Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa
File:                     3137302e37382e332e302f32342d3234203d3e20323635343931.roa (raw, json)
Hash identifier:          WzfwiXw11qpyykM9C2QqAEQf+eKR20527nzGE1U7+P8=
Subject key identifier:   29:09:A1:08:90:46:B9:23:A2:33:B5:A5:53:DB:F8:B9:E7:6E:4A:8A
Certificate issuer:       /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
Certificate serial:       26574D1AF29DF7EF4A01CCB05477A6DC2F6DCDA1
Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa
Signing time:             Fri 27 Mar 2026 13:14:02 +0000
ROA not before:           Fri 27 Mar 2026 13:09:02 +0000
ROA not after:            Fri 26 Mar 2027 13:14:02 +0000
asID:                     265491
IP address blocks:        170.78.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 21:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:57:4d:1a:f2:9d:f7:ef:4a:01:cc:b0:54:77:a6:dc:2f:6d:cd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
        Validity
            Not Before: Mar 27 13:09:02 2026 GMT
            Not After : Mar 26 13:14:02 2027 GMT
        Subject: CN=2909A1089046B923A233B5A553DBF8B9E76E4A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:12:db:ef:b6:aa:c1:c1:cc:3b:7e:75:29:
                    a8:d9:5e:bf:20:0f:cf:10:39:aa:c1:ee:2f:d9:6b:
                    46:a5:36:23:83:ea:06:ac:72:e1:d1:74:cf:70:e8:
                    d0:09:5c:bf:23:92:08:c1:35:76:ae:45:20:b7:53:
                    6f:ac:b2:76:21:30:96:18:3a:a4:10:90:b2:25:23:
                    d0:f6:26:10:d0:88:c9:65:68:57:33:98:bc:ef:28:
                    ea:82:45:1a:21:06:56:1a:51:3a:66:fe:a8:6c:8c:
                    61:77:f7:30:29:33:c1:0a:e0:4c:eb:bd:78:42:c5:
                    a6:02:f3:9a:bc:3d:b9:0b:a5:10:4d:17:91:87:1c:
                    53:30:12:05:77:c9:2c:e2:e2:1d:7a:e4:c8:58:4c:
                    fb:3c:93:a4:14:e5:2b:db:87:24:44:c4:77:f9:41:
                    05:bb:c2:74:02:1a:ce:9e:dd:0a:44:5a:7f:c3:da:
                    4a:9f:ef:d2:a1:44:29:cb:aa:51:cd:12:df:4e:49:
                    5d:96:6e:59:67:05:77:99:ec:56:c4:62:97:e4:82:
                    89:f3:52:33:e2:ee:41:d8:72:c3:be:83:50:2b:29:
                    1b:6b:62:a5:57:07:9f:47:48:32:4b:5b:9f:0c:3e:
                    45:1a:52:67:a6:b6:69:7e:5a:c8:23:4a:e7:8d:7c:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:A1:08:90:46:B9:23:A2:33:B5:A5:53:DB:F8:B9:E7:6E:4A:8A
            X509v3 Authority Key Identifier:
                keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:fc:08:63:54:74:d3:d1:d6:66:ab:a3:cc:3c:f6:e3:a6:
         41:59:a7:42:a9:1d:20:fc:49:e7:56:44:7b:29:dc:b2:69:43:
         97:4b:76:3b:06:aa:09:de:ef:42:71:3b:6b:8f:30:b2:fb:fc:
         42:06:88:d5:81:db:64:e0:3b:21:ae:59:68:9d:55:56:eb:20:
         d2:97:7f:66:49:ff:ac:a2:01:75:62:16:58:9e:15:44:8d:9b:
         ba:7e:be:7f:78:da:d2:de:42:b0:5e:b5:c6:02:ea:16:5e:04:
         d0:94:90:74:ff:e0:d0:8a:74:bb:f0:5b:bc:b9:34:a1:da:df:
         ad:12:7d:eb:36:cd:c4:4a:09:b8:b6:c1:e4:ad:85:25:d6:2a:
         ce:18:0c:ce:b2:56:49:92:9e:55:e6:8d:55:66:2b:b2:8a:f5:
         75:ff:a9:30:0e:54:b4:c8:71:cf:bc:19:5f:bf:ba:17:7a:dc:
         7a:d1:41:54:8e:d3:20:2d:35:1f:7d:25:a5:5c:1b:e7:6a:54:
         57:de:90:65:39:d0:64:fe:ca:0a:a7:8f:f7:af:b0:7c:71:4d:
         36:4f:db:30:12:a7:5e:ce:5f:2f:d8:09:19:9a:46:96:c6:fd:
         73:03:a7:4a:66:9b:f7:f0:35:8a:53:4b:12:56:80:3b:09:00:
         a0:13:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:54 2026 by rpki-client