Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33312e302f32342d3234203d3e20323634393834.roa
File:                     3137302e38342e33312e302f32342d3234203d3e20323634393834.roa (raw, json)
Hash identifier:          rX7ph1WjOMqw2hgiddZe40P1OU531BknkbPbh8GwAU8=
Subject key identifier:   00:6F:5A:C8:A2:27:C2:6A:41:87:4A:CC:71:BB:2D:20:A1:6E:C8:9B
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       5DE3EE98889D91A1917F212E25FE0CF4813BC47C
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33312e302f32342d3234203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:05 +0000
ROA not before:           Wed 17 Jun 2026 15:12:05 +0000
ROA not after:            Wed 16 Jun 2027 15:17:05 +0000
asID:                     264984
IP address blocks:        170.84.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:ee:98:88:9d:91:a1:91:7f:21:2e:25:fe:0c:f4:81:3b:c4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:05 2026 GMT
            Not After : Jun 16 15:17:05 2027 GMT
        Subject: CN=006F5AC8A227C26A41874ACC71BB2D20A16EC89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:ab:07:6d:94:a8:f3:88:22:8a:34:72:67:
                    57:6d:f3:c3:2a:66:49:76:fb:30:0e:e2:76:11:e6:
                    1d:33:fc:7c:15:0b:a8:d2:ae:57:8e:77:7c:a4:04:
                    91:4a:63:db:4a:18:70:22:0c:52:9a:e0:30:5a:c8:
                    d2:ea:4c:2c:be:30:0e:00:91:bb:d7:c6:b9:2e:1e:
                    7f:8d:b9:e1:55:74:fe:a2:cc:0e:2f:2d:da:5b:fa:
                    d7:af:20:11:34:8e:8c:93:76:bd:ad:62:be:7f:e5:
                    27:6b:58:3f:50:2d:fe:63:71:6d:10:3e:b9:04:b4:
                    5d:00:7a:f5:43:a7:01:5d:2f:7c:12:8d:1c:a3:e6:
                    f1:38:79:8a:58:45:21:66:fb:72:98:ca:33:e0:ec:
                    19:52:e0:aa:3e:fa:67:c3:5d:94:67:5e:11:98:d4:
                    c6:33:fd:40:b9:6c:8f:03:b7:8b:22:66:4b:24:ec:
                    45:06:9c:05:43:1c:47:46:b6:0c:e4:1d:1a:cb:53:
                    bd:00:72:1a:22:af:37:72:2d:11:1f:75:74:b6:32:
                    13:01:d7:da:44:91:a4:74:55:05:b1:7e:31:2a:bc:
                    bc:f7:1d:a2:00:dc:d7:4c:61:9e:36:32:ce:9a:33:
                    10:34:04:64:78:0c:f7:78:bb:bc:bd:77:94:7f:13:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:5A:C8:A2:27:C2:6A:41:87:4A:CC:71:BB:2D:20:A1:6E:C8:9B
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e33312e302f32342d3234203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:d9:5a:c0:c3:ab:f2:91:a1:71:c9:bc:53:19:19:76:22:
         74:b4:3c:fe:47:94:53:37:d5:c0:c8:ea:d0:7c:42:7e:f3:4f:
         e0:a1:9f:87:92:9e:0a:02:ff:82:00:68:ff:ce:15:07:ec:be:
         c0:42:1c:79:c7:12:16:6b:5b:53:82:95:fb:aa:bd:74:ad:2c:
         72:46:c3:92:96:7f:41:16:7b:f1:1e:1e:93:04:d1:a6:b9:a6:
         19:99:f8:0f:f9:de:ee:ce:6f:ba:09:e6:ef:f1:53:8a:f8:22:
         e8:ff:8b:f9:cd:82:38:6c:47:17:9a:5c:ba:42:d7:64:47:c8:
         60:be:19:64:a0:59:3c:2b:0c:ee:45:bd:55:35:54:67:c4:18:
         a4:90:00:0f:97:e2:68:32:57:68:18:45:f2:4b:4b:74:f8:2c:
         d1:64:c8:10:8a:09:03:5d:04:c1:0c:32:99:fd:84:f1:76:f7:
         80:d2:91:29:1a:4f:6c:01:68:ad:eb:39:88:c1:e9:b1:0a:b9:
         2a:93:b3:18:ff:29:d2:5d:cd:0e:74:e7:9f:f9:31:62:31:67:
         7c:29:46:35:50:eb:d2:0a:0c:41:9b:b8:cf:a6:d4:ea:21:17:
         0a:cf:f9:6e:de:f6:9e:b3:b9:2f:d8:6e:08:61:c1:ea:d8:15:
         0e:5d:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:10:22 2026 by rpki-client