Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (raw, json)
Hash identifier:          mAhI0vRRaSwKCLrIpsCoZxiw3uSoXbrhqbQ6IaN4lqE=
Subject key identifier:   6A:FE:43:5E:82:68:AE:1D:16:25:1B:26:BC:65:FE:E4:87:C5:7B:D2
Certificate issuer:       /CN=90705F919BBE46351F72D4F40C331818D517C16A
Certificate serial:       5019318DFFC8C9821730EDA110E0CAE959EBFA23
Authority key identifier: 90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
Signing time:             Fri 21 Aug 2026 13:28:59 +0000
ROA not before:           Fri 21 Aug 2026 13:23:59 +0000
ROA not after:            Fri 20 Aug 2027 13:28:59 +0000
asID:                     266022
IP address blocks:        170.245.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:31:8d:ff:c8:c9:82:17:30:ed:a1:10:e0:ca:e9:59:eb:fa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90705F919BBE46351F72D4F40C331818D517C16A
        Validity
            Not Before: Aug 21 13:23:59 2026 GMT
            Not After : Aug 20 13:28:59 2027 GMT
        Subject: CN=6AFE435E8268AE1D16251B26BC65FEE487C57BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ca:e7:df:dd:3c:b3:2b:6a:49:29:9a:ec:
                    29:2a:52:e3:0e:53:e2:d4:03:f0:1c:5d:89:78:e7:
                    e6:54:93:39:37:27:08:81:00:9f:2e:52:63:c8:30:
                    3d:c0:52:1b:20:38:3c:75:3e:01:d8:8c:be:36:30:
                    0b:02:09:2e:e1:57:15:5e:4c:c0:26:40:ff:ed:bf:
                    64:f5:7a:05:97:78:d4:31:5d:3c:f2:3f:81:71:bc:
                    3c:c6:e8:54:61:5e:2d:ab:e0:76:e8:98:06:96:c8:
                    16:01:df:cc:43:91:66:c7:f7:98:43:21:58:90:a6:
                    58:0b:a8:86:14:9e:27:4c:d7:c0:5e:9d:de:02:22:
                    9c:ad:a4:2a:06:eb:e3:a1:68:1e:32:4c:42:a1:af:
                    9c:22:5b:49:42:18:69:23:ed:77:ce:a9:18:1d:c1:
                    fb:e9:8b:45:50:37:97:14:65:fb:42:22:c2:de:7a:
                    3b:a6:13:11:d6:19:db:ec:f7:48:35:bf:4b:ae:59:
                    5c:20:67:b7:c7:1d:9c:4a:eb:0a:7f:9d:82:07:ec:
                    0c:f4:6a:37:3f:e8:8b:7c:5b:f7:33:69:0e:08:83:
                    8e:44:f9:cc:5a:e7:48:05:35:e6:b5:c8:91:77:16:
                    37:04:0e:4e:33:06:fd:b1:6a:a7:52:49:b7:b1:73:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:43:5E:82:68:AE:1D:16:25:1B:26:BC:65:FE:E4:87:C5:7B:D2
            X509v3 Authority Key Identifier:
                keyid:90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:b2:09:39:38:d4:fb:df:0d:cc:4e:d1:d8:1b:19:a6:68:
         21:a9:90:2e:46:a4:1d:64:c9:95:05:d1:64:7d:df:a5:42:22:
         a7:1c:bb:b2:06:b0:8e:02:39:ea:be:e6:7c:55:59:ea:36:48:
         ea:81:ff:08:1e:52:c9:3a:65:ff:98:a0:a2:b4:bc:25:1c:42:
         bb:4e:9c:d6:dc:fd:c2:d4:5b:92:14:b8:9a:f5:50:2a:33:26:
         48:b1:fd:e2:05:ca:d0:47:42:80:39:1d:8d:b6:df:c3:46:3e:
         ef:95:a3:20:5a:ba:11:5f:e5:44:36:dc:83:49:d2:1a:4e:d1:
         5c:ae:1c:91:db:6e:db:02:f1:0b:ce:3e:61:42:a8:a2:b9:b4:
         f2:5f:d8:38:40:da:73:2a:05:57:9c:ab:54:cd:1f:4f:6c:9a:
         49:1b:fc:8d:f3:f1:04:c2:96:ea:66:85:a3:9b:8e:d2:43:72:
         a3:8f:e9:b4:55:b9:71:e3:9e:3b:3c:a4:4b:99:2b:df:8e:99:
         04:c3:63:45:7b:20:60:50:b1:a8:a9:01:bf:70:08:8e:64:4e:
         47:43:8f:bd:91:15:1d:e0:5d:25:d2:b5:fc:e6:d1:30:14:9e:
         86:12:56:f9:e3:cb:db:50:75:1f:65:fd:87:32:3a:56:2c:65:
         99:b7:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:05:28 2026 by rpki-client