Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3233203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32332d3233203d3e20323731323933.roa (raw, json)
Hash identifier:          pAc5kq+JnIqDtJE6fd6WoMQeQmovEIUTcQ6IOfYde8Q=
Subject key identifier:   54:DB:CD:81:27:6C:F4:39:DE:30:51:77:47:FA:1B:64:BD:87:7F:CA
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       68EDBBC36037969288F3CA8DCF3CACA37D0CAAC8
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3233203d3e20323731323933.roa
Signing time:             Tue 07 Jul 2026 17:46:01 +0000
ROA not before:           Tue 07 Jul 2026 17:41:01 +0000
ROA not after:            Tue 06 Jul 2027 17:46:01 +0000
asID:                     271293
IP address blocks:        170.233.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ed:bb:c3:60:37:96:92:88:f3:ca:8d:cf:3c:ac:a3:7d:0c:aa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Jul  7 17:41:01 2026 GMT
            Not After : Jul  6 17:46:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:21:9d:17:d2:31:80:bd:f6:ec:c6:97:34:
                    38:dd:0b:6f:f7:2e:10:29:7f:6f:2e:f0:bf:2a:62:
                    21:86:ed:9a:15:c7:2d:99:84:e9:aa:4a:62:72:b9:
                    05:1a:8b:dc:fc:4a:8a:9d:05:8a:6f:f3:9e:bb:8a:
                    38:b5:d4:69:bc:c3:73:74:f3:3f:8a:3d:54:30:b8:
                    57:69:f1:79:29:13:80:c7:78:13:0d:c7:35:2e:c6:
                    3b:ac:23:4a:ec:7a:3d:f7:af:50:5e:48:1b:97:a3:
                    d9:78:13:1a:9d:c4:7d:b8:5e:52:66:05:c3:7d:84:
                    95:83:e2:18:7e:fe:d8:e8:77:8c:eb:ab:f6:21:f1:
                    f4:d5:02:27:18:83:a4:08:00:a5:6b:e6:09:40:44:
                    6a:39:5a:aa:39:af:29:0f:24:7b:a1:a1:d0:23:2d:
                    5c:c6:0f:97:5a:17:6b:6c:4d:9b:7f:86:87:c8:83:
                    4d:d4:65:db:53:2d:b0:85:d9:58:9d:e3:fd:8a:d0:
                    7c:ed:f9:12:2c:09:be:81:0c:62:f0:d2:ad:a9:28:
                    a9:a9:e7:14:eb:2d:07:1f:68:99:f0:61:64:e4:e3:
                    2f:08:d7:d8:fe:e1:82:95:c6:89:d0:f4:eb:e5:d9:
                    e7:59:31:37:1f:0d:fa:e9:6c:aa:e2:05:93:30:fe:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:CD:81:27:6C:F4:39:DE:30:51:77:47:FA:1B:64:BD:87:7F:CA
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32332d3233203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:18:fc:22:c3:24:ce:c8:fa:b1:f1:30:20:71:88:08:d0:6a:
         5d:44:d2:6a:7b:6c:4f:b7:9c:ef:cb:fe:a5:19:07:fa:a6:82:
         d6:44:b6:9e:0e:4d:25:27:f2:ae:bf:f5:c0:5b:53:96:dc:a5:
         de:34:fe:d1:67:f3:2b:15:5a:57:2a:e7:f2:09:52:6b:10:c7:
         85:36:6e:ca:3e:06:23:36:2f:bd:d9:74:e1:ea:7b:ce:71:8e:
         85:27:24:d7:79:fb:e6:44:7d:a7:28:1f:e0:cf:e1:0d:7f:0f:
         29:22:6e:29:cc:22:1b:c2:7d:bf:53:e7:00:65:29:b0:0a:79:
         ea:62:da:2f:f0:87:d7:32:09:52:79:66:96:36:77:91:92:e0:
         46:79:52:a0:4f:87:8b:03:5f:c0:46:80:73:b5:3f:18:6e:af:
         dc:1d:48:e0:bf:01:d2:82:32:0b:f4:20:68:e0:b7:b1:3a:16:
         a7:c5:92:b7:b9:02:ee:66:2c:93:5b:69:cc:82:59:44:b3:c6:
         5a:d2:5e:8b:f4:71:bd:1c:e7:2e:3c:9b:d9:26:34:76:18:57:
         f2:3f:45:70:7e:87:31:76:b9:9a:33:53:a7:df:e4:a8:dd:82:
         65:17:d2:2f:9a:6f:dd:2c:d0:77:de:fe:f4:85:cd:ee:de:9e:
         c3:fd:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:30 2026 by rpki-client