Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32332d3233203d3e20323636343731.roa (raw, json)
Hash identifier:          i967tBloZ8b205pTMda2zphNGuxEq2A1egKcx4L6XTo=
Subject key identifier:   FD:03:4A:B9:09:D9:15:7F:8F:BD:AE:EA:FF:3D:B1:48:BA:07:12:5B
Certificate issuer:       /CN=D1513638404A484545681236A6B4FFB90E8BE7D2
Certificate serial:       72DCEC25B6FD5E87B8D9200762FC294323E51287
Authority key identifier: D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa
Signing time:             Fri 18 Sep 2026 21:00:42 +0000
ROA not before:           Fri 18 Sep 2026 20:55:42 +0000
ROA not after:            Fri 17 Sep 2027 21:00:42 +0000
asID:                     266471
IP address blocks:        170.83.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dc:ec:25:b6:fd:5e:87:b8:d9:20:07:62:fc:29:43:23:e5:12:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1513638404A484545681236A6B4FFB90E8BE7D2
        Validity
            Not Before: Sep 18 20:55:42 2026 GMT
            Not After : Sep 17 21:00:42 2027 GMT
        Subject: CN=FD034AB909D9157F8FBDAEEAFF3DB148BA07125B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:3f:96:0e:c5:87:65:02:18:3e:50:44:94:
                    31:4a:da:ee:ec:92:21:64:0a:59:5f:ae:16:c8:92:
                    a0:5a:4f:08:29:75:5e:d7:9f:99:12:49:8f:d7:68:
                    c2:9c:6c:58:af:af:48:b5:2f:ea:30:a9:9f:1f:42:
                    1f:62:cd:3d:5c:39:06:e6:7a:14:93:ca:b3:94:8c:
                    44:e6:e8:d6:3e:31:05:61:52:b1:f8:40:03:b5:07:
                    45:fe:b9:72:02:8a:1a:a7:32:27:c8:0d:4b:d6:4b:
                    8c:32:c4:b6:ff:22:49:67:aa:59:7e:04:d4:e2:42:
                    04:20:de:2e:a3:4c:cd:ba:d1:e9:3f:8c:cb:1c:da:
                    e2:4c:a6:6d:77:1d:a3:9b:7f:52:f9:c4:62:85:7c:
                    5e:b4:e5:df:4a:4b:96:20:4a:f6:61:ff:a4:2f:23:
                    a3:69:3c:9d:1c:c2:01:ec:38:0e:d3:cd:40:2b:95:
                    78:f1:d7:2d:96:8b:de:fc:1b:4d:df:81:11:58:14:
                    a2:d9:fe:81:da:5a:a7:68:08:8e:43:e2:a0:18:cc:
                    05:9c:ae:4b:99:e9:ae:5c:87:4e:a8:51:2c:de:02:
                    75:75:f7:5e:a2:98:a6:25:84:59:f4:8b:11:f4:1b:
                    c0:09:77:14:d0:b2:7f:82:dc:87:51:46:b1:e7:3a:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:4A:B9:09:D9:15:7F:8F:BD:AE:EA:FF:3D:B1:48:BA:07:12:5B
            X509v3 Authority Key Identifier:
                keyid:D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:98:e4:50:54:66:b8:ea:87:fa:12:60:cf:96:67:86:56:33:
         fb:5b:fb:53:77:bd:07:46:cc:aa:d0:2f:e3:f0:32:9c:35:91:
         b5:85:7d:d9:0e:87:85:d8:da:30:e9:20:7b:72:1e:d6:f5:1a:
         5b:64:91:45:7a:5b:de:63:57:01:d2:64:73:02:81:b0:d7:09:
         45:c6:6a:f5:d4:83:06:22:25:40:2a:18:f6:30:7d:ed:db:0e:
         93:fb:e5:bc:6f:97:f1:51:01:29:59:84:3d:f7:da:11:8c:a1:
         1a:d0:11:8d:a4:3d:5f:7f:ca:68:e1:c0:f8:fb:ce:68:47:b6:
         24:dc:9b:0d:a3:74:d8:e5:6a:db:d4:1c:ae:0d:c6:cc:6e:4e:
         08:9d:2f:c6:d0:64:05:95:be:2a:30:4e:de:6b:94:78:1c:ab:
         c5:68:1e:f0:d3:85:8a:13:00:2e:e0:f5:67:6f:52:27:51:21:
         e5:d9:68:c0:cb:00:ec:2c:10:6f:8f:34:91:ef:84:05:2e:6b:
         c7:1c:36:fe:3e:a2:46:08:e9:fc:eb:49:8f:1e:f2:6e:93:d1:
         32:19:cd:d2:9e:45:9a:09:b7:b7:16:53:10:7f:c6:ac:f0:09:
         4c:4a:4b:ed:7b:e4:63:fc:c7:2c:35:2e:6a:18:b3:65:a7:d6:
         ff:bc:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:03:10 2026 by rpki-client