Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa
File:                     3137302e38332e31362e302f32332d3233203d3e20323636343636.roa (raw, json)
Hash identifier:          yN5/A15IIZsEjFI2rDLcHwkHF7uJ9Et2H1W2rb4U2BY=
Subject key identifier:   79:D3:7B:31:69:8A:9C:37:E2:1A:59:2E:A1:61:B8:FA:5E:4A:77:FF
Certificate issuer:       /CN=8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F
Certificate serial:       3828C495640ED10B0FB313A3695772547DD018FC
Authority key identifier: 8E:67:53:F6:DE:B2:73:E1:B5:D0:DF:09:D2:72:17:55:6F:D0:AB:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa
Signing time:             Fri 11 Sep 2026 19:25:33 +0000
ROA not before:           Fri 11 Sep 2026 19:20:33 +0000
ROA not after:            Fri 10 Sep 2027 19:25:33 +0000
asID:                     266466
IP address blocks:        170.83.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.crl
                          rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:28:c4:95:64:0e:d1:0b:0f:b3:13:a3:69:57:72:54:7d:d0:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F
        Validity
            Not Before: Sep 11 19:20:33 2026 GMT
            Not After : Sep 10 19:25:33 2027 GMT
        Subject: CN=79D37B31698A9C37E21A592EA161B8FA5E4A77FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:dc:70:41:03:b4:90:02:35:56:d7:28:6a:
                    d2:b0:c2:d9:a5:1f:79:53:1c:1b:ba:bf:0a:04:59:
                    c5:bc:08:90:b4:a5:02:e9:44:48:7a:e0:37:db:9b:
                    6e:c5:31:5f:f9:47:0e:84:d1:23:ba:6b:27:d8:c4:
                    0e:38:41:5f:46:0f:b7:f1:ae:bc:61:f5:4b:7e:3a:
                    1a:1e:74:15:d0:bf:45:e7:8e:14:16:36:d6:c3:4e:
                    ff:22:cb:66:69:71:80:3e:44:be:5b:b8:93:d0:3b:
                    2b:83:2c:cb:2e:54:f1:e0:f9:b4:fb:2c:15:88:99:
                    78:4d:ba:72:d9:48:97:e7:73:6d:bc:eb:bb:5e:23:
                    e6:1a:4e:1c:1b:6e:e7:cc:c2:59:69:05:1e:8a:92:
                    b0:e9:a1:8f:03:cb:3d:42:d3:82:3c:a9:5b:a3:d7:
                    b7:36:16:f1:f7:eb:cb:f6:05:9c:57:6f:9a:56:ad:
                    d5:42:73:bf:98:5b:33:8f:a7:d2:9b:07:1c:36:86:
                    0c:aa:f7:29:0b:58:98:09:ea:b3:d9:1b:76:8a:2c:
                    d8:48:3e:10:9d:1a:32:2d:24:c6:36:7d:c4:dc:e6:
                    17:a3:93:80:e5:8e:f9:61:e3:03:fe:49:cd:f5:1c:
                    67:08:f4:fd:f6:55:ea:65:2f:ca:c6:a5:9d:5c:da:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D3:7B:31:69:8A:9C:37:E2:1A:59:2E:A1:61:B8:FA:5E:4A:77:FF
            X509v3 Authority Key Identifier:
                keyid:8E:67:53:F6:DE:B2:73:E1:B5:D0:DF:09:D2:72:17:55:6F:D0:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E6753F6DEB273E1B5D0DF09D27217556FD0AB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:65:d1:17:5e:58:99:a7:d0:a3:fa:28:8d:11:34:0b:48:3e:
         a9:38:96:40:66:4b:ff:e4:c7:ed:0a:43:d3:27:c6:63:80:f2:
         76:bb:39:56:62:a5:04:af:33:bf:f4:61:c6:5f:fb:20:cc:a5:
         a2:dc:33:63:98:b8:3e:4d:eb:2c:c1:03:ba:5b:fa:33:04:63:
         9d:25:84:33:07:d1:14:39:57:bc:31:10:bd:1e:b4:79:30:55:
         35:ad:59:db:1e:25:2f:51:39:63:dd:4c:67:4b:01:e2:4b:b6:
         c6:f3:10:21:63:3d:ca:b8:57:00:20:f9:5c:11:91:a8:bf:15:
         6a:b8:2e:b9:38:e6:d0:3b:6e:a4:1b:7c:bc:10:b0:78:aa:bf:
         f5:30:f7:f5:3e:5d:9f:9e:57:ab:93:8b:ad:a0:0f:50:99:72:
         92:e5:56:b8:e0:21:32:cb:e1:79:2b:e6:ca:2e:b4:51:59:0f:
         27:ef:a0:1c:59:5d:92:36:da:9f:24:d8:36:47:6b:1f:62:db:
         2c:d8:85:7a:5c:14:17:43:05:c2:fa:28:f2:2d:21:12:b2:58:
         90:aa:fd:57:87:4e:28:79:c3:63:d3:8f:1a:7c:6c:d0:1f:f9:
         bf:47:af:4c:59:5e:5b:d5:0d:7a:1f:d0:22:5d:19:62:ee:a1:
         52:bf:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:06 2026 by rpki-client