Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3332203d3e20323636333032.roa
File:                     3137302e37392e3136382e302f32322d3332203d3e20323636333032.roa (raw, json)
Hash identifier:          G80FV6fMKC3CFonGTVd+9d2TDSNppIj7wlDDlGEAAQs=
Subject key identifier:   DB:EB:69:DA:68:CF:A1:B0:CE:ED:60:3F:F5:29:59:CA:D4:8E:24:43
Certificate issuer:       /CN=A2E41ECCF5A88FBD57A4935F3CBA5452B4207935
Certificate serial:       463E7A54BE7E600E05DB546DEBAA8196B29D40DC
Authority key identifier: A2:E4:1E:CC:F5:A8:8F:BD:57:A4:93:5F:3C:BA:54:52:B4:20:79:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3332203d3e20323636333032.roa
Signing time:             Tue 25 Aug 2026 19:46:50 +0000
ROA not before:           Tue 25 Aug 2026 19:41:50 +0000
ROA not after:            Tue 24 Aug 2027 19:46:50 +0000
asID:                     266302
IP address blocks:        170.79.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3e:7a:54:be:7e:60:0e:05:db:54:6d:eb:aa:81:96:b2:9d:40:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E41ECCF5A88FBD57A4935F3CBA5452B4207935
        Validity
            Not Before: Aug 25 19:41:50 2026 GMT
            Not After : Aug 24 19:46:50 2027 GMT
        Subject: CN=DBEB69DA68CFA1B0CEED603FF52959CAD48E2443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:4a:c8:92:36:c3:d5:20:63:18:c8:38:4f:
                    62:f6:34:a8:e4:3e:d7:2e:41:52:33:2b:dc:b4:5a:
                    38:e1:65:60:13:cb:12:1a:de:50:6e:74:ec:7c:ae:
                    36:b9:af:cc:71:59:20:64:3e:8f:a7:bc:f2:18:3f:
                    a4:cc:3a:2a:7f:75:de:18:fe:04:e4:3b:2a:f4:91:
                    99:6b:c5:c9:b5:0a:b0:44:ce:99:96:b0:f1:62:27:
                    a1:9f:7b:e1:cf:61:58:40:a2:1c:cb:95:8c:ef:ab:
                    40:ef:91:c9:94:bd:db:87:33:27:00:34:57:2e:0e:
                    89:c3:19:2b:60:67:3b:a6:30:de:c9:e0:73:c2:dc:
                    4d:a8:d9:03:94:8b:ed:9a:9d:4a:ec:e4:58:76:0e:
                    21:93:20:d2:33:42:42:f9:3a:c1:50:36:0d:b6:0a:
                    c7:7e:c4:7c:32:cb:09:ae:29:8d:d4:a5:5c:87:fc:
                    1b:cb:3c:40:d8:67:4a:80:62:d5:f5:0d:c0:5a:76:
                    eb:a3:cf:66:a6:34:48:e2:8f:70:75:fe:ba:0f:da:
                    c5:2f:7d:81:53:39:de:47:06:1a:dc:33:9e:e0:a9:
                    24:cd:a4:43:3d:8d:6f:78:30:9d:a5:31:81:49:ec:
                    1f:eb:77:8c:8c:52:17:3a:d8:25:6d:6a:87:4d:f6:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EB:69:DA:68:CF:A1:B0:CE:ED:60:3F:F5:29:59:CA:D4:8E:24:43
            X509v3 Authority Key Identifier:
                keyid:A2:E4:1E:CC:F5:A8:8F:BD:57:A4:93:5F:3C:BA:54:52:B4:20:79:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E41ECCF5A88FBD57A4935F3CBA5452B4207935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3332203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:97:5a:28:bf:00:5b:4a:28:17:5a:ff:6f:f0:d2:ec:b8:
         62:9c:2a:1a:11:a6:b6:36:ab:8f:c1:fc:de:55:aa:cd:88:ab:
         df:42:15:38:e7:b7:17:b8:4c:ae:53:39:a9:67:18:7c:5a:bc:
         7d:4d:54:f2:f5:4f:e9:0e:f1:7a:bc:d8:94:d4:3d:c1:96:ef:
         02:88:32:b4:5a:f1:c5:fa:c0:db:a8:b7:2c:42:03:71:97:a8:
         da:6e:32:de:73:1e:f2:75:08:65:1b:94:67:3a:e1:2e:83:43:
         de:9d:8e:c9:f5:4a:02:fe:08:bb:e9:a8:fc:fb:40:89:18:49:
         0b:3b:f2:ab:82:3d:15:68:8b:11:83:3e:b8:fd:90:bf:ef:b3:
         42:f6:9a:d6:a8:79:b0:e8:0a:8f:a9:3d:cd:44:36:99:68:fa:
         5e:b8:d4:d8:dd:16:e5:0d:ae:19:61:c0:09:ab:8c:cb:ff:c6:
         19:4f:02:6a:c4:83:91:a7:1a:f9:66:bf:0e:f0:e5:56:16:82:
         d0:09:85:77:3c:e9:58:e2:dc:5b:18:a8:11:1d:54:30:d1:1e:
         d3:83:80:83:90:e9:df:35:af:26:4e:df:c9:2d:3f:2e:eb:f0:
         c0:08:d5:f1:2d:72:58:a8:47:22:f2:94:4c:8d:af:2d:e6:bc:
         7a:0e:75:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURj56VL5+YA4F21Rt66qBlrKdQNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNDFFQ0NGNUE4OEZCRDU3QTQ5MzVGM0NCQTU0NTJC
NDIwNzkzNTAeFw0yNjA4MjUxOTQxNTBaFw0yNzA4MjQxOTQ2NTBaMDMxMTAvBgNV
BAMTKERCRUI2OURBNjhDRkExQjBDRUVENjAzRkY1Mjk1OUNBRDQ4RTI0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTekrIkjbD1SBjGMg4T2L2NKjk
PtcuQVIzK9y0WjjhZWATyxIa3lBudOx8rja5r8xxWSBkPo+nvPIYP6TMOip/dd4Y
/gTkOyr0kZlrxcm1CrBEzpmWsPFiJ6Gfe+HPYVhAohzLlYzvq0DvkcmUvduHMycA
NFcuDonDGStgZzumMN7J4HPC3E2o2QOUi+2anUrs5Fh2DiGTINIzQkL5OsFQNg22
Csd+xHwyywmuKY3UpVyH/BvLPEDYZ0qAYtX1DcBaduujz2amNEjij3B1/roP2sUv
fYFTOd5HBhrcM57gqSTNpEM9jW94MJ2lMYFJ7B/rd4yMUhc62CVtaodN9j/HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2+tp2mjPobDO7WA/9SlZytSOJEMwHwYDVR0j
BBgwFoAUouQezPWoj71XpJNfPLpUUrQgeTUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlR0ZXQ1R1lhajdZMkpBVFg2MmtDWlROeTdSMm9KcXNNdVVvZVRQU1h5
ZUUvMC9BMkU0MUVDQ0Y1QTg4RkJENTdBNDkzNUYzQ0JBNTQ1MkI0MjA3OTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyRTQxRUNDRjVBODhGQkQ1
N0E0OTM1RjNDQkE1NDUyQjQyMDc5MzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUdGV0NUdZYWo3WTJKQVRYNjJrQ1pUTnk3UjJvSnFzTXVVb2VUUFNYeWVFLzAv
MzEzNzMwMmUzNzM5MmUzMTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT6gwDQYJKoZIhvcNAQELBQADggEBALgHl1oo
vwBbSigXWv9v8NLsuGKcKhoRprY2q4/B/N5Vqs2Iq99CFTjntxe4TK5TOalnGHxa
vH1NVPL1T+kO8Xq82JTUPcGW7wKIMrRa8cX6wNuotyxCA3GXqNpuMt5zHvJ1CGUb
lGc64S6DQ96djsn1SgL+CLvpqPz7QIkYSQs78quCPRVoixGDPrj9kL/vs0L2mtao
ebDoCo+pPc1ENplo+l641NjdFuUNrhlhwAmrjMv/xhlPAmrEg5GnGvlmvw7w5VYW
gtAJhXc86Vji3FsYqBEdVDDRHtODgIOQ6d81ryZO38ktPy7r8MAI1fEtclioRyLy
lEyNry3mvHoOddw=
-----END CERTIFICATE-----