Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230362e302f32342d3234203d3e20323636333337.roa
File:                     3137302e37392e3230362e302f32342d3234203d3e20323636333337.roa (raw, json)
Hash identifier:          uql27+gXF62LzHfO+ws6m70a7C0yz9jHhlbINBsby54=
Subject key identifier:   29:9B:61:56:D5:91:43:1E:F6:E8:AA:34:69:36:06:AB:77:5C:AE:DF
Certificate issuer:       /CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
Certificate serial:       34C65F52102E4B172CE4DB82BD9C93F4642854BE
Authority key identifier: 01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230362e302f32342d3234203d3e20323636333337.roa
Signing time:             Thu 17 Sep 2026 12:38:16 +0000
ROA not before:           Thu 17 Sep 2026 12:33:16 +0000
ROA not after:            Thu 16 Sep 2027 12:38:16 +0000
asID:                     266337
IP address blocks:        170.79.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl
                          rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c6:5f:52:10:2e:4b:17:2c:e4:db:82:bd:9c:93:f4:64:28:54:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
        Validity
            Not Before: Sep 17 12:33:16 2026 GMT
            Not After : Sep 16 12:38:16 2027 GMT
        Subject: CN=299B6156D591431EF6E8AA34693606AB775CAEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:73:99:99:b6:b2:9f:08:7b:64:dc:c7:63:
                    9f:3a:7a:1e:3a:8e:55:2b:58:f5:44:96:19:f4:60:
                    50:18:87:e8:f2:6c:1e:0f:15:65:62:c5:e6:91:e0:
                    2e:30:a7:31:2c:39:4f:c6:60:6e:81:ee:d5:b1:73:
                    48:70:d0:f1:5e:19:a9:f6:f2:e2:91:d3:e2:18:4d:
                    2f:c9:8e:6a:fb:96:c5:d8:48:38:17:8d:41:ce:b1:
                    59:db:42:d9:98:9e:4a:f9:4b:b0:b3:5c:43:f5:d7:
                    88:f9:5e:95:f5:c6:7c:ea:42:f4:78:a2:a4:ae:83:
                    a0:80:80:20:ed:f7:01:86:c2:b9:ae:35:a9:8b:b6:
                    74:7d:0a:9a:7c:30:2f:ea:71:d5:84:57:d1:de:de:
                    d9:35:87:fb:1b:fb:2e:29:20:85:57:22:c1:81:31:
                    27:02:19:d4:c2:37:2f:82:d4:50:ff:1f:f8:e6:33:
                    a7:7d:d9:88:a9:a7:4b:f5:c2:ab:f6:fe:54:75:45:
                    fc:18:9b:0e:e2:f7:1c:5f:3e:69:e3:ab:7d:72:04:
                    e0:3a:00:05:e2:73:d4:63:0b:89:6e:62:a0:d7:54:
                    02:37:c1:87:e8:e9:94:a4:66:84:bd:b8:e9:a9:42:
                    85:bb:d9:77:a8:a0:50:39:da:4b:90:f4:90:bd:66:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:61:56:D5:91:43:1E:F6:E8:AA:34:69:36:06:AB:77:5C:AE:DF
            X509v3 Authority Key Identifier:
                keyid:01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230362e302f32342d3234203d3e20323636333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:18:c2:d7:d7:49:ed:55:83:79:b6:0d:0b:e5:5d:c7:c0:
         f5:c0:61:62:a1:40:3b:7e:f3:11:dd:3b:e4:7f:bc:99:ac:89:
         93:25:01:cf:d6:1e:94:c8:4f:38:87:b5:04:35:1c:20:c1:e0:
         49:11:af:ba:6c:a4:e2:27:27:c1:30:32:22:41:0f:12:0f:d3:
         8c:26:6a:1b:83:be:c6:52:71:0b:82:40:91:3a:f9:57:c8:3e:
         86:53:33:8d:d1:c9:a0:2f:d4:80:84:f3:14:bc:54:db:aa:28:
         0e:23:30:88:b5:85:ca:bf:e5:39:80:72:6c:a6:88:65:8f:d5:
         1e:4a:c1:60:6e:51:61:73:9f:b3:4e:bd:93:3f:c8:5c:27:94:
         7b:0f:cf:aa:ba:bf:de:3e:f3:95:d7:8b:82:07:00:3a:df:4c:
         f4:3f:f5:0d:9d:3b:89:2a:1d:1a:9a:15:87:67:34:95:a8:ee:
         0a:be:e4:61:c6:a0:19:de:8b:20:c5:87:ed:3e:f3:42:81:cb:
         39:e8:eb:76:40:19:e9:e0:b2:72:97:da:c0:95:6e:db:b9:b9:
         f7:c5:83:20:90:82:cb:ba:a3:73:0f:1d:5c:eb:b8:d7:10:47:
         58:85:59:cb:31:07:c8:2a:b5:77:d6:cd:4e:35:ca:92:2d:bb:
         b6:c2:61:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNMZfUhAuSxcs5NuCvZyT9GQoVL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFENjFBREY5QzlFRDAxQjc5OTMzQjI2NUFBQTE3N0VB
MTIwOEU0NTAeFw0yNjA5MTcxMjMzMTZaFw0yNzA5MTYxMjM4MTZaMDMxMTAvBgNV
BAMTKDI5OUI2MTU2RDU5MTQzMUVGNkU4QUEzNDY5MzYwNkFCNzc1Q0FFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoXOZmbaynwh7ZNzHY586eh46
jlUrWPVElhn0YFAYh+jybB4PFWVixeaR4C4wpzEsOU/GYG6B7tWxc0hw0PFeGan2
8uKR0+IYTS/Jjmr7lsXYSDgXjUHOsVnbQtmYnkr5S7CzXEP114j5XpX1xnzqQvR4
oqSug6CAgCDt9wGGwrmuNamLtnR9Cpp8MC/qcdWEV9He3tk1h/sb+y4pIIVXIsGB
MScCGdTCNy+C1FD/H/jmM6d92Yipp0v1wqv2/lR1RfwYmw7i9xxfPmnjq31yBOA6
AAXic9RjC4luYqDXVAI3wYfo6ZSkZoS9uOmpQoW72XeooFA52kuQ9JC9ZjmBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKZthVtWRQx726Ko0aTYGq3dcrt8wHwYDVR0j
BBgwFoAUAdYa35ye0Bt5kzsmWqoXfqEgjkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFVVHkydko4OVltd1BlTkNnYXhmOW5lRnFOMlRRMVJ4bTRmOTlpOUgx
WGcvMC8wMUQ2MUFERjlDOUVEMDFCNzk5MzNCMjY1QUFBMTc3RUExMjA4RTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxRDYxQURGOUM5RUQwMUI3
OTkzM0IyNjVBQUExNzdFQTEyMDhFNDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRVVR5MnZKODlZbXdQZU5DZ2F4ZjluZUZxTjJUUTFSeG00Zjk5aTlIMVhnLzAv
MzEzNzMwMmUzNzM5MmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqT84wDQYJKoZIhvcNAQELBQADggEBAF/uGMLX
10ntVYN5tg0L5V3HwPXAYWKhQDt+8xHdO+R/vJmsiZMlAc/WHpTITziHtQQ1HCDB
4EkRr7pspOInJ8EwMiJBDxIP04wmahuDvsZScQuCQJE6+VfIPoZTM43RyaAv1ICE
8xS8VNuqKA4jMIi1hcq/5TmAcmymiGWP1R5KwWBuUWFzn7NOvZM/yFwnlHsPz6q6
v94+85XXi4IHADrfTPQ/9Q2dO4kqHRqaFYdnNJWo7gq+5GHGoBneiyDFh+0+80KB
yzno63ZAGengsnKX2sCVbtu5uffFgyCQgsu6o3MPHVzruNcQR1iFWcsxB8gqtXfW
zU41ypItu7bCYXs=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:46:08 2026 by rpki-client