Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32322d3232203d3e20323632333031.roa (raw, json)
Hash identifier:          GZypfdufQEVP2qGXNGXPPLntXUFpObvqbRkwTFZHPkw=
Subject key identifier:   9E:97:2D:A1:BE:84:FA:98:3E:B8:BF:45:EF:2F:25:6A:BD:08:AB:47
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       2993A9DB50860BD36294B12E75BCA4C1BEFAFD2B
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:27 +0000
ROA not before:           Fri 07 Aug 2026 14:01:27 +0000
ROA not after:            Fri 06 Aug 2027 14:06:27 +0000
asID:                     262301
IP address blocks:        170.0.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:a9:db:50:86:0b:d3:62:94:b1:2e:75:bc:a4:c1:be:fa:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:27 2026 GMT
            Not After : Aug  6 14:06:27 2027 GMT
        Subject: CN=9E972DA1BE84FA983EB8BF45EF2F256ABD08AB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:79:72:aa:74:9c:5e:3c:21:a0:8f:c3:ad:
                    b1:f5:c0:c3:d5:98:07:69:33:40:f4:da:6b:63:73:
                    a4:65:52:5a:54:ba:46:a6:78:77:ff:27:e3:b7:f9:
                    eb:7d:11:5d:b8:6f:cd:46:ca:cf:b5:19:28:6a:08:
                    38:72:4a:ce:f4:6c:b9:1f:3a:52:a9:99:58:38:7b:
                    cb:6f:f9:37:37:43:4c:3c:60:0c:b7:a9:47:2a:7a:
                    83:5f:3c:b3:1b:31:e8:35:ed:93:b5:0c:93:f0:d7:
                    a8:4a:e1:ee:9b:e8:a2:88:23:b3:1d:1e:dc:83:ec:
                    e5:f4:4c:46:e1:6f:76:52:a5:85:47:25:76:fe:fe:
                    05:9b:78:8b:2f:93:11:5c:31:3a:62:2f:26:fc:9c:
                    c1:6a:c2:7e:65:e3:50:ce:8a:fb:18:5e:fe:98:b8:
                    54:b2:5e:6e:e3:2e:70:ad:e2:cf:bb:79:d6:95:28:
                    4e:e4:46:72:08:3e:e0:17:4a:0c:8d:a2:2f:c4:63:
                    8b:b5:5e:a3:43:c7:17:37:9d:2a:33:2c:be:6e:24:
                    2d:a7:df:99:45:71:3a:56:39:41:87:4b:5f:16:92:
                    ec:ea:92:c6:d2:94:e5:81:1d:35:bb:7c:1e:2e:8c:
                    b7:6f:f9:e8:cf:f5:ae:2a:15:4e:7d:3e:3c:cd:67:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:2D:A1:BE:84:FA:98:3E:B8:BF:45:EF:2F:25:6A:BD:08:AB:47
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:d8:5c:4a:05:f4:9f:9e:7f:95:81:57:ca:ce:c8:46:82:77:
         cc:a3:0d:54:38:39:9a:bf:69:56:91:95:a0:15:63:fc:17:b9:
         a7:71:d9:0f:d5:0f:f6:75:b5:d9:6a:4e:aa:33:1b:01:44:5f:
         1c:7f:d7:0d:1b:9e:e2:60:1c:31:3b:f4:c0:76:48:5e:6c:5e:
         be:ae:0d:85:da:a2:8d:59:83:5e:bb:0e:bb:15:02:f2:b1:f3:
         d7:31:5a:da:77:10:45:c8:f4:1b:6e:57:51:b1:e4:1a:4b:c1:
         5c:dd:19:53:11:74:1e:b1:6b:d7:54:c3:7e:7e:f5:d6:e8:6b:
         28:87:16:06:79:d5:29:3c:bc:be:b1:8c:05:3c:ab:8c:57:d7:
         3e:3e:ed:c6:32:db:0d:ea:4f:80:c3:88:c7:8d:c5:6b:0f:f3:
         59:e1:84:ca:ac:9a:1c:f8:5d:e7:9e:20:3f:f8:d1:22:1e:2b:
         74:51:e0:d4:30:50:be:d9:e6:1f:22:64:c7:af:2b:30:86:f4:
         9f:d1:48:7b:f7:45:ab:db:73:e7:98:08:db:3b:e9:85:2e:a6:
         bf:b9:2e:77:20:dd:71:d3:2b:34:d5:db:41:40:bf:d9:31:5c:
         40:50:f5:a0:0b:a5:4b:7a:37:a8:1e:f9:94:6c:2e:80:5b:85:
         4a:30:86:8a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKZOp21CGC9NilLEudbykwb76/SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMDE5NTUwRjY1MzAwNjA0Qjc4NzAzOTg3Mjc4MjAw
RjhFMDc5RTAeFw0yNjA4MDcxNDAxMjdaFw0yNzA4MDYxNDA2MjdaMDMxMTAvBgNV
BAMTKDlFOTcyREExQkU4NEZBOTgzRUI4QkY0NUVGMkYyNTZBQkQwOEFCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAnlyqnScXjwhoI/DrbH1wMPV
mAdpM0D02mtjc6RlUlpUukameHf/J+O3+et9EV24b81Gys+1GShqCDhySs70bLkf
OlKpmVg4e8tv+Tc3Q0w8YAy3qUcqeoNfPLMbMeg17ZO1DJPw16hK4e6b6KKII7Md
HtyD7OX0TEbhb3ZSpYVHJXb+/gWbeIsvkxFcMTpiLyb8nMFqwn5l41DOivsYXv6Y
uFSyXm7jLnCt4s+7edaVKE7kRnIIPuAXSgyNoi/EY4u1XqNDxxc3nSozLL5uJC2n
35lFcTpWOUGHS18WkuzqksbSlOWBHTW7fB4ujLdv+ejP9a4qFU59PjzNZybVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnpctob6E+pg+uL9F7y8lar0Iq0cwHwYDVR0j
BBgwFoAUhSAZVQ9lMAYEt4cDmHJ4IA+OB54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC84NTIwMTk1NTBGNjUzMDA2MDRCNzg3MDM5ODcyNzgyMDBGOEUwNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjAxOTU1MEY2NTMwMDYw
NEI3ODcwMzk4NzI3ODIwMEY4RTA3OUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzEzNzMwMmUzMDJlMzIzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgD4MA0GCSqGSIb3DQEBCwUAA4IBAQCo2FxKBfSf
nn+VgVfKzshGgnfMow1UODmav2lWkZWgFWP8F7mncdkP1Q/2dbXZak6qMxsBRF8c
f9cNG57iYBwxO/TAdkhebF6+rg2F2qKNWYNeuw67FQLysfPXMVradxBFyPQbbldR
seQaS8Fc3RlTEXQesWvXVMN+fvXW6GsohxYGedUpPLy+sYwFPKuMV9c+Pu3GMtsN
6k+Aw4jHjcVrD/NZ4YTKrJoc+F3nniA/+NEiHit0UeDUMFC+2eYfImTHryswhvSf
0Uh790Wr23PnmAjbO+mFLqa/uS53IN1x0ys01dtBQL/ZMVxAUPWgC6VLejeoHvmU
bC6AW4VKMIaK
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:41:47 2026 by rpki-client