Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          YrTNRVIc+XrOkNSD4T9+hciL2NKf1zKO+G2iNsCTaPg=
Subject key identifier:   E5:46:77:40:08:8D:D2:F3:D3:FF:F6:BF:C3:EB:C4:68:CC:07:4D:2A
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       562EBD54967719652B0925C9DD9C285A68877F11
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa
Signing time:             Tue 07 Jul 2026 17:39:25 +0000
ROA not before:           Tue 07 Jul 2026 17:34:25 +0000
ROA not after:            Tue 06 Jul 2027 17:39:25 +0000
asID:                     264491
IP address blocks:        170.247.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2e:bd:54:96:77:19:65:2b:09:25:c9:dd:9c:28:5a:68:87:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Jul  7 17:34:25 2026 GMT
            Not After : Jul  6 17:39:25 2027 GMT
        Subject: CN=E5467740088DD2F3D3FFF6BFC3EBC468CC074D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:cf:16:b0:f2:58:fc:7f:e0:9a:56:8b:2e:
                    14:67:83:ea:55:9e:1a:20:85:fa:8a:d3:68:87:05:
                    8b:98:6e:f3:19:7f:03:f9:80:d0:93:eb:df:ef:52:
                    b1:86:56:5f:3b:a3:c0:0a:21:da:ea:da:66:c0:9b:
                    49:fe:6b:8c:44:44:69:30:e1:c4:3f:44:58:d6:ad:
                    3d:5d:6e:b3:1e:f7:e9:3a:d2:40:8d:3e:5d:ed:a6:
                    a7:26:97:5e:78:28:9c:82:e2:0e:e6:57:1a:f7:2c:
                    96:b8:b7:81:fe:e0:28:a7:df:39:1d:d8:15:1f:52:
                    e5:70:d5:a3:44:2a:ca:f2:2d:fd:f9:41:74:50:32:
                    a3:a5:5a:7c:4b:b4:6a:51:4c:1f:80:13:46:96:89:
                    ee:56:d4:34:9b:01:12:72:82:6d:5e:39:0d:67:12:
                    85:ab:57:5f:01:b2:4f:fc:09:5e:13:ee:c3:03:65:
                    1e:d5:d5:80:8a:fe:d5:25:8a:93:c2:4c:02:3c:70:
                    7f:00:83:4a:43:36:c2:c8:85:ad:f4:d5:a0:9d:d7:
                    31:04:e4:d4:48:5b:45:00:23:98:37:ab:25:34:77:
                    fc:40:7c:8c:b2:41:78:32:f4:c3:98:89:a2:b6:b1:
                    ec:14:bb:98:d9:a5:09:53:cf:60:79:f3:68:1d:2e:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:77:40:08:8D:D2:F3:D3:FF:F6:BF:C3:EB:C4:68:CC:07:4D:2A
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:4f:07:e9:8d:7a:74:d5:08:0e:3b:8b:89:cb:4e:d3:da:
         74:46:70:01:fa:5b:c5:da:ef:6b:70:a6:bc:80:d2:58:a6:99:
         08:3c:bd:3c:aa:ca:3a:90:7c:32:a0:ec:33:99:0b:dd:f1:24:
         e7:9e:9b:57:13:62:5a:04:76:a5:8d:0a:96:88:d9:5f:9f:51:
         9f:85:ef:5f:df:cc:07:57:7b:93:65:27:87:74:01:51:73:ea:
         1d:97:91:2f:a6:0a:68:ac:3c:e9:95:f4:66:99:6c:c5:dc:b0:
         7f:da:93:f1:ca:42:90:9c:6b:71:1e:dc:e9:46:f4:a7:d6:56:
         7b:f7:34:f0:36:d7:4c:8d:d8:e3:25:1f:69:10:09:c0:94:3f:
         40:9e:55:78:55:73:76:c9:a8:40:17:f5:42:c6:3b:91:44:7d:
         ea:56:4c:3c:c3:01:c2:12:34:63:08:7f:9a:9b:06:dd:0f:ef:
         96:f8:49:9f:45:97:03:c3:bf:fa:bc:7f:8e:cc:c5:6c:1d:0d:
         d6:9e:13:03:15:ad:f1:62:df:f0:69:62:62:00:d7:d5:34:2d:
         d6:5a:6c:96:4a:9d:2c:ce:f2:44:6b:b9:96:0e:a9:77:06:5a:
         6d:b7:f6:8f:ac:fe:ae:0e:45:e6:16:e1:48:fa:1c:c0:b8:2d:
         72:03:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:06 2026 by rpki-client