Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa
File:                     3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa (raw, json)
Hash identifier:          5aOQUBLH0f8WLFow7csT2Sqeo8z497YBAR/HzuwazW4=
Subject key identifier:   ED:16:09:E4:9B:E5:4E:81:FF:40:B5:46:69:FD:6B:BE:00:81:27:F3
Certificate issuer:       /CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
Certificate serial:       26CD2F98876557F126A2EE33DE3C2F84BD434119
Authority key identifier: 41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa
Signing time:             Fri 11 Sep 2026 19:37:43 +0000
ROA not before:           Fri 11 Sep 2026 19:32:43 +0000
ROA not after:            Fri 10 Sep 2027 19:37:43 +0000
asID:                     266457
IP address blocks:        170.82.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 05:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:2f:98:87:65:57:f1:26:a2:ee:33:de:3c:2f:84:bd:43:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
        Validity
            Not Before: Sep 11 19:32:43 2026 GMT
            Not After : Sep 10 19:37:43 2027 GMT
        Subject: CN=ED1609E49BE54E81FF40B54669FD6BBE008127F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:b5:e7:ef:45:f3:8c:50:9b:7d:7c:69:b3:
                    0e:36:b4:6a:3b:01:db:9b:a6:05:99:43:4f:de:6c:
                    ae:8b:21:1a:35:f3:02:f2:da:e1:87:70:b1:bb:f7:
                    1a:f1:be:a3:9d:e0:42:f0:73:55:73:e7:3d:e3:8b:
                    38:31:30:e7:93:13:71:f5:d0:f9:0c:fa:12:6d:ab:
                    a1:f0:80:90:0a:4f:e3:55:a5:90:a3:4a:6b:ce:4d:
                    ac:31:fb:79:bb:5a:f5:fd:fb:43:6a:a3:17:d4:e8:
                    94:c4:94:ea:50:3a:42:42:df:92:e5:d3:94:0f:f7:
                    fa:fe:e6:55:fb:ee:25:95:55:4c:2b:76:11:01:d5:
                    0d:03:00:3f:c2:21:7a:65:f0:6c:d0:b9:a2:99:fb:
                    55:75:b0:7a:42:05:65:6b:58:71:7a:d5:41:35:bf:
                    91:2c:40:2d:6b:e5:09:63:5c:82:93:f5:c0:05:23:
                    09:69:1a:eb:e4:dd:e0:db:d8:7a:15:ac:67:f4:8a:
                    65:29:eb:b3:35:01:e4:de:25:74:94:13:24:0e:4a:
                    13:31:d5:53:c7:20:7d:c8:54:c7:16:84:ed:7f:51:
                    99:76:2d:de:6a:b1:b6:da:cd:7f:65:d6:cb:72:e2:
                    3b:ed:79:e7:d8:3b:52:4e:78:f9:58:e9:d7:a8:3b:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:09:E4:9B:E5:4E:81:FF:40:B5:46:69:FD:6B:BE:00:81:27:F3
            X509v3 Authority Key Identifier:
                keyid:41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:53:bd:93:b5:d9:0c:cb:4a:4c:b0:95:f0:25:95:37:6d:91:
         98:8b:ab:9a:f0:12:6c:5d:a2:68:f9:43:2b:11:cd:30:96:17:
         61:72:24:c2:b0:c1:23:19:be:a9:4b:af:3a:4e:04:82:da:80:
         fe:c1:b1:78:df:4a:13:91:e9:7d:60:07:46:ee:9a:aa:e4:45:
         7a:e6:88:3b:12:f2:75:76:c0:ad:7f:97:e4:46:06:19:39:fc:
         39:b9:6c:71:cd:1a:d5:f3:0d:f9:29:2f:b6:01:47:c3:2c:15:
         ab:ba:e8:2b:11:c3:c8:0e:fc:fc:86:74:15:15:b9:3a:ec:7c:
         ac:2f:ed:d3:b7:ca:8b:70:8c:a3:73:69:65:0a:55:02:77:7f:
         a9:07:33:64:f2:c8:94:c8:33:66:f6:38:b7:b3:fa:0e:3d:5c:
         29:d3:62:37:4e:a9:57:0b:72:30:77:33:ef:9a:5b:a0:f9:71:
         9b:52:b0:11:a4:5e:dc:9f:58:d7:eb:82:7e:c0:28:94:16:72:
         a8:7f:68:42:e4:ed:40:c4:ed:aa:e5:61:73:89:fe:85:ab:a8:
         5e:50:9d:68:5f:49:5d:e2:ae:71:d0:f0:f2:16:7b:1f:64:ee:
         d6:5d:e9:e4:bf:c7:17:21:06:bf:9a:37:e2:8d:36:13:cf:6f:
         2c:e0:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:15:07 2026 by rpki-client