Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32342d3234203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32342d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          NWjwiyjjBm31lUV6pq3bBeslNh1rKyXgv/4la7NxzHE=
Subject key identifier:   65:23:FD:7C:96:BC:F9:89:5A:4D:B9:39:73:55:E5:A4:7C:06:36:BA
Certificate issuer:       /CN=D1513638404A484545681236A6B4FFB90E8BE7D2
Certificate serial:       05747FF47DF0869F88707F19AB2CFE1C3111B531
Authority key identifier: D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32342d3234203d3e20323636343731.roa
Signing time:             Fri 18 Sep 2026 21:00:45 +0000
ROA not before:           Fri 18 Sep 2026 20:55:45 +0000
ROA not after:            Fri 17 Sep 2027 21:00:45 +0000
asID:                     266471
IP address blocks:        170.83.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:74:7f:f4:7d:f0:86:9f:88:70:7f:19:ab:2c:fe:1c:31:11:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1513638404A484545681236A6B4FFB90E8BE7D2
        Validity
            Not Before: Sep 18 20:55:45 2026 GMT
            Not After : Sep 17 21:00:45 2027 GMT
        Subject: CN=6523FD7C96BCF9895A4DB9397355E5A47C0636BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:ed:6a:e6:c6:48:f0:8c:1f:84:25:82:e1:
                    b8:0c:a7:9e:90:f9:2d:c8:37:ff:be:1a:29:a3:49:
                    c4:d7:a8:e1:24:a1:e3:17:d4:68:cf:fc:75:bd:d0:
                    c8:dd:9c:18:34:9f:07:f0:de:bd:3a:07:17:a8:8b:
                    f3:a6:34:76:e2:00:c3:ba:e8:ab:05:f4:7d:6c:72:
                    4b:64:a9:3d:5b:68:aa:7d:28:ab:07:be:5c:28:0b:
                    aa:c8:24:8a:15:4f:64:7d:55:fc:19:d3:d7:2d:db:
                    a7:88:28:d7:ad:6f:2a:2c:08:db:f2:80:d3:bb:3b:
                    91:e6:cf:36:2d:93:4d:f7:41:21:49:74:4c:5d:35:
                    9c:50:19:d2:4f:2c:06:ca:b7:ba:5c:11:72:94:41:
                    d6:bd:7f:1b:4d:f0:7e:8a:c2:08:2d:18:8d:0e:6d:
                    2e:2a:0e:32:e4:7d:10:2c:12:e7:0a:4c:b7:11:79:
                    55:26:bc:8f:08:f6:f3:81:74:8d:f1:4b:1f:f0:5c:
                    1d:83:19:1b:cc:74:e5:b3:b2:72:3c:c5:aa:85:e2:
                    35:c7:b0:49:40:ca:d9:9b:9a:51:fc:b6:47:39:28:
                    25:ab:fa:a3:d3:96:7d:73:ac:42:b5:cb:ce:18:eb:
                    65:ab:84:31:18:3f:24:b3:8f:d0:d7:19:06:c1:ba:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:FD:7C:96:BC:F9:89:5A:4D:B9:39:73:55:E5:A4:7C:06:36:BA
            X509v3 Authority Key Identifier:
                keyid:D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32342d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:53:c0:cb:a1:32:d4:37:f0:fa:6e:db:85:94:d3:71:f2:bd:
         e1:b1:b1:b3:4a:4e:6b:d8:20:3a:ae:cc:dd:22:3a:e9:ef:02:
         b8:be:65:9c:59:33:81:07:8d:86:3f:da:d0:89:99:3d:70:5d:
         85:ac:a8:b1:13:3f:39:bb:25:10:40:9a:0d:b5:61:be:32:85:
         27:71:58:4a:83:f0:f4:e5:a3:4b:92:dd:00:6f:3a:7b:98:16:
         c4:94:2d:f9:0e:a9:5f:23:04:58:b5:57:9d:ae:dd:0d:03:92:
         ee:0f:f6:5a:22:00:eb:2e:b2:ae:76:c8:a6:e4:f3:b4:51:6d:
         e3:c4:79:9b:6c:88:ed:95:0c:6e:ab:83:30:b7:bb:31:7b:30:
         e8:d0:4d:a5:2e:19:5d:24:9d:69:f3:a5:26:31:d9:f5:b1:52:
         53:aa:1e:3f:81:fe:a0:67:51:81:6f:ab:bf:6b:48:e3:47:cb:
         85:2a:73:95:47:29:62:42:f0:62:43:0a:b8:e0:0e:e3:f2:08:
         fa:b5:f1:47:4f:51:96:76:4c:b7:5d:c9:d5:b4:2e:4d:b2:64:
         f5:43:e9:6b:c1:58:7e:3e:07:8b:62:c3:ff:bf:ef:f0:1a:da:
         61:c9:2b:42:40:be:39:92:68:2c:67:10:58:01:63:f4:24:5a:
         7c:b8:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:44:37 2026 by rpki-client