Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
File:                     3137302e302e3136302e302f32322d3234203d3e20323635303231.roa (raw, json)
Hash identifier:          6ZnV114Te6OVDRYJXe6h1GSltzA5nhtDaOCIndlBOoU=
Subject key identifier:   28:21:37:18:20:00:35:2D:FA:DF:29:58:D6:49:FE:F5:D2:C7:EE:E4
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       03E1E728F107814480A2DF1C01222902BC97C2D9
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
Signing time:             Mon 26 Oct 2026 02:38:22 +0000
ROA not before:           Mon 26 Oct 2026 02:33:22 +0000
ROA not after:            Mon 25 Oct 2027 02:38:22 +0000
asID:                     265021
IP address blocks:        170.0.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:e7:28:f1:07:81:44:80:a2:df:1c:01:22:29:02:bc:97:c2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:22 2026 GMT
            Not After : Oct 25 02:38:22 2027 GMT
        Subject: CN=282137182000352DFADF2958D649FEF5D2C7EEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:d6:d9:c5:11:4c:33:65:95:eb:9c:47:d9:
                    11:0a:21:37:93:75:c8:e9:10:12:de:91:ec:e4:99:
                    36:6b:8d:69:ef:a0:12:fe:a7:bc:1e:cf:b8:80:63:
                    5b:0e:38:80:75:43:0b:fb:91:fd:6f:dc:7f:66:0c:
                    75:3e:f6:ff:cd:db:6e:d6:1f:b7:c8:64:26:21:a2:
                    7d:1b:97:73:20:a1:a4:f3:38:d2:d5:1e:13:9e:77:
                    c3:4c:84:b7:c9:79:d5:95:be:5a:59:98:22:c7:ee:
                    0e:63:37:df:99:b3:5a:2f:de:bb:7f:f4:92:75:78:
                    3e:4a:ed:3e:53:99:0a:d6:ef:56:ac:5d:b3:2f:ce:
                    b0:94:ca:17:d9:6e:14:96:0e:62:49:ff:cf:3c:c5:
                    a1:ae:37:0c:98:56:4b:eb:a0:7d:51:91:2c:b1:91:
                    53:f9:d4:85:17:7f:03:23:02:b7:d3:27:1a:70:89:
                    2e:60:a1:f0:4c:c1:bb:07:af:f6:24:92:d1:5c:0e:
                    c1:3b:18:dc:c4:31:ce:1e:9b:00:67:ed:51:5d:09:
                    3a:04:cf:d3:9c:63:bd:47:f5:bd:76:58:cf:9e:16:
                    03:5e:b1:27:15:98:9b:61:da:37:b7:b9:c9:fb:48:
                    50:9d:86:21:cd:da:36:07:56:7f:36:44:6a:f2:c0:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:21:37:18:20:00:35:2D:FA:DF:29:58:D6:49:FE:F5:D2:C7:EE:E4
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:e1:b9:9f:bb:10:fc:1b:ed:ec:c4:58:10:55:2d:f6:0f:
         a7:12:3b:6c:77:db:0d:8a:b9:02:8e:d4:f1:58:c8:78:31:43:
         79:e9:33:de:e1:56:75:b5:1b:99:ae:f4:65:99:b2:fe:32:dc:
         ad:31:1d:ee:78:0f:b5:7a:54:5a:37:0c:3f:40:42:07:c3:f5:
         10:cc:98:29:8c:2f:51:7a:21:32:72:1d:d5:67:af:7d:89:f2:
         ff:a3:46:51:24:e2:f6:24:37:5c:80:a7:9e:5f:61:5e:b9:f4:
         43:dd:7c:64:bb:16:db:5f:5a:bb:5a:c8:3a:b6:cc:cb:e3:7e:
         c7:a7:d4:5d:0f:f3:cc:d9:aa:33:de:59:b9:00:86:ae:7e:79:
         c9:36:ff:35:a5:4f:85:29:a0:65:38:27:11:84:c0:50:ae:e4:
         a8:24:5b:d0:8b:81:f7:91:84:c8:b9:f4:39:12:5a:9e:c6:ad:
         51:de:de:0e:aa:60:cc:50:e2:4f:ce:7d:4b:1a:0b:df:f9:54:
         50:a2:16:21:23:51:39:ed:01:2a:76:fb:f7:27:02:6a:81:dc:
         12:fa:04:da:65:c8:e5:a3:35:7d:e2:6d:06:17:55:d2:72:1b:
         38:57:eb:28:97:a9:b2:a2:0b:26:92:d7:41:d3:34:85:e7:1c:
         6c:26:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 09:49:15 2026 by rpki-client