Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33302e302f32342d3234203d3e20323634393834.roa
File:                     3137302e38342e33302e302f32342d3234203d3e20323634393834.roa (raw, json)
Hash identifier:          flNJ+bg9m8M+WS9Y4lp8OtyW0yHVS8FNxpDQ4X5hADg=
Subject key identifier:   83:44:F0:57:9D:83:4F:EC:7E:AA:46:45:6C:09:E0:4A:C5:DC:3B:7B
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       672C16B36CA31BDDF9CB348BF0DC2A684B5A7318
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33302e302f32342d3234203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:07 +0000
ROA not before:           Wed 17 Jun 2026 15:12:07 +0000
ROA not after:            Wed 16 Jun 2027 15:17:07 +0000
asID:                     264984
IP address blocks:        170.84.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2c:16:b3:6c:a3:1b:dd:f9:cb:34:8b:f0:dc:2a:68:4b:5a:73:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:07 2026 GMT
            Not After : Jun 16 15:17:07 2027 GMT
        Subject: CN=8344F0579D834FEC7EAA46456C09E04AC5DC3B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:e1:2e:b9:7e:84:79:5a:a7:03:0a:b7:93:
                    79:84:78:90:cc:dd:a9:d6:41:2f:b2:f4:50:a0:ab:
                    53:61:e4:8e:f1:a8:31:c8:44:59:40:3c:4b:4c:98:
                    04:d1:e0:77:bf:f4:9a:38:00:30:05:e0:f5:c7:fd:
                    49:6c:58:87:31:36:e0:5d:59:54:97:60:07:d5:80:
                    08:16:3e:fd:d8:ce:4a:d5:d9:0b:8a:a3:13:6d:4d:
                    8c:36:be:3d:cc:30:b7:15:7c:e3:84:0c:97:94:c1:
                    4c:b1:0e:59:d1:c3:ba:20:b8:73:92:8c:dd:91:32:
                    84:b2:d8:b2:f6:5a:30:e0:6e:49:d0:68:b0:37:21:
                    13:ae:de:ef:41:8c:fc:02:22:87:04:1b:c1:61:b4:
                    76:e4:ef:fb:25:b3:b7:de:f2:47:29:6d:cc:ee:3b:
                    99:14:c5:ee:d3:6b:a9:ce:fc:ee:80:8b:13:cd:70:
                    fa:de:2b:c8:a5:bd:a3:38:66:ad:a4:2f:cf:b4:5c:
                    c2:1f:86:5a:b5:b0:ae:9d:df:9e:84:ac:c8:64:38:
                    1e:df:8a:91:80:59:3f:e5:14:ab:27:57:f5:c6:c0:
                    b5:37:ff:d6:c7:e2:ef:b5:4f:6f:34:c4:68:41:49:
                    6f:e0:d1:11:15:d9:00:37:10:70:ae:71:92:ef:a7:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:44:F0:57:9D:83:4F:EC:7E:AA:46:45:6C:09:E0:4A:C5:DC:3B:7B
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33302e302f32342d3234203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:aa:95:57:79:2e:8c:bf:d3:1c:d6:ff:2a:d6:fb:de:a1:
         01:64:3e:1d:5c:7a:c8:91:f9:51:26:a6:65:9c:1b:fb:b4:45:
         e6:29:63:90:08:4d:2d:cd:22:aa:c6:0d:75:d4:73:04:fd:d0:
         79:eb:be:1b:2b:d0:04:54:be:8e:64:e1:e7:0a:46:2f:c7:6a:
         93:46:1c:2a:8e:d9:17:85:b7:57:aa:a9:f4:e0:f3:fe:c2:72:
         cc:60:bf:46:9e:d2:58:99:85:15:95:9c:77:c0:38:03:68:54:
         c9:74:83:ae:56:50:50:d9:b5:78:d9:f4:6a:7d:5c:9d:1f:5b:
         da:50:29:a0:b1:0d:74:c8:b1:51:d0:7f:78:a4:79:14:39:70:
         16:e8:08:e3:3e:68:95:e2:87:17:8d:e1:a0:0d:a2:e4:86:c9:
         67:0e:46:72:53:25:91:be:56:3b:21:5a:e9:0e:d7:1e:84:af:
         77:08:36:13:ad:d1:2e:b2:43:b4:2f:dd:05:02:f8:e5:cb:74:
         75:e8:18:c0:a1:74:38:3a:32:6b:43:8a:82:03:a8:7f:ac:e3:
         02:23:b8:51:cc:4d:52:93:f3:c7:4f:86:0f:17:f8:1b:a7:63:
         08:26:55:ff:95:4d:13:8b:63:52:d0:de:81:25:da:4c:6f:81:
         fe:68:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:08 2026 by rpki-client