Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39342e302f32342d3234203d3e20323636323936.roa
File:                     3137302e37392e39342e302f32342d3234203d3e20323636323936.roa (raw, json)
Hash identifier:          9AXOTyrZZwIyjogyoxJdhxudTzGSbQDOPqR/nHXGCRY=
Subject key identifier:   00:90:2C:E4:D1:7F:87:98:E8:1E:C5:3E:12:48:2C:49:B9:3A:1D:4E
Certificate issuer:       /CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
Certificate serial:       59057461BC03CD1DC42B02C1DF1AF7B68F9BE066
Authority key identifier: CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39342e302f32342d3234203d3e20323636323936.roa
Signing time:             Mon 10 Aug 2026 13:27:16 +0000
ROA not before:           Mon 10 Aug 2026 13:22:16 +0000
ROA not after:            Mon 09 Aug 2027 13:27:16 +0000
asID:                     266296
IP address blocks:        170.79.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:05:74:61:bc:03:cd:1d:c4:2b:02:c1:df:1a:f7:b6:8f:9b:e0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
        Validity
            Not Before: Aug 10 13:22:16 2026 GMT
            Not After : Aug  9 13:27:16 2027 GMT
        Subject: CN=00902CE4D17F8798E81EC53E12482C49B93A1D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:7e:a3:72:ec:e0:b1:14:ae:52:b3:5b:17:
                    0a:10:d6:a0:9e:47:40:e7:98:fb:3e:47:37:25:6b:
                    f3:68:a2:03:e5:88:fa:49:eb:9b:6e:c0:80:a9:a0:
                    a7:64:87:63:7e:69:2a:2e:90:39:6f:4f:9f:79:ab:
                    17:af:82:6e:af:28:3c:df:d5:dd:89:e0:c1:63:27:
                    6d:ed:3a:bd:c9:90:6c:ec:2c:64:8b:8b:ed:cd:9f:
                    20:3a:54:b2:12:06:c9:76:e1:8f:2a:86:f8:c6:41:
                    aa:2c:7e:b3:b7:2d:cb:c3:11:8f:ec:91:cc:5b:7a:
                    5f:15:73:ff:51:e8:38:eb:0e:e6:29:78:e1:14:05:
                    26:f1:3f:5a:af:2e:4b:c8:12:81:44:61:0d:f1:38:
                    3e:6e:a0:27:4b:cb:7b:93:a7:21:eb:2d:96:7d:c9:
                    67:6f:28:ac:85:1e:f3:0e:85:f0:72:b8:8a:b0:f6:
                    91:b3:17:a1:ae:7a:47:11:16:59:55:52:8e:6b:2b:
                    55:c9:c7:86:0e:ee:8f:8d:e3:93:cb:45:26:68:3c:
                    8d:a0:a9:cb:4e:3e:28:62:46:34:96:aa:38:0d:42:
                    72:24:d2:88:a3:56:34:0d:91:29:1a:b6:15:a4:8b:
                    bd:9a:6f:f9:8a:64:09:3e:96:96:6d:d7:b1:42:94:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:2C:E4:D1:7F:87:98:E8:1E:C5:3E:12:48:2C:49:B9:3A:1D:4E
            X509v3 Authority Key Identifier:
                keyid:CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/3137302e37392e39342e302f32342d3234203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:df:73:47:63:35:e6:66:62:81:3a:28:a5:a3:f9:92:5c:8b:
         c2:b3:33:64:1b:fd:1f:17:16:b2:e4:9f:f6:4b:9e:15:a8:7e:
         aa:87:59:a7:da:56:3a:bf:29:c9:e9:10:78:59:d7:76:84:06:
         06:37:79:48:76:e1:31:84:36:0c:8f:ce:8f:0e:bb:58:46:78:
         48:f3:2d:cf:4f:ee:03:08:56:91:89:7c:d5:ee:6d:36:dd:29:
         b4:01:ef:e8:f0:ff:32:04:5b:e4:89:02:dc:ae:70:bc:87:a6:
         ee:23:bf:e3:02:56:d1:b1:aa:1d:1b:f4:39:c2:41:c5:e5:db:
         7a:ce:2b:6b:4c:d3:9e:23:bb:6a:39:97:66:39:5d:49:7f:b3:
         f0:5e:bf:73:18:01:75:ec:98:9d:32:74:1a:0d:5d:b3:2b:17:
         b8:fe:da:38:69:e3:d8:51:bd:18:23:da:8b:29:95:ca:6f:a7:
         b5:fc:1f:af:fb:e3:bb:ad:1e:aa:33:a9:0f:bc:28:5b:28:35:
         6a:be:3f:cd:45:03:8a:8f:54:1d:ac:8b:f4:df:4a:1b:27:de:
         94:0e:0d:dc:74:55:5f:d6:12:d9:2a:ce:1a:e6:83:eb:b8:a9:
         20:7d:8f:f2:6a:70:b3:b1:97:b1:a2:f4:64:f9:be:45:0b:8b:
         08:12:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:59:49 2026 by rpki-client