Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231342e302f32332d3233203d3e20323639303338.roa
File:                     3137302e3234352e3231342e302f32332d3233203d3e20323639303338.roa (raw, json)
Hash identifier:          EmEAVpQzjxT/oEkiFRCD+lL2HX0X3RS/7GDZONK/x0Y=
Subject key identifier:   50:47:FC:90:36:E4:DE:08:9A:C7:59:4B:7A:99:3D:AC:E7:07:B0:97
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       4C1B5AE8FF823777C5764047D291820CABB05012
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231342e302f32332d3233203d3e20323639303338.roa
Signing time:             Mon 06 Apr 2026 20:41:43 +0000
ROA not before:           Mon 06 Apr 2026 20:36:43 +0000
ROA not after:            Mon 05 Apr 2027 20:41:43 +0000
asID:                     269038
IP address blocks:        170.245.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1b:5a:e8:ff:82:37:77:c5:76:40:47:d2:91:82:0c:ab:b0:50:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Apr  6 20:36:43 2026 GMT
            Not After : Apr  5 20:41:43 2027 GMT
        Subject: CN=5047FC9036E4DE089AC7594B7A993DACE707B097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:1e:7f:8c:9b:e8:d7:74:54:ec:c8:8d:07:
                    fc:11:8f:25:7d:f4:7f:9c:af:63:86:47:79:c0:75:
                    b3:51:47:db:f2:71:e2:be:f8:6e:c0:1a:4c:fe:c9:
                    3a:8e:74:a4:5d:9c:83:3b:c2:14:2d:41:36:6d:db:
                    31:98:ba:db:b6:dd:c3:0d:69:d1:0e:ba:75:96:6f:
                    03:42:16:17:33:85:fc:1c:32:da:86:13:99:8e:65:
                    c4:69:02:05:88:af:14:61:b4:0a:36:2b:6c:09:2c:
                    40:b3:43:6c:0c:44:40:b5:30:22:8a:98:68:e6:d6:
                    a3:2e:61:23:a6:25:63:89:f7:a9:91:61:3f:0b:75:
                    b2:e8:2c:d3:b7:36:25:3b:90:96:04:9f:dc:5f:7a:
                    8c:7a:33:e2:93:80:cc:6e:2e:26:5d:93:d2:e4:40:
                    64:f6:fb:ac:41:4a:3e:73:4a:f8:c4:2d:c5:af:fb:
                    97:c6:50:08:79:97:5d:14:20:99:ba:7b:fa:20:f6:
                    41:fc:c3:c9:79:23:f7:9f:ed:fd:07:de:02:b9:de:
                    10:c7:30:bc:d7:1e:4f:a1:2d:94:70:d8:d8:b9:0b:
                    5b:a5:3f:38:c0:24:91:62:27:e7:63:49:2d:ad:3a:
                    a4:62:71:a5:c7:e4:86:41:3d:12:1b:ec:2e:3b:ba:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:FC:90:36:E4:DE:08:9A:C7:59:4B:7A:99:3D:AC:E7:07:B0:97
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231342e302f32332d3233203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:4a:20:9d:55:f6:ad:63:54:3f:b5:52:e5:59:bb:78:97:e9:
         ef:ac:45:75:97:f4:e7:a9:1b:e4:d5:9b:de:0e:c4:a9:6f:02:
         8d:6c:f1:ff:fe:8f:73:ea:06:32:7c:11:f8:48:37:a7:7b:e2:
         42:40:68:30:60:7f:e6:72:f5:b1:14:26:5e:96:9b:4c:b9:71:
         9c:e4:a0:26:f5:0b:e5:0f:24:e4:c4:0e:fa:de:eb:db:b1:44:
         1e:e3:eb:0b:10:e2:e8:20:3a:4d:4a:a4:00:cb:35:f9:3d:7a:
         c2:dc:65:d6:79:f9:e9:2a:65:dd:39:5a:a2:a0:68:87:7a:b4:
         9b:e3:79:83:f7:14:59:fa:e5:2d:c1:11:9a:fe:76:d1:36:78:
         f5:a0:8a:34:c8:56:f9:bf:72:57:4c:12:f3:b3:d2:54:9c:1d:
         6b:cb:51:8d:a5:05:a4:45:d0:93:ba:b3:49:e0:15:fe:68:9b:
         ef:3f:28:bf:5b:9e:83:21:b6:7d:de:89:3e:6c:95:6a:7a:5f:
         60:9e:ea:d1:2e:99:de:ca:17:f1:24:eb:f9:83:da:1a:20:bb:
         b6:56:01:28:a0:f4:80:d8:bc:da:c2:92:68:23:15:43:bd:32:
         e9:53:b7:35:ed:f1:11:c7:33:ad:c5:b7:a9:d0:7d:52:fe:49:
         8c:5e:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:55:55 2026 by rpki-client