Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3233203d3e20323632333031.roa
File:                     3137302e302e3235302e302f32332d3233203d3e20323632333031.roa (raw, json)
Hash identifier:          Oxf1b5o/POIbrynByVGttO5EeRWRx4vKemzvucUp4jk=
Subject key identifier:   DB:8D:DC:16:B0:98:4A:4D:9F:1D:4E:40:0A:E6:14:CA:0D:47:BC:32
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       4CB7F6CBCF9F73B172DD322CA88D9FDF3F8626B3
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3233203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:30 +0000
ROA not before:           Fri 07 Aug 2026 14:01:30 +0000
ROA not after:            Fri 06 Aug 2027 14:06:30 +0000
asID:                     262301
IP address blocks:        170.0.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b7:f6:cb:cf:9f:73:b1:72:dd:32:2c:a8:8d:9f:df:3f:86:26:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:30 2026 GMT
            Not After : Aug  6 14:06:30 2027 GMT
        Subject: CN=DB8DDC16B0984A4D9F1D4E400AE614CA0D47BC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:d4:cc:97:aa:25:1f:9d:3b:d2:1f:18:37:
                    37:65:3e:e4:3e:00:9b:33:3b:2d:99:64:37:fa:06:
                    06:c2:7e:5a:c7:66:4e:96:1a:33:47:53:7a:38:97:
                    dc:34:09:ea:7a:cb:4d:d0:d9:67:c1:95:13:90:d7:
                    35:f5:87:2b:08:2d:b7:27:4f:8c:62:8d:99:ea:e7:
                    50:95:9c:44:0f:5a:cf:9e:5f:02:ad:53:39:fd:f5:
                    87:db:6b:9b:17:b0:d6:42:75:72:3e:fe:9a:a0:37:
                    3e:63:5b:c9:f2:79:cb:f0:7d:3f:29:8a:c3:c3:a0:
                    7b:6b:ec:bc:a4:92:d2:81:50:90:9f:1c:69:67:82:
                    a1:56:cf:29:f1:87:5f:9c:86:70:b6:6b:ae:3d:de:
                    e5:82:b3:4d:f1:bb:55:ad:bf:38:3b:7b:45:3c:87:
                    dc:07:1e:4b:87:6f:73:17:d4:88:36:9d:25:88:29:
                    23:15:f0:8f:73:b0:b8:49:37:b9:8a:5c:59:4d:f9:
                    bc:66:b2:eb:3f:ca:73:02:84:33:37:9a:73:f3:a8:
                    3d:fd:5b:07:a8:ad:a6:d5:e8:30:48:17:a0:32:9b:
                    c9:ef:10:8f:98:71:af:88:2c:3e:cb:f1:24:e1:72:
                    64:a6:55:7e:26:ce:29:22:5c:65:99:85:bb:fc:2a:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8D:DC:16:B0:98:4A:4D:9F:1D:4E:40:0A:E6:14:CA:0D:47:BC:32
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3235302e302f32332d3233203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:c7:81:c4:86:5c:3f:d3:fc:ce:2c:bc:e5:d6:cf:d3:1c:
         20:f4:d0:ab:f8:fa:3a:8e:15:76:76:a6:0d:69:ee:13:4a:42:
         f2:63:f8:81:5d:31:60:d2:9f:a0:17:64:a9:aa:ab:a0:c2:47:
         3d:cc:65:73:2d:72:76:20:9b:02:3e:ea:21:49:f3:57:2f:73:
         5a:48:95:04:bc:cd:7b:31:1a:89:6e:6d:97:0f:30:dd:b1:1c:
         f5:c9:23:7b:b9:b2:5b:f1:4a:6e:6d:7d:ef:67:2e:ca:eb:76:
         68:f7:6c:a5:c0:66:64:54:75:f1:a8:7d:63:5b:d0:c8:82:57:
         65:c0:e1:28:b9:05:50:51:40:e4:db:69:0d:47:3d:a8:45:80:
         ef:6b:53:c0:e5:5b:5f:99:51:ad:56:43:48:91:94:c8:9e:fe:
         c9:2a:93:a1:c5:d1:9f:88:4f:02:b0:51:3a:df:b6:1a:19:78:
         8a:1e:39:19:bf:34:2f:64:d7:55:c5:4b:07:64:f7:32:a4:39:
         8f:7a:09:52:5d:32:1a:98:13:04:87:41:5b:f5:5c:ec:c5:2e:
         ed:27:a2:3d:a4:9e:1f:a7:ef:89:3e:65:f5:0c:d1:3f:32:10:
         16:bd:ba:85:b5:f2:ef:5f:31:3b:05:dc:d6:7d:13:f6:06:9e:
         5d:ce:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:14:31 2026 by rpki-client