Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa
File:                     3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa (raw, json)
Hash identifier:          pOHhFmdyatR1MR6Z+b3wELe8I2IT6g+bqcwFsO35vY8=
Subject key identifier:   CD:91:F4:56:13:8F:7F:E1:B7:FC:B0:35:EB:AC:52:A4:CA:6C:F4:98
Certificate issuer:       /CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
Certificate serial:       17AD5688CD0BF99E9020448442FEFBFA35723E65
Authority key identifier: E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa
Signing time:             Fri 24 Jul 2026 17:41:59 +0000
ROA not before:           Fri 24 Jul 2026 17:36:59 +0000
ROA not after:            Fri 23 Jul 2027 17:41:59 +0000
asID:                     274520
IP address blocks:        170.84.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 02:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:56:88:cd:0b:f9:9e:90:20:44:84:42:fe:fb:fa:35:72:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
        Validity
            Not Before: Jul 24 17:36:59 2026 GMT
            Not After : Jul 23 17:41:59 2027 GMT
        Subject: CN=CD91F456138F7FE1B7FCB035EBAC52A4CA6CF498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:dd:49:c3:7a:5d:e9:d3:72:33:96:07:d2:
                    d4:21:35:8c:d6:36:57:b1:eb:e7:bc:67:81:01:0d:
                    36:a9:1f:23:9d:f0:c7:c0:d6:6f:27:0e:93:06:8d:
                    d6:33:2c:c0:04:28:e0:89:c5:77:80:76:4f:c5:c0:
                    bf:34:63:da:45:9d:db:a2:d5:74:75:74:37:a6:50:
                    60:27:4e:02:fa:a3:02:85:65:06:d6:76:44:3a:d1:
                    bc:71:e6:a2:1c:e0:57:b2:fe:9a:a1:6f:cb:91:59:
                    e2:a7:f5:9d:c9:62:2f:ab:94:ed:b9:06:a2:94:d2:
                    36:fc:1a:59:49:91:cb:a7:55:32:9d:7d:8b:98:34:
                    cf:ca:55:b2:9e:67:2a:41:8f:b5:9f:f2:ac:27:8e:
                    14:80:de:66:27:be:51:d3:4a:91:6e:0d:33:4f:04:
                    68:65:b2:aa:dc:90:fb:66:ee:96:a2:31:f0:fc:74:
                    ca:ad:f3:c5:74:85:3c:3d:99:4b:bd:21:87:4c:fe:
                    d9:67:03:53:9d:a1:cc:a1:a5:6d:59:19:eb:fb:d1:
                    ab:6e:ba:38:ab:42:90:94:09:6f:23:9e:fc:52:bc:
                    bc:af:47:ce:45:ee:33:a6:31:c0:a5:12:a5:29:0d:
                    8c:73:6b:ed:73:bc:4c:e3:00:9d:64:28:8b:4b:b0:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:F4:56:13:8F:7F:E1:B7:FC:B0:35:EB:AC:52:A4:CA:6C:F4:98
            X509v3 Authority Key Identifier:
                keyid:E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:24:72:0e:69:7d:58:97:ae:b1:15:48:a6:f2:73:b9:af:ba:
         4a:25:03:23:1c:08:81:8c:79:69:7c:95:ff:52:4f:4c:42:68:
         f8:0e:ff:62:a7:32:95:3e:98:fd:2b:a4:0f:02:5a:72:76:b1:
         6f:bc:84:98:4a:78:cd:f5:83:65:fc:e5:b3:af:1c:2b:c7:3e:
         8e:61:6d:8a:36:8a:30:3c:d8:a1:30:86:97:e2:65:f9:a9:f1:
         63:d2:a3:74:49:58:d5:4e:f4:e5:29:42:b2:18:e9:99:54:63:
         c0:96:23:a8:69:c5:a0:ce:6d:8d:ae:e3:51:a8:7e:20:6a:f8:
         66:8d:e2:9d:b5:ce:74:6f:62:e5:87:85:d0:40:1e:82:fb:96:
         2d:55:74:ce:2f:a3:17:98:67:57:a4:63:1f:9d:61:7a:a4:ee:
         ee:f2:75:6c:e0:c5:5c:79:18:4d:7c:92:d0:24:5e:a3:e0:bb:
         95:0c:8f:b7:03:2f:8e:52:51:c4:33:ab:84:c4:73:7c:d2:42:
         c6:dd:d7:a0:54:ee:f6:49:58:85:7d:17:97:c6:74:77:11:69:
         e2:25:f7:fa:aa:06:f0:7f:6c:e7:0b:40:44:78:35:52:bd:96:
         14:87:74:4a:dd:bd:38:1b:63:d0:32:69:21:a1:ad:bf:f2:39:
         72:4f:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 19:43:53 2026 by rpki-client