Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32332d3233203d3e203631373534.roa
File:                     3137302e38332e37302e302f32332d3233203d3e203631373534.roa (raw, json)
Hash identifier:          kNJlYKqqvp462eQkdnEKFjiS6TQ1fdFE0zQhbiTxGeY=
Subject key identifier:   8E:98:E2:3E:41:23:69:87:C3:B9:74:76:8C:C4:E3:14:44:E7:95:D6
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       4E46C83DFE13319DC55431096D631F08F2D57241
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32332d3233203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:25 +0000
ROA not before:           Fri 11 Sep 2026 20:09:25 +0000
ROA not after:            Fri 10 Sep 2027 20:14:25 +0000
asID:                     61754
IP address blocks:        170.83.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:46:c8:3d:fe:13:31:9d:c5:54:31:09:6d:63:1f:08:f2:d5:72:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:25 2026 GMT
            Not After : Sep 10 20:14:25 2027 GMT
        Subject: CN=8E98E23E41236987C3B974768CC4E31444E795D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:13:5b:be:55:96:de:b1:60:52:d6:2c:8a:
                    26:a1:f8:92:d8:0c:4d:6a:16:cf:6f:18:c3:f1:c7:
                    a9:b7:a3:e3:44:2d:ae:cb:78:5f:c6:9c:10:58:35:
                    4f:9f:72:35:0a:72:a0:9f:f0:65:88:d4:4f:56:6f:
                    2f:12:44:7d:dc:de:7b:63:ee:27:f0:a6:f1:f5:5a:
                    86:01:e1:9b:d3:bd:53:31:e9:f3:27:8d:c2:47:2a:
                    91:61:88:44:8f:6b:eb:89:81:5d:4b:04:47:dc:a3:
                    7e:23:fe:4b:85:76:d4:9d:2f:ea:b9:7f:41:ea:01:
                    2b:42:b3:02:cc:cf:4e:2b:a0:fa:a7:40:68:ec:c4:
                    62:28:72:5e:ae:ff:d4:91:d5:cb:71:c5:35:b7:67:
                    bc:5f:3a:35:a2:af:5e:ff:24:fa:ff:9d:56:e3:d6:
                    a2:a0:02:2c:09:6a:54:87:f7:07:9b:65:d4:4c:73:
                    a1:83:e7:78:c3:94:23:6e:f7:a3:86:be:e0:2b:0e:
                    3a:7e:42:34:eb:a5:d0:4e:78:e5:ff:4d:17:a2:9e:
                    30:7f:56:ba:bc:69:10:40:21:89:7f:cd:e9:b0:40:
                    76:85:1a:ca:c1:61:a0:86:f3:b6:79:30:b7:9a:48:
                    d6:7e:a6:5c:2f:5e:b0:ce:c5:6b:a0:43:67:42:80:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:E2:3E:41:23:69:87:C3:B9:74:76:8C:C4:E3:14:44:E7:95:D6
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32332d3233203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:5a:59:49:10:34:c0:b6:e7:90:d9:28:ef:6e:de:54:5a:
         69:6a:46:15:79:1b:d5:21:85:6c:25:0a:53:18:00:9a:87:9b:
         c7:f1:6a:f6:5f:ea:c3:5a:87:f9:e5:56:27:25:b4:53:df:c1:
         06:bf:e2:12:01:da:02:5e:5f:b1:a5:63:03:d8:b0:7d:62:cf:
         ff:18:a2:35:28:48:a5:1f:0c:00:8c:46:8b:09:1d:ea:45:05:
         0b:14:d4:00:e8:fb:48:46:b8:65:65:24:50:aa:6d:f8:da:1c:
         f3:a0:79:eb:78:e1:df:b4:c7:bd:fd:89:75:87:cb:a1:3d:ac:
         82:35:62:af:0b:d3:64:22:f7:99:e8:bf:eb:ea:54:77:3b:35:
         05:d8:fa:ac:d6:03:5c:5c:25:1a:84:0e:23:5b:63:52:25:f8:
         94:e3:09:0e:7e:cf:4f:30:67:e8:bf:55:14:b8:ec:de:fc:aa:
         a2:b2:4b:b6:2a:05:ad:7e:fa:b0:c8:20:aa:c1:8c:6d:28:8a:
         b1:27:17:b7:de:0b:7b:73:55:32:af:01:66:7b:15:00:a8:f1:
         0e:7a:8d:68:b0:93:a3:45:83:c2:00:05:d9:5e:a1:e0:9e:b7:
         13:7a:ef:ba:40:00:96:71:eb:37:84:e2:73:36:41:06:d6:56:
         c1:4d:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:25 2026 by rpki-client