Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323639303338.roa
File:                     3137302e3234352e3231332e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier:          v7auXxQpwoXqhe93D4vt4HLBDl+7U7wF49seUDQgTRc=
Subject key identifier:   7D:6A:62:0B:63:2D:A6:E8:59:96:15:CE:68:A8:98:D8:A8:77:A6:38
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       20E5EE7E86A505146299944284AEB9553C176885
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323639303338.roa
Signing time:             Mon 06 Apr 2026 20:15:41 +0000
ROA not before:           Mon 06 Apr 2026 20:10:41 +0000
ROA not after:            Mon 05 Apr 2027 20:15:41 +0000
asID:                     269038
IP address blocks:        170.245.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e5:ee:7e:86:a5:05:14:62:99:94:42:84:ae:b9:55:3c:17:68:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Apr  6 20:10:41 2026 GMT
            Not After : Apr  5 20:15:41 2027 GMT
        Subject: CN=7D6A620B632DA6E8599615CE68A898D8A877A638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:f6:7b:b3:de:b3:55:41:e8:8e:f4:19:b6:
                    1c:37:3c:9f:63:b5:0a:d9:7a:e8:2b:cd:2b:7b:3d:
                    69:e0:ad:69:04:b9:c5:36:a1:9a:55:c7:80:25:ab:
                    97:b4:0e:fe:dd:a8:c2:e8:a1:3a:d7:c7:8e:08:96:
                    63:f9:fe:2e:53:34:17:03:02:0e:cc:37:04:15:d0:
                    83:95:80:d8:d6:7a:ee:ab:8c:80:a1:c5:77:8c:9b:
                    2b:db:80:fd:e4:8a:ea:30:90:62:22:d2:3f:93:f6:
                    5e:33:81:c3:9d:2b:a8:dd:59:f8:d3:f8:bb:47:d4:
                    3f:7e:9e:55:f6:1c:3d:68:00:28:72:74:aa:d8:10:
                    14:38:fb:38:7d:50:80:3e:c7:fc:86:3a:ac:b8:9b:
                    cc:72:05:d6:e0:97:e3:ec:9e:f5:8a:fe:91:24:46:
                    f3:1b:fb:91:d5:7a:71:92:b1:43:c1:49:ac:a0:2f:
                    42:e8:aa:72:56:e5:9d:8a:f7:4c:68:fd:7e:20:a5:
                    4f:36:2d:98:2e:15:86:36:5c:18:cd:23:7c:a6:b3:
                    7f:90:b0:e6:10:0f:27:e2:39:19:7f:ad:7b:8c:87:
                    51:48:e2:29:67:fd:fb:29:3e:4e:68:56:ab:de:a6:
                    97:5e:88:1f:07:95:ba:e3:a1:d4:49:c4:92:ad:1f:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6A:62:0B:63:2D:A6:E8:59:96:15:CE:68:A8:98:D8:A8:77:A6:38
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:06:3c:1f:b9:1b:6b:48:74:ca:40:72:b4:87:43:57:85:2e:
         72:ac:31:76:53:94:d1:54:c2:ee:86:15:da:ac:9e:14:97:28:
         21:30:40:28:c8:d5:7f:8a:45:fe:ba:3b:9c:8c:2d:53:f5:ed:
         f9:1d:97:c4:19:82:e0:18:31:fd:ec:fe:ce:d1:3c:f7:17:fd:
         8f:c1:a2:f9:f3:63:e8:d7:23:3e:e3:95:e5:4c:6a:d0:9b:c8:
         d4:c9:47:75:d3:bc:81:0f:80:59:32:a4:2f:c2:42:ae:df:2d:
         a2:85:ab:a1:f1:b6:12:34:78:10:40:e6:46:96:13:7c:a7:11:
         b0:ca:47:7b:5f:c7:08:8c:51:90:03:e6:41:2b:40:69:92:d5:
         1b:dd:52:6a:bc:e1:90:32:8f:5e:07:f3:42:40:8e:79:c7:64:
         fc:0f:91:53:36:b3:8c:5b:d9:3a:c2:a2:d6:3a:81:eb:e2:62:
         4b:02:fc:c6:67:79:18:3a:95:1e:e5:8e:28:f3:fe:3c:9c:a4:
         f7:3a:f8:b4:12:80:b0:f1:fb:da:0d:9f:d2:87:d2:b4:28:aa:
         c8:8f:ba:20:26:49:f4:5d:d2:9e:2a:dc:69:09:3f:fd:b8:da:
         85:fe:3a:83:64:c2:2f:8a:98:ec:3a:de:3a:f1:6e:39:56:00:
         cd:2b:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:55:53 2026 by rpki-client