Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3233203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32332d3233203d3e20323632333031.roa (raw, json)
Hash identifier:          osJNviGKzoaGBVFR6amEgM9aVadtby1q2HbY173qO4Y=
Subject key identifier:   1C:76:CA:AF:D3:0D:9E:98:FE:3C:54:52:52:05:29:DF:94:A3:5B:51
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       15FB9FCA3AA0FC0B4A72ED99D6AF045D56F3FDA9
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3233203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:30 +0000
ROA not before:           Fri 07 Aug 2026 14:01:30 +0000
ROA not after:            Fri 06 Aug 2027 14:06:30 +0000
asID:                     262301
IP address blocks:        170.0.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fb:9f:ca:3a:a0:fc:0b:4a:72:ed:99:d6:af:04:5d:56:f3:fd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:30 2026 GMT
            Not After : Aug  6 14:06:30 2027 GMT
        Subject: CN=1C76CAAFD30D9E98FE3C5452520529DF94A35B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:c1:86:9e:f9:1c:d0:1c:8c:73:51:ec:f1:
                    e6:65:3d:c7:96:3d:3e:16:f2:d6:bf:e1:7b:2f:72:
                    91:c0:ad:d0:a2:5a:1d:0f:98:a3:c2:2d:97:56:7b:
                    e5:77:0a:e6:1d:a0:34:82:4a:9d:40:3c:17:c0:2c:
                    6a:08:50:68:26:bf:10:c8:b3:95:a7:16:95:ba:5a:
                    d5:57:0f:d9:2b:cc:fe:ce:af:68:0a:b7:04:a0:5d:
                    f7:57:2e:79:fa:6d:4c:b2:59:dd:5a:65:3e:a6:f1:
                    65:99:6d:4a:f8:c1:ca:2b:99:bf:e8:3a:03:b7:43:
                    29:86:87:80:23:1d:9d:89:5a:e0:ee:e8:65:3a:88:
                    3b:82:0c:45:39:7e:3f:ba:a9:70:17:92:31:54:c1:
                    5b:d8:22:4c:4c:53:4c:45:38:56:7f:e6:42:b3:b8:
                    9c:56:35:73:5c:d6:4e:79:83:c3:f3:6e:18:a1:69:
                    bd:41:3f:54:33:76:27:32:4c:fb:b9:50:18:89:98:
                    1c:0b:8a:fc:fb:1f:64:18:45:75:22:f0:f8:96:cd:
                    2a:ce:4d:52:26:2f:a7:8f:0a:c9:9d:d9:f8:0b:88:
                    0e:36:33:24:7e:b2:6b:b3:d0:c4:23:a4:40:b6:c0:
                    fd:64:16:6c:09:51:93:5b:22:be:5a:42:f9:07:53:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:CA:AF:D3:0D:9E:98:FE:3C:54:52:52:05:29:DF:94:A3:5B:51
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3233203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:88:6e:8a:91:a2:81:6a:b6:04:71:60:a6:9a:a0:d9:44:
         88:1e:0b:f8:62:80:cc:ae:7a:5d:9d:11:27:fd:8f:05:86:9c:
         79:2e:45:86:53:d6:f2:76:5c:cb:cb:b1:81:2a:95:c2:e2:79:
         26:f0:e9:4b:f8:99:5e:c1:0e:6f:d5:a8:91:7b:74:b9:34:d0:
         fd:d6:31:44:a6:ac:6d:9b:04:a7:c5:70:d6:bb:97:0c:bb:c7:
         83:31:b7:fa:17:21:b2:6c:a5:c6:5a:1a:f3:fa:92:d2:48:cf:
         0e:a2:dc:96:57:08:ae:4b:6d:fb:01:4e:d0:a5:b5:89:f1:10:
         ef:f9:90:3a:58:03:74:1e:66:a2:27:79:9d:6e:99:4b:90:de:
         cc:92:d0:2d:78:6c:69:e3:6e:eb:d9:f8:97:55:99:0c:41:9a:
         42:f6:79:c8:cd:a9:7e:07:9e:e8:d7:c0:0b:ef:cd:97:10:b2:
         07:15:57:99:ad:c9:fc:59:41:95:c8:7e:f1:3c:35:e0:8c:53:
         7b:4a:f9:30:48:d3:9c:b3:75:08:52:f6:01:81:a2:bd:3d:39:
         20:4e:0b:ef:f0:a4:95:12:e5:fb:0f:d5:3f:7c:66:1e:6e:e1:
         5a:cf:f5:1d:da:dc:81:06:73:bb:7f:fd:85:bd:bf:04:79:0a:
         c3:c6:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:24:25 2026 by rpki-client