Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          HfNsKYuMiGkSWF1D75p+JR8P8yLtgF9Q3h4+aQLr5Zk=
Subject key identifier:   D0:69:69:39:4C:F1:CB:02:6B:DF:73:4A:5E:A6:43:53:F0:98:6A:C1
Certificate issuer:       /CN=90705F919BBE46351F72D4F40C331818D517C16A
Certificate serial:       153607F6EB863C1E914DCF21B052922534A161EF
Authority key identifier: 90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
Signing time:             Fri 21 Aug 2026 13:29:00 +0000
ROA not before:           Fri 21 Aug 2026 13:24:00 +0000
ROA not after:            Fri 20 Aug 2027 13:29:00 +0000
asID:                     266022
IP address blocks:        170.245.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:07:f6:eb:86:3c:1e:91:4d:cf:21:b0:52:92:25:34:a1:61:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90705F919BBE46351F72D4F40C331818D517C16A
        Validity
            Not Before: Aug 21 13:24:00 2026 GMT
            Not After : Aug 20 13:29:00 2027 GMT
        Subject: CN=D06969394CF1CB026BDF734A5EA64353F0986AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:07:95:a6:bb:30:c1:76:d8:84:72:a5:ec:
                    60:54:8f:9e:ed:ec:86:d8:70:27:aa:56:0c:2a:55:
                    50:f1:2e:9c:50:9a:7f:9f:f7:fa:11:6e:cf:d4:d3:
                    4a:25:16:94:ed:d4:57:20:64:f1:92:d3:eb:be:20:
                    fe:f4:89:49:98:58:2f:14:26:3c:dd:bf:a3:c9:c8:
                    42:c3:4c:e6:d6:66:ec:93:c7:27:e8:51:18:40:74:
                    08:d5:96:58:b5:78:dd:57:e8:aa:c9:21:23:e3:55:
                    86:61:f6:25:ad:f1:82:42:e4:76:c3:b1:e2:3a:23:
                    ad:9e:9b:6d:9a:46:4c:d7:ed:66:fa:9e:84:e0:fd:
                    24:88:bf:6e:e0:65:cd:00:13:92:4f:7c:a4:6c:55:
                    53:02:90:35:0e:69:c2:c3:af:aa:6c:58:11:a6:5d:
                    c5:80:61:42:ed:a8:47:07:3b:95:91:af:42:71:2f:
                    cb:95:b7:da:c1:7c:c9:20:a5:24:4b:d7:d8:6e:2d:
                    a3:8c:10:e4:ad:83:c5:6b:bb:cb:07:97:d0:fc:ed:
                    78:33:91:07:36:9a:36:c6:d3:44:16:44:8f:08:d9:
                    5a:e8:fc:45:f0:23:2f:5c:25:52:06:6c:00:bf:7f:
                    61:f7:b9:d6:5f:ed:4f:e7:43:7a:64:d6:a3:ea:bc:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:69:39:4C:F1:CB:02:6B:DF:73:4A:5E:A6:43:53:F0:98:6A:C1
            X509v3 Authority Key Identifier:
                keyid:90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:77:36:12:ca:7e:0c:1e:58:4a:fd:46:04:e8:e0:fa:9a:1f:
         be:ea:ca:25:5b:45:27:e8:a3:7c:a2:94:42:5c:f5:c5:be:b1:
         43:98:e1:df:ee:f8:14:95:de:8c:15:38:c1:13:7d:67:06:3e:
         e2:d3:b8:c7:4d:05:1d:e8:61:91:9a:16:45:22:cd:c1:e2:b8:
         e9:4e:71:7a:af:f8:70:cb:4b:c9:64:b6:61:58:af:d6:f6:5f:
         01:8a:6d:59:31:87:27:18:4c:db:d9:20:8f:d3:a3:37:16:3d:
         a2:ca:70:75:6d:dd:b8:47:3f:77:13:2f:23:5f:c8:16:91:4a:
         17:09:85:b8:f9:86:a6:8a:2e:c4:ca:b9:1d:af:e7:b0:97:a1:
         08:f8:49:7c:47:74:a5:b8:ed:da:6a:eb:cc:c3:ba:40:cf:07:
         a4:66:54:e3:dd:40:11:26:8d:a3:f2:02:d1:0a:fc:f6:7e:6a:
         f3:2f:4b:34:d3:36:aa:02:37:7e:a2:08:7f:ba:b1:fb:e2:cd:
         ef:96:1a:f8:6a:87:93:2f:45:59:0c:72:b5:45:1a:8c:f0:2f:
         a0:3d:de:f8:13:53:59:79:e6:09:81:d6:f2:c5:a2:d1:84:7f:
         57:54:87:a2:36:6d:6b:ab:43:19:64:44:1e:34:00:c0:e2:40:
         b8:ca:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:11:52 2026 by rpki-client