Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa
File:                     3137302e37392e39332e302f32342d3234203d3e20323636323936.roa (raw, json)
Hash identifier:          0Th8S3Z78/z5oLYOZheyGcT8hgcdpls0xfIY3N7kYpE=
Subject key identifier:   60:01:4C:41:FC:4D:64:F5:2E:22:EB:D0:DA:45:6E:6C:E1:FC:FF:E3
Certificate issuer:       /CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
Certificate serial:       1C36949F229AA317264AA51FBCB3054F21E9DBEE
Authority key identifier: CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa
Signing time:             Mon 10 Aug 2026 13:27:13 +0000
ROA not before:           Mon 10 Aug 2026 13:22:13 +0000
ROA not after:            Mon 09 Aug 2027 13:27:13 +0000
asID:                     266296
IP address blocks:        170.79.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:36:94:9f:22:9a:a3:17:26:4a:a5:1f:bc:b3:05:4f:21:e9:db:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
        Validity
            Not Before: Aug 10 13:22:13 2026 GMT
            Not After : Aug  9 13:27:13 2027 GMT
        Subject: CN=60014C41FC4D64F52E22EBD0DA456E6CE1FCFFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:d6:16:c7:55:35:b0:6a:a7:c9:d1:33:2d:
                    1d:22:1b:11:de:a3:cd:1f:00:c4:1f:0c:7a:f3:05:
                    8b:72:b1:c9:7b:1c:20:52:29:0e:1a:7f:55:e9:28:
                    9c:a6:b2:08:b4:a5:6b:f2:ec:7b:fc:53:d9:fe:db:
                    a0:bf:15:b6:1e:a0:31:94:72:63:80:cf:cd:2d:7a:
                    ff:ac:eb:8d:b9:ac:bc:ec:68:50:e7:4d:e0:33:3f:
                    50:81:5d:d2:52:96:6b:00:30:ac:9f:6c:b5:e4:13:
                    cf:26:9a:a0:87:40:46:65:11:18:7e:cc:37:17:2f:
                    50:3e:80:c3:f6:ca:0c:56:b5:17:5b:9e:2a:b7:a6:
                    87:ff:4e:b1:2f:3e:c0:f7:96:3b:2b:33:fc:61:d3:
                    92:15:94:4f:6d:58:32:b3:8b:68:cc:14:54:cb:61:
                    cb:36:58:86:43:e7:e3:08:98:74:9c:51:76:ae:88:
                    a4:e5:4e:ef:7e:57:12:a4:fa:37:42:26:b8:46:6b:
                    96:5b:ae:d6:89:4d:51:b4:95:8f:e6:ce:b5:fb:58:
                    8e:08:a5:7e:f1:04:06:c3:48:3c:38:90:59:0a:b3:
                    0b:57:9a:06:40:d3:4c:ca:7b:b8:cf:2e:21:5a:01:
                    e2:7e:08:cd:56:01:a9:88:5b:68:04:ec:c3:4c:d5:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:01:4C:41:FC:4D:64:F5:2E:22:EB:D0:DA:45:6E:6C:E1:FC:FF:E3
            X509v3 Authority Key Identifier:
                keyid:CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a2:6c:e3:79:89:38:c9:00:51:b5:51:8e:a7:e9:dc:5f:08:
         1a:af:98:e7:73:d4:05:cd:26:ae:7c:8d:3c:92:fd:92:53:f2:
         74:33:79:e7:c8:c1:d1:92:f0:c4:bf:3a:57:9f:b5:40:b3:2d:
         ee:d5:9f:db:73:8d:b1:38:5c:1d:be:74:95:02:e0:cd:21:d7:
         03:f8:ab:0a:a4:c1:35:a9:d1:65:36:e1:73:3d:a6:ef:d2:92:
         b1:d8:ac:36:d9:17:23:8e:0d:a0:cc:23:07:6b:07:b1:e3:d4:
         42:ec:41:46:ca:0a:76:f1:24:b8:8c:e3:65:2e:7e:0f:55:61:
         56:fe:ec:26:6c:2b:8a:0a:43:1e:1c:1a:2d:31:c4:20:fb:dc:
         03:0f:36:73:33:db:38:d7:80:77:5a:56:b6:a2:d3:f0:23:2d:
         8e:10:27:15:35:b3:e7:d5:e4:ac:65:b8:4c:bc:62:e7:35:81:
         be:fd:2e:49:5a:57:d4:26:6e:d0:5b:58:29:b8:78:5f:31:e5:
         6c:c6:f4:e3:af:49:67:cb:8a:30:d6:3f:5d:52:1c:73:1c:51:
         eb:e3:8b:00:d7:ae:60:47:21:7c:40:df:71:14:45:f9:fa:fe:
         2b:be:f1:7c:db:5b:e3:55:c5:81:f4:64:0e:a7:8c:a6:20:90:
         ed:68:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:59:50 2026 by rpki-client