Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa
File:                     3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          Zsgrcsm/aBuoUMsj2ZTRG2kZHrELRjoEKf1Fw0Onm0o=
Subject key identifier:   8F:8A:B5:85:33:B3:C5:EF:5B:C3:CE:83:1E:C6:11:E4:06:D7:CB:AE
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       163E661CE1934D072D6E928A6ABB979B298228A5
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 15:12:32 +0000
ROA not before:           Wed 28 Jan 2026 15:07:32 +0000
ROA not after:            Wed 27 Jan 2027 15:12:32 +0000
asID:                     264496
IP address blocks:        170.238.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3e:66:1c:e1:93:4d:07:2d:6e:92:8a:6a:bb:97:9b:29:82:28:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 15:07:32 2026 GMT
            Not After : Jan 27 15:12:32 2027 GMT
        Subject: CN=8F8AB58533B3C5EF5BC3CE831EC611E406D7CBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:ef:6b:76:20:a0:77:54:9a:0e:97:6e:c7:
                    9e:14:59:f5:ac:f8:77:b2:89:bc:66:b1:3c:65:2a:
                    98:03:8c:58:61:ea:62:5e:73:bf:ef:c0:75:43:8f:
                    28:d2:a4:71:e8:db:23:0a:1f:78:37:65:40:0e:45:
                    83:b5:0c:7a:1e:ec:74:1e:42:d7:71:37:a9:95:ba:
                    8e:b0:d0:45:c4:db:5b:a8:52:87:5a:26:19:e2:5d:
                    64:1f:0a:23:f5:76:62:2f:4e:3e:b8:8a:8e:76:4a:
                    9b:77:e7:90:9d:a5:38:92:f7:d3:ad:03:f7:3c:5a:
                    34:1e:de:07:71:3a:fb:bb:67:03:77:8f:ff:b9:c1:
                    3d:2b:98:c6:4e:1a:9c:a9:f6:9f:50:a1:49:7d:fb:
                    de:fe:1b:37:5f:1a:80:1c:81:a3:48:a5:84:29:d4:
                    f8:ff:47:4b:bb:2b:f5:c0:4f:b4:89:97:61:78:67:
                    fc:0d:bb:11:30:5f:ff:c7:cc:37:0c:ae:d4:f2:9f:
                    40:0c:2e:f7:60:5b:1e:3c:e2:10:18:dc:3c:5b:48:
                    d3:81:97:a1:2b:a7:dc:c4:5e:8f:f4:72:e0:e3:8c:
                    ff:da:7f:23:bf:70:04:0b:ef:12:eb:96:cf:37:63:
                    f2:5c:21:6c:b9:d0:ac:f6:d9:67:5b:9e:43:28:51:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8A:B5:85:33:B3:C5:EF:5B:C3:CE:83:1E:C6:11:E4:06:D7:CB:AE
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:59:58:bd:98:0a:b6:17:a3:dc:d8:42:db:03:a1:3b:0f:de:
         4c:1d:e9:e3:df:d0:30:55:c7:1d:32:3f:d8:9d:dd:20:ad:85:
         06:e3:90:e0:bb:6c:18:80:21:81:68:5e:33:43:cf:28:0c:be:
         e9:9e:5b:f4:96:9e:d7:df:a9:1c:9e:06:a0:e6:f2:70:4f:ed:
         ff:01:e0:a2:76:ab:a3:31:b8:0f:f3:35:3a:c2:1e:f4:e4:6f:
         8d:6e:bf:0e:48:78:c7:29:49:37:a6:e1:c4:15:3a:48:7c:f1:
         c9:be:5f:c4:d8:03:69:d9:9b:27:0a:18:79:56:04:4c:b4:42:
         ab:37:4e:48:59:1e:10:16:e2:7d:44:12:9e:69:00:c2:b5:00:
         eb:25:bb:c0:6f:cf:83:f4:65:73:69:1c:bb:71:4f:cc:1c:8f:
         ae:a4:cb:7f:6f:18:f2:70:c6:88:8a:bb:6e:78:33:b4:47:35:
         43:50:66:28:70:b9:85:8f:ab:1b:51:84:cd:b6:77:b1:2d:74:
         06:02:48:bb:89:f8:79:92:1f:81:cf:61:c1:da:54:9e:81:53:
         72:44:75:a6:b6:db:c2:a8:72:e0:87:83:a7:10:29:01:20:25:
         b1:04:a7:9f:d0:3a:b6:82:1d:65:ad:01:cf:67:32:31:38:be:
         7b:41:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:49 2026 by rpki-client