
                    bd:44:fe:70:6f:c8:2d:d0:2a:94:d6:1b:9a:08:5a:
                    95:cf:c6:66:0a:25:7f:87:6b:b6:46:27:19:dc:bc:
                    4a:12:95:18:09:c4:d9:38:40:47:29:d9:c9:71:5a:
                    63:8d:d4:4b:98:57:58:93:85:74:8a:ea:ce:63:e8:
                    75:ba:1b:9a:63:e4:b3:f8:e0:91:ed:c3:9d:28:e4:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:98:B4:E0:94:46:12:3B:B0:88:97:92:44:45:17:F8:00:57:DF
            X509v3 Authority Key Identifier:
                keyid:DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133342e302f32332d3233203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:ea:1f:df:59:3a:09:e0:08:50:f5:ec:9a:e3:f2:6e:51:
         3e:51:7c:e1:f4:34:86:73:ff:e3:f5:0d:50:99:85:8d:dd:58:
         58:46:ab:9e:5a:a8:e6:33:d5:34:d7:d2:fc:e7:3e:ed:c7:92:
         0f:5b:7b:71:1a:cb:0b:a8:4a:7a:87:6a:e9:43:b0:d1:2d:3b:
         d7:a2:20:a8:25:6b:90:17:23:59:d4:09:84:86:01:0d:42:64:
         6b:4e:96:fd:34:a0:1a:35:44:0e:f3:97:54:82:4b:93:fb:d3:
         49:d9:93:49:4b:c3:40:00:c7:b2:bb:3d:c5:73:55:33:9a:12:
         76:90:2a:27:c2:b0:51:12:0e:1d:49:60:08:df:11:32:a4:e6:
         1f:b3:22:97:33:d3:ef:c9:e7:b4:8b:11:a1:44:7a:e8:3f:db:
         ab:09:ae:13:50:21:e7:7a:c9:8e:76:b7:04:ce:ea:8a:dc:c5:
         f0:39:1a:4f:ba:28:cf:72:66:58:da:e1:ce:8c:a1:e4:19:62:
         11:ae:e2:3b:68:a8:73:6f:04:41:2b:ef:45:08:90:92:2a:01:
         f1:d6:0f:b7:34:a1:6f:b5:95:c1:ee:b9:32:3c:89:be:f5:d8:
         43:93:0d:34:d9:1a:a4:c2:5b:39:be:56:50:f2:96:db:64:08:
         ef:0a:82:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUElOZR7H/z9n4JHTYkET7q5Q9IXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQxREYxM0FEQjQ5OTREOUM5MzY3RDE1MTg4ODhCQzhC
NUFGQjFENTAeFw0yNjA5MDQxNTU0MDRaFw0yNzA5MDMxNTU5MDRaMDMxMTAvBgNV
BAMTKEJBRjg5OEI0RTA5NDQ2MTIzQkIwODg5NzkyNDQ0NTE3RjgwMDU3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ukvag9exxIGtI2zoB9lFH77Z
jSwukmgBxw8452kEYV/QBAV5YDzx4K9Kc0qrgfaHqyTGiOuWYZ8WFX8S+m0ouJqN
5NoOjIYwC7b3lBe5ICzdm6PDyw2Lh/kN2hpVEiYSgMWHwZi5fUFOU0cKSEWs1yeh
KGs1ZE0zNNSIeP9cplIE7sP5KAMh0a5Wef6NhVoIR+dqlxTjOCDOrCgZeULkdiPp
IPxODn1ZFxmJVMNG0YC5+71E/nBvyC3QKpTWG5oIWpXPxmYKJX+Ha7ZGJxncvEoS
lRgJxNk4QEcp2clxWmON1EuYV1iThXSK6s5j6HW6G5pj5LP44JHtw50o5CYBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuviYtOCURhI7sIiXkkRFF/gAV98wHwYDVR0j
BBgwFoAU3R3xOttJlNnJNn0VGIiLyLWvsdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNHOXRUZkZ2b3hIOVRnQkg5OWtEdGk3N2phTHE5dlpUQ3hraGd4YWFy
V1YvMC9ERDFERjEzQURCNDk5NEQ5QzkzNjdEMTUxODg4OEJDOEI1QUZCMUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMURGMTNBREI0OTk0RDlD
OTM2N0QxNTE4ODg4QkM4QjVBRkIxRDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzczRzl0VGZGdm94SDlUZ0JIOTlrRHRpNzdqYUxxOXZaVEN4a2hneGFhcldWLzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMxMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar+hjANBgkqhkiG9w0BAQsFAAOCAQEAsP7q
H99ZOgngCFD17Jrj8m5RPlF84fQ0hnP/4/UNUJmFjd1YWEarnlqo5jPVNNfS/Oc+
7ceSD1t7cRrLC6hKeodq6UOw0S0716IgqCVrkBcjWdQJhIYBDUJka06W/TSgGjVE
DvOXVIJLk/vTSdmTSUvDQADHsrs9xXNVM5oSdpAqJ8KwURIOHUlgCN8RMqTmH7Mi
lzPT78nntIsRoUR66D/bqwmuE1Ah53rJjna3BM7qitzF8DkaT7ooz3JmWNrhzoyh
5BliEa7iO2ioc28EQSvvRQiQkioB8dYPtzShb7WVwe65MjyJvvXYQ5MNNNkapMJb
Ob5WUPKW22QI7wqCXA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:52:10 2026 by rpki-client