Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          u6nEWXdreOIpECL4U4dInG0/qGMECRfbxScELM60Xu8=
Subject key identifier:   BE:3B:11:48:CD:89:3A:28:F2:8D:52:90:1C:28:9E:24:E2:61:49:95
Certificate issuer:       /CN=9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920
Certificate serial:       38B0513D6525E604A69D4757C51B80AF14339B13
Authority key identifier: 9B:48:54:AB:12:47:7E:5D:FE:86:C6:CB:23:52:FF:E7:D2:E4:B9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
Signing time:             Thu 14 May 2026 22:50:01 +0000
ROA not before:           Thu 14 May 2026 22:45:01 +0000
ROA not after:            Thu 13 May 2027 22:50:01 +0000
asID:                     266342
IP address blocks:        170.239.80.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:51:3d:65:25:e6:04:a6:9d:47:57:c5:1b:80:af:14:33:9b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920
        Validity
            Not Before: May 14 22:45:01 2026 GMT
            Not After : May 13 22:50:01 2027 GMT
        Subject: CN=BE3B1148CD893A28F28D52901C289E24E2614995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:2d:15:f7:ce:6d:c8:88:cd:99:8f:7a:71:
                    1f:db:8f:9a:f7:fe:fd:16:9c:b2:ee:4e:dd:fa:0f:
                    3e:27:df:15:fe:92:89:86:25:fa:21:97:7c:95:05:
                    a0:4e:d6:3a:eb:bf:06:66:02:6a:a2:bc:9a:37:18:
                    34:d8:ec:39:f2:9e:c6:35:a8:09:2c:76:a8:94:3e:
                    50:ff:cc:a2:d5:34:6b:eb:72:3e:69:0a:9f:d2:1c:
                    9b:1e:a8:96:c7:58:92:97:2d:e5:0f:f3:8a:80:db:
                    34:85:d1:d8:74:0a:43:1a:02:3e:2c:03:9d:f8:8d:
                    b2:a2:51:15:41:de:b2:a4:de:ad:4e:b1:de:e9:81:
                    c6:75:3f:3b:d9:6d:58:8d:d7:96:16:a2:44:96:6e:
                    51:fd:31:9c:ac:a4:1d:bf:ed:ea:4a:25:91:d5:ce:
                    7d:4c:1d:b9:3a:f4:e2:fc:6a:b6:f4:f7:9f:e3:f6:
                    d9:0f:f5:85:b4:64:cf:8e:b8:99:66:bf:28:6e:13:
                    c4:a7:35:5b:87:81:a7:bb:2a:3c:e3:77:4b:72:96:
                    d3:5b:b0:c9:f6:5d:e0:db:71:83:96:65:79:80:fd:
                    a4:89:e4:d9:07:b0:57:a4:58:94:34:c5:71:e2:61:
                    59:20:35:fa:9f:2e:91:44:3f:c9:65:d0:60:91:7d:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:11:48:CD:89:3A:28:F2:8D:52:90:1C:28:9E:24:E2:61:49:95
            X509v3 Authority Key Identifier:
                keyid:9B:48:54:AB:12:47:7E:5D:FE:86:C6:CB:23:52:FF:E7:D2:E4:B9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B4854AB12477E5DFE86C6CB2352FFE7D2E4B920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:91:f4:bb:2d:3b:2a:7e:31:c9:3b:55:59:66:f4:26:e4:
         42:6d:fa:95:1b:75:5e:30:26:16:f6:3a:57:f0:0f:f0:22:ae:
         d4:aa:88:2b:1d:76:19:22:ce:65:f9:21:ea:c0:df:f7:1f:44:
         5f:b6:7b:e0:d7:b3:3d:34:9d:21:60:cd:6f:3e:83:06:ce:08:
         b7:0b:c9:3c:c5:f4:20:4f:cc:74:a0:03:38:99:19:10:a4:b4:
         54:e1:3d:cc:d8:56:f4:d4:38:4b:32:9a:64:39:a6:14:5d:cf:
         97:cd:b0:d5:17:5a:93:f8:a3:86:71:09:f8:81:3a:07:96:1a:
         b8:fd:9a:a1:47:38:ce:71:45:87:5c:18:8f:2a:0c:1e:d2:f5:
         01:b2:55:05:ef:e7:41:f2:34:d1:03:69:01:d6:14:28:77:17:
         d5:84:1e:7e:96:13:78:05:01:b1:68:a9:5c:ab:5b:1e:41:be:
         87:55:4c:80:21:13:f7:e5:fd:a1:b7:6a:b3:c3:ae:5e:9b:29:
         77:3b:93:fa:14:3b:a7:87:78:4f:47:eb:a3:19:51:f0:c4:02:
         2a:fb:7b:71:ef:79:f4:2b:e1:cf:a5:3f:b0:c2:e2:6c:13:dd:
         0d:6d:21:da:bb:37:20:58:1c:e1:60:ce:81:92:42:43:64:3c:
         8f:44:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:13:01 2026 by rpki-client