Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
File:                     3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (raw, json)
Hash identifier:          qt8f+pcb1F31TG0ZkhKuxjLPIOjfhzeNYXgCXl86Ugc=
Subject key identifier:   61:07:3C:F9:50:82:DD:BD:CF:1E:E1:B2:08:03:DF:93:38:17:52:83
Certificate issuer:       /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial:       68DAB2451DB24FA459F8CA7FC6C25846B380D1B0
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
Signing time:             Tue 11 Aug 2026 13:32:33 +0000
ROA not before:           Tue 11 Aug 2026 13:27:33 +0000
ROA not after:            Tue 10 Aug 2027 13:32:33 +0000
asID:                     266438
IP address blocks:        170.82.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:da:b2:45:1d:b2:4f:a4:59:f8:ca:7f:c6:c2:58:46:b3:80:d1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
        Validity
            Not Before: Aug 11 13:27:33 2026 GMT
            Not After : Aug 10 13:32:33 2027 GMT
        Subject: CN=61073CF95082DDBDCF1EE1B20803DF9338175283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:b7:2e:57:a1:b2:c6:88:08:ef:5e:78:fb:
                    c1:b7:47:9c:09:b2:95:d6:ab:25:87:f2:eb:59:ef:
                    9c:45:e4:d9:45:f8:af:bf:8a:2f:5f:89:8d:19:06:
                    aa:ac:c2:31:70:1d:f6:ce:16:59:86:7b:d8:74:1f:
                    5a:6b:74:97:4b:73:02:e2:61:ca:bb:28:c0:e1:74:
                    7f:70:a5:d1:7e:51:8e:ac:f4:0d:1a:00:d4:46:72:
                    16:fb:ca:ea:90:99:c6:41:cf:58:1b:30:b1:3a:d0:
                    40:98:00:82:e2:73:70:ee:de:a1:b0:a3:b9:55:79:
                    8c:b2:86:21:24:5a:ce:0d:a0:7f:eb:38:77:7e:c1:
                    f0:98:bf:50:14:39:33:ca:d0:b4:9c:b4:19:69:67:
                    04:12:0b:82:78:ce:de:ff:5c:8c:0b:65:61:a5:9b:
                    fa:43:92:cd:13:ef:d6:f0:bf:da:93:76:09:db:49:
                    71:bc:d9:c8:53:2a:9e:1c:d1:48:43:f5:11:c7:28:
                    5c:e6:94:04:8f:ad:f7:07:76:bf:8f:47:25:e0:38:
                    1c:53:a7:c3:e7:5a:14:25:71:87:ef:d9:4e:39:c2:
                    f4:f9:cc:43:6b:44:40:8e:fa:d1:fb:95:2d:02:73:
                    3c:90:bf:1a:52:0e:6d:da:10:12:b1:f8:ea:12:23:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:3C:F9:50:82:DD:BD:CF:1E:E1:B2:08:03:DF:93:38:17:52:83
            X509v3 Authority Key Identifier:
                keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:77:fd:5a:0d:32:31:62:0b:a3:63:39:6b:1e:59:eb:38:
         87:a9:e0:c8:04:9b:e4:dd:c2:a6:66:03:e0:d4:d0:2d:34:cc:
         a6:74:93:d7:2d:19:ec:73:39:b6:79:e1:86:27:37:9a:a0:df:
         fb:6b:18:45:7d:b9:af:0d:be:5e:3d:f0:37:40:4d:b2:2b:7f:
         7e:24:6b:2c:43:4f:d3:d6:71:92:3c:09:e9:de:b8:05:72:ee:
         65:c9:ba:3f:03:57:8b:d9:eb:d5:c5:71:9f:92:a7:f4:4f:fe:
         27:cc:7e:b4:64:be:68:28:38:3f:3a:47:c1:91:33:21:e6:1f:
         66:00:f7:95:06:ab:a2:a3:a7:a9:f9:a5:4c:e1:75:0c:6f:7d:
         30:85:5c:f6:53:03:9b:f0:20:70:81:61:f1:31:a9:18:7b:67:
         27:dc:f7:f4:80:b9:e8:e0:76:1f:cb:df:f3:03:41:02:d1:31:
         62:c6:92:cf:9a:23:b8:62:f4:13:61:24:fc:60:8a:a9:0a:ad:
         40:45:7f:26:70:3f:6e:75:42:c1:86:6b:5a:03:1e:36:56:ca:
         2b:8b:e4:22:1a:9f:6a:47:05:48:3e:dc:18:2e:2f:32:1a:b4:
         10:5c:33:50:b5:da:e6:f0:03:08:e0:5a:00:3d:c4:bb:2d:88:
         0f:dc:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----