Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/3137302e38302e3132302e302f32342d3234203d3e20323636333737.roa
File:                     3137302e38302e3132302e302f32342d3234203d3e20323636333737.roa (raw, json)
Hash identifier:          F2evW+iEYM0LH9vdIBrkj/QmD0PeDyTptPpy4f6pRLc=
Subject key identifier:   3E:B7:BD:9A:48:D8:BA:35:98:1C:61:C1:91:0E:18:F8:6A:18:A0:B7
Certificate issuer:       /CN=ED5AD6D7ECB74D28DA52F6609EEA95170550383F
Certificate serial:       588CEB78589B38F52A31C3D69C43F0A18F9F536E
Authority key identifier: ED:5A:D6:D7:EC:B7:4D:28:DA:52:F6:60:9E:EA:95:17:05:50:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/3137302e38302e3132302e302f32342d3234203d3e20323636333737.roa
Signing time:             Sat 15 Aug 2026 20:51:47 +0000
ROA not before:           Sat 15 Aug 2026 20:46:47 +0000
ROA not after:            Sat 14 Aug 2027 20:51:47 +0000
asID:                     266377
IP address blocks:        170.80.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.crl
                          rsync://rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:eb:78:58:9b:38:f5:2a:31:c3:d6:9c:43:f0:a1:8f:9f:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5AD6D7ECB74D28DA52F6609EEA95170550383F
        Validity
            Not Before: Aug 15 20:46:47 2026 GMT
            Not After : Aug 14 20:51:47 2027 GMT
        Subject: CN=3EB7BD9A48D8BA35981C61C1910E18F86A18A0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:0b:71:03:44:74:d8:5f:dd:00:d6:95:f4:
                    a8:d3:e4:19:26:f6:d0:a4:54:79:40:08:ad:0f:da:
                    f4:83:5b:8d:c0:1c:1d:80:e7:da:a8:f9:e1:fd:d8:
                    fa:17:00:19:f1:e0:41:49:bf:7e:5e:ed:d6:53:93:
                    84:cb:07:a8:bb:dc:3a:e3:8e:b9:b3:c1:b0:c7:d9:
                    bb:21:18:c0:c8:a2:0a:27:c9:e9:85:f7:b8:94:d1:
                    47:9f:f9:f8:e9:62:a8:62:2c:d8:37:0d:73:1e:b7:
                    ed:49:b3:5f:87:46:00:ff:f2:e7:76:92:ac:b6:32:
                    88:ba:c8:0e:48:c2:2a:ba:f2:53:e9:e7:98:33:e1:
                    b6:ad:4e:ec:c7:61:9d:20:29:df:39:3f:74:12:1a:
                    61:b6:9f:ec:9f:58:f0:7a:e3:3a:f7:fc:48:99:c7:
                    94:66:84:ad:f0:80:cc:0e:fe:10:d3:06:a6:d4:c1:
                    bb:79:84:d3:06:4a:a0:08:50:27:e8:75:cf:40:ac:
                    7b:61:28:ff:b8:97:61:70:a7:db:ef:06:a6:39:3c:
                    de:f3:8b:33:5f:3c:05:18:3e:35:f7:b6:27:d7:d9:
                    48:76:59:32:3b:4e:fa:9c:6c:fb:39:fe:cb:20:2b:
                    9c:7b:46:63:3d:a0:2d:30:f1:a9:20:df:43:5d:09:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:BD:9A:48:D8:BA:35:98:1C:61:C1:91:0E:18:F8:6A:18:A0:B7
            X509v3 Authority Key Identifier:
                keyid:ED:5A:D6:D7:EC:B7:4D:28:DA:52:F6:60:9E:EA:95:17:05:50:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5AD6D7ECB74D28DA52F6609EEA95170550383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdJNd9WbYCus5wmbVGcc5RN4FkBr4V7du5wFQRRE15w3/0/3137302e38302e3132302e302f32342d3234203d3e20323636333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:e9:54:e0:3d:3e:2f:51:52:cc:99:d4:29:24:7c:51:07:
         07:de:73:87:2a:2e:78:45:de:be:ec:e1:43:38:15:2b:6f:13:
         42:b2:7f:2a:ee:b4:97:8c:2f:26:0e:87:fd:44:97:f1:0e:80:
         28:5a:d7:3f:25:c4:76:fa:75:dc:af:b2:17:75:c0:23:bb:80:
         cf:c7:32:ef:a8:35:33:c5:b8:a7:63:1a:e5:11:46:48:f5:e2:
         41:41:ef:40:68:3c:0f:bd:d2:89:f9:5b:f4:04:74:48:e3:97:
         8e:b5:d2:a1:52:08:c0:71:4b:cb:d9:77:05:e5:a5:cc:1a:4a:
         ad:ea:8c:d9:00:0b:08:52:b6:cc:cf:9f:c2:cd:0b:09:ee:4b:
         4c:29:e8:ea:b9:7a:8f:5f:5c:81:2f:12:6b:34:59:b1:e6:16:
         fd:f1:23:9c:8a:69:60:28:84:60:27:14:8b:a6:be:59:0c:5e:
         65:ee:89:a5:ea:21:9f:01:bc:95:57:3a:7c:67:72:8d:69:49:
         07:00:22:45:fb:ba:31:41:39:a1:a7:56:28:26:e5:d7:74:a5:
         64:c5:2b:b7:ae:79:dc:a8:6e:46:f8:a0:06:42:3e:0b:4f:d3:
         3f:a3:bb:a3:31:34:c5:59:03:76:4d:7b:11:0c:a7:6a:9a:88:
         25:7f:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:23 2026 by rpki-client