Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
File:                     3137302e37382e322e302f32332d3233203d3e20323635343931.roa (raw, json)
Hash identifier:          d25CB789PKu4k+MBEiQ8Cg5ZoPPE9mYYTlOjQOTecW0=
Subject key identifier:   B7:0D:32:9A:9D:04:4A:D5:9B:B4:DA:BE:F7:C5:6F:BA:14:8C:96:F9
Certificate issuer:       /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
Certificate serial:       684AF998E6E68ABEBEE2BDEC79299BB3E3EF2591
Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
Signing time:             Fri 27 Mar 2026 13:14:04 +0000
ROA not before:           Fri 27 Mar 2026 13:09:04 +0000
ROA not after:            Fri 26 Mar 2027 13:14:04 +0000
asID:                     265491
IP address blocks:        170.78.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:f9:98:e6:e6:8a:be:be:e2:bd:ec:79:29:9b:b3:e3:ef:25:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
        Validity
            Not Before: Mar 27 13:09:04 2026 GMT
            Not After : Mar 26 13:14:04 2027 GMT
        Subject: CN=B70D329A9D044AD59BB4DABEF7C56FBA148C96F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:76:4e:02:7c:b7:8e:6d:fc:47:05:80:19:
                    fa:2b:bf:21:4e:51:f2:8d:bf:57:e7:50:e1:a0:52:
                    8b:97:cb:9f:63:40:60:94:56:41:3a:19:e0:99:36:
                    80:93:f3:f9:d3:04:d1:67:c1:c6:90:5f:ba:85:da:
                    ff:c3:5f:0e:14:56:af:ba:b8:24:31:e0:64:67:2d:
                    94:22:96:df:b8:2c:fe:be:c2:5b:ec:af:2f:4d:28:
                    b9:19:56:84:17:ff:81:34:c6:70:f6:93:68:55:d0:
                    6b:62:72:cf:f3:ca:f5:2c:36:21:87:b0:f4:0e:80:
                    91:bb:46:53:cd:ec:81:c7:be:f8:19:10:cb:37:8c:
                    6b:6f:7c:9e:ed:a8:f2:cc:f9:4a:1b:36:a7:5c:61:
                    14:5f:86:35:9c:02:39:3c:ae:ca:e6:ff:e5:18:11:
                    df:2a:32:57:64:ab:51:51:91:5e:58:16:6e:16:db:
                    9c:2a:15:18:27:4e:1a:d4:f9:9d:06:eb:bc:fa:d2:
                    8b:c6:dd:2c:0a:8f:5e:46:b7:59:97:6f:f8:b2:4c:
                    09:60:cb:5d:00:a6:9a:2b:1d:9e:eb:80:43:f5:39:
                    1a:05:d2:e3:82:8a:76:09:86:32:7c:0b:94:72:ce:
                    5b:e6:57:03:54:2c:d4:69:48:e0:de:db:11:12:ab:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:32:9A:9D:04:4A:D5:9B:B4:DA:BE:F7:C5:6F:BA:14:8C:96:F9
            X509v3 Authority Key Identifier:
                keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:c9:42:50:68:92:c5:5e:27:13:ed:88:23:f1:db:81:d5:
         8c:0d:f7:b6:2e:95:87:e3:af:67:6a:d3:28:94:99:1e:32:db:
         87:64:30:d7:3a:4e:0f:3c:11:e8:4d:ac:20:3c:fe:8e:28:1c:
         3b:4a:05:8f:50:84:bc:dc:c3:56:d2:ff:a9:e5:1e:db:65:56:
         ea:39:41:66:83:85:b6:bd:84:0f:ef:e1:5e:a9:73:54:71:ee:
         80:fd:3a:fc:1a:a1:1e:1c:0f:72:0a:79:ec:10:ee:d8:0d:d7:
         15:8c:50:ab:eb:e1:2a:94:15:80:38:9c:85:11:cf:fe:ac:bc:
         02:10:b0:4d:10:3b:6f:c8:d5:d7:12:11:4f:74:7a:c9:5d:f7:
         bc:f9:f1:11:d0:1e:e5:7a:2e:94:81:5d:63:ed:e8:9d:24:41:
         1c:cb:7c:f0:d9:83:da:69:10:45:5c:b4:d5:b9:aa:01:61:8e:
         3a:ab:51:e5:c1:f1:80:9e:30:bd:08:81:7f:1f:4e:fa:2e:0f:
         ba:b6:a6:fe:a4:d5:ec:85:62:3f:ec:f4:6a:b6:70:fa:80:48:
         d0:e1:52:63:43:a9:aa:b8:19:2d:9f:2c:bc:0b:4a:ff:af:fb:
         f0:1e:53:22:14:75:67:1c:e9:1f:1d:c2:73:2a:ce:4e:bd:96:
         b0:fc:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:20:43 2026 by rpki-client