Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa
File:                     3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa (raw, json)
Hash identifier:          pR8jviB+Yidc1yRn6uUNTTGnPEfu307njx82Ik27IMg=
Subject key identifier:   2A:84:7D:48:13:5C:B4:D8:2B:CE:0C:7B:79:44:0E:9D:DC:D1:A2:D8
Certificate issuer:       /CN=7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970
Certificate serial:       16E3824CEE77EF8D6C5E22E9357162C8F12EDDEA
Authority key identifier: 7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa
Signing time:             Sat 16 May 2026 15:01:36 +0000
ROA not before:           Sat 16 May 2026 14:56:36 +0000
ROA not after:            Sat 15 May 2027 15:01:36 +0000
asID:                     265130
IP address blocks:        170.254.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.crl
                          rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:82:4c:ee:77:ef:8d:6c:5e:22:e9:35:71:62:c8:f1:2e:dd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970
        Validity
            Not Before: May 16 14:56:36 2026 GMT
            Not After : May 15 15:01:36 2027 GMT
        Subject: CN=2A847D48135CB4D82BCE0C7B79440E9DDCD1A2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:e5:e3:e8:ab:e1:1b:ec:03:c1:3d:4e:a9:
                    0c:57:b3:97:64:bf:05:57:31:51:1a:e9:d9:4d:92:
                    82:20:2a:ae:73:78:0a:23:34:f6:35:64:96:58:c3:
                    b2:55:ba:7b:99:29:10:eb:1d:81:94:5c:45:f6:28:
                    e5:74:46:06:40:63:b2:ac:67:42:05:c7:a6:8d:2c:
                    68:0d:d7:29:bf:d8:d2:53:09:f9:78:3c:83:ad:02:
                    f8:70:cb:5c:5f:73:b4:ca:dc:a2:1b:d0:d6:54:22:
                    19:86:13:66:38:84:6f:8e:89:e4:18:85:53:16:e5:
                    57:2a:bb:7c:f8:ef:1a:30:d1:22:fd:c0:e8:71:28:
                    c3:05:e6:33:1e:15:4b:1a:4a:2e:50:8a:f2:6a:48:
                    44:ae:a5:fe:1c:6d:1e:2f:a6:19:1b:f7:db:2c:38:
                    33:68:54:97:42:15:c8:42:ba:38:57:9a:96:65:8e:
                    fb:dd:36:dc:1b:ba:a8:8a:04:a1:70:64:72:b1:98:
                    c0:b2:8e:3b:01:a0:93:f4:d5:4e:a9:f1:1b:c6:a8:
                    a7:b3:9f:dc:38:64:84:c1:e8:6b:9e:3f:bf:07:70:
                    1f:e9:fd:00:ea:ae:4c:6b:24:a9:f4:43:50:4e:16:
                    5c:d5:e6:83:9f:04:6b:3f:52:68:51:26:e3:67:5d:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:7D:48:13:5C:B4:D8:2B:CE:0C:7B:79:44:0E:9D:DC:D1:A2:D8
            X509v3 Authority Key Identifier:
                keyid:7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:aa:bf:fa:da:f4:47:e6:71:72:b2:fe:04:19:e7:de:c7:
         4f:9c:39:f5:3d:0c:1c:4a:16:34:76:f8:ff:e0:b9:eb:b0:73:
         cf:22:c0:2d:9e:8c:a9:a5:f5:fd:a4:c9:8b:ee:bf:1d:a5:c6:
         4c:10:d3:62:db:0b:61:73:3c:9f:f5:c9:03:ab:64:91:9f:a3:
         c5:39:ac:22:a2:26:4b:7d:12:12:31:2f:50:9d:02:ac:b4:10:
         88:9d:87:26:3b:65:45:84:df:e0:11:4e:b3:1c:ff:49:7e:a2:
         1c:f3:5f:f5:62:8d:af:2a:b1:73:44:09:1d:d3:4e:5b:72:47:
         83:82:49:81:39:86:a4:ed:f2:5f:cd:3a:47:36:d3:f7:9e:73:
         32:50:ae:e9:9f:cb:68:f7:92:ec:e1:5b:5c:89:5a:c3:8f:be:
         1a:90:57:23:7b:51:8e:40:0c:da:c1:7c:a3:c8:f8:35:ef:a6:
         30:5c:37:f4:30:a1:2c:c7:f6:01:3e:4c:1c:29:d3:f6:b8:bb:
         25:e7:dc:21:42:49:ad:fb:7b:10:d1:76:a5:41:21:d0:8c:ab:
         6e:a9:b6:59:c4:5e:23:33:a4:d5:d7:21:c7:9b:fa:88:8c:c0:
         9f:a3:d3:82:fa:9a:5e:bd:07:ad:9c:08:e2:2b:77:cc:76:40:
         e9:95:c9:c6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFuOCTO53741sXiLpNXFiyPEu3eowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzMDVBOUQ4MUZCMkE5NUEwOUVFMjhFMjJGM0ZFRkUx
RUUzRDk3MDAeFw0yNjA1MTYxNDU2MzZaFw0yNzA1MTUxNTAxMzZaMDMxMTAvBgNV
BAMTKDJBODQ3RDQ4MTM1Q0I0RDgyQkNFMEM3Qjc5NDQwRTlERENEMUEyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tuXj6KvhG+wDwT1OqQxXs5dk
vwVXMVEa6dlNkoIgKq5zeAojNPY1ZJZYw7JVunuZKRDrHYGUXEX2KOV0RgZAY7Ks
Z0IFx6aNLGgN1ym/2NJTCfl4PIOtAvhwy1xfc7TK3KIb0NZUIhmGE2Y4hG+OieQY
hVMW5Vcqu3z47xow0SL9wOhxKMMF5jMeFUsaSi5QivJqSESupf4cbR4vphkb99ss
ODNoVJdCFchCujhXmpZljvvdNtwbuqiKBKFwZHKxmMCyjjsBoJP01U6p8RvGqKez
n9w4ZITB6GueP78HcB/p/QDqrkxrJKn0Q1BOFlzV5oOfBGs/UmhRJuNnXZJzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKoR9SBNctNgrzgx7eUQOndzRotgwHwYDVR0j
BBgwFoAUezBanYH7KpWgnuKOIvP+/h7j2XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERkMnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1
eHcvMC83QjMwNUE5RDgxRkIyQTk1QTA5RUUyOEUyMkYzRkVGRTFFRTNEOTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCMzA1QTlEODFGQjJBOTVB
MDlFRTI4RTIyRjNGRUZFMUVFM0Q5NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZDJ5YWZRRURSeUxTbkVoWHdoNkNtU1l3QnVKRTVxMzV6S0RWQm1ZNXh3LzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+yDANBgkqhkiG9w0BAQsFAAOCAQEAlLiq
v/ra9EfmcXKy/gQZ597HT5w59T0MHEoWNHb4/+C567BzzyLALZ6MqaX1/aTJi+6/
HaXGTBDTYtsLYXM8n/XJA6tkkZ+jxTmsIqImS30SEjEvUJ0CrLQQiJ2HJjtlRYTf
4BFOsxz/SX6iHPNf9WKNryqxc0QJHdNOW3JHg4JJgTmGpO3yX806RzbT955zMlCu
6Z/LaPeS7OFbXIlaw4++GpBXI3tRjkAM2sF8o8j4Ne+mMFw39DChLMf2AT5MHCnT
9ri7JefcIUJJrft7ENF2pUEh0Iyrbqm2WcReIzOk1dchx5v6iIzAn6PTgvqaXr0H
rZwI4it3zHZA6ZXJxg==
-----END CERTIFICATE-----
Generated at Sun May 24 15:30:23 2026 by rpki-client