Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3233203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32332d3233203d3e203631393031.roa (raw, json)
Hash identifier:          pE8ZvZ/uZ6oEkK1g/rya+wfzW4t+9BgzP5U15+QV6LM=
Subject key identifier:   43:74:92:A4:16:87:A4:80:53:2A:52:44:0F:37:1A:52:B0:8A:CD:19
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       2EF01AAFE50FEFD40F0C369058B984324021F02B
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3233203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:28 +0000
ROA not before:           Wed 12 Aug 2026 16:13:28 +0000
ROA not after:            Wed 11 Aug 2027 16:18:28 +0000
asID:                     61901
IP address blocks:        170.254.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f0:1a:af:e5:0f:ef:d4:0f:0c:36:90:58:b9:84:32:40:21:f0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:28 2026 GMT
            Not After : Aug 11 16:18:28 2027 GMT
        Subject: CN=437492A41687A480532A52440F371A52B08ACD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:d6:ec:c4:7c:48:88:64:5c:7b:06:ec:16:
                    48:26:fb:02:33:e6:5b:3a:2a:38:73:1c:b2:01:6f:
                    60:7e:23:da:ab:43:f7:f0:ad:5a:1a:09:07:30:5e:
                    ff:2c:0b:e2:b3:f8:9e:f7:49:47:8a:25:62:1f:41:
                    af:cf:b4:f7:34:9c:ec:f6:c3:ba:c2:12:69:d3:91:
                    7b:1d:6e:25:bb:da:b6:59:32:96:cd:5d:99:7e:b7:
                    13:b1:3b:10:7f:30:bd:8d:f3:34:53:1d:8d:8c:b9:
                    18:74:4c:b1:10:c1:cd:f6:35:57:af:27:af:de:b4:
                    83:d9:48:49:a0:a2:7f:a7:6d:da:1f:38:8b:d5:17:
                    c8:23:01:e5:2e:6c:27:9b:d1:89:12:33:a2:a1:dc:
                    63:a4:16:82:f8:73:b8:9f:1c:26:61:11:bd:67:7a:
                    f1:48:a3:da:43:04:23:c8:2b:20:f0:0f:17:62:e7:
                    06:1f:10:ee:ef:16:b7:1f:ee:f1:64:e0:7a:29:1c:
                    2b:48:aa:92:24:85:78:c7:35:61:af:c1:7d:55:b7:
                    e1:8b:7f:a7:db:b0:34:46:c2:c3:00:15:97:04:9e:
                    e4:8d:83:e6:6c:a8:7a:ef:c2:c8:ea:c4:29:71:b6:
                    f7:f4:58:a9:72:e1:14:31:4b:69:c7:b2:3f:cf:e5:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:74:92:A4:16:87:A4:80:53:2A:52:44:0F:37:1A:52:B0:8A:CD:19
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3233203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:98:77:26:a3:ea:69:08:e7:69:57:b6:b7:cc:8d:0b:f0:
         5a:75:b8:12:06:5f:74:b8:87:8c:d7:fd:1b:47:8a:63:07:94:
         a7:65:2f:f4:9e:b1:8a:37:1a:b3:d2:5b:9b:d3:6f:96:a2:e3:
         3b:71:23:9a:cd:ec:2e:cc:b2:cc:fd:d1:40:57:e5:c5:3f:36:
         e2:51:aa:9c:e0:f5:67:a9:44:c5:55:f0:1b:76:c3:6d:9d:29:
         0f:21:d0:2f:42:ce:a2:c8:80:f7:07:81:c0:28:f6:d4:64:4f:
         c1:bc:6e:4f:ce:e1:e9:7b:d4:2c:5e:d4:00:8d:6e:6d:0a:41:
         dc:a6:1f:6c:bd:4b:e3:56:b7:d1:e3:4a:58:e9:4a:60:5c:62:
         4a:b2:5a:6f:40:0d:65:33:2c:f9:b1:08:60:3c:bf:62:91:f4:
         db:c0:ce:8e:f8:d9:06:d4:e0:6b:3a:22:7f:74:b9:0b:89:37:
         3a:54:70:8e:13:6d:c9:1c:af:80:e2:15:8b:97:b7:a1:55:53:
         52:44:fd:29:0e:1e:e0:07:7e:d8:ba:6d:20:b3:5e:61:8c:9c:
         93:72:13:70:f1:38:7d:93:97:71:ab:31:34:18:d8:10:f8:42:
         21:d7:c9:0d:65:76:03:6e:23:ea:f0:bc:08:31:ce:d5:9e:01:
         08:32:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:20 2026 by rpki-client