Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32322d3234203d3e20323632373733.roa
File:                     3137302e3233312e3232302e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          olMbMWZ5GsG5XoQNDxav3wOQ08MCFppKgGKkPYoVv0g=
Subject key identifier:   51:31:4B:4A:69:DE:70:28:99:83:5F:B0:81:EC:8C:8D:C2:BC:EA:E2
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       6ACA2868AA993ED05A803C7D4DAE317716B4E120
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32322d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:44:44 +0000
ROA not before:           Fri 14 Aug 2026 19:39:44 +0000
ROA not after:            Fri 13 Aug 2027 19:44:44 +0000
asID:                     262773
IP address blocks:        170.231.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:28:68:aa:99:3e:d0:5a:80:3c:7d:4d:ae:31:77:16:b4:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:39:44 2026 GMT
            Not After : Aug 13 19:44:44 2027 GMT
        Subject: CN=51314B4A69DE702899835FB081EC8C8DC2BCEAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a5:c5:c3:84:eb:f9:0e:bf:dc:05:2c:53:33:
                    a1:02:f4:1b:3c:52:a6:9c:e0:34:55:f0:3c:2c:41:
                    fc:89:b7:ae:60:f5:4e:59:77:3e:75:35:a5:eb:e6:
                    46:bb:fe:4f:11:7c:a3:d4:0a:7a:c3:72:c6:ca:64:
                    b6:d9:35:ba:e9:72:e5:76:65:66:a6:20:ab:fc:eb:
                    49:8c:43:53:e6:cd:f5:99:40:64:64:68:94:aa:02:
                    03:b1:e5:72:4f:4d:48:28:4b:6a:09:6c:e2:38:69:
                    28:9a:bb:fd:e2:a9:6d:7c:dc:fd:52:14:08:07:10:
                    17:dc:2d:0b:d8:23:a8:56:2c:52:d8:b1:d9:e3:c5:
                    95:e1:53:4d:7b:0c:60:1c:1e:c4:cd:dd:c0:97:94:
                    b1:a0:c4:75:02:db:8d:24:53:5a:39:0f:3c:d2:06:
                    04:0e:9a:ca:15:e9:fd:04:2e:d1:ba:ba:1c:d6:ea:
                    c8:1d:c4:fe:e4:95:5d:a3:0e:09:ab:cd:58:82:b3:
                    59:c3:e5:11:6b:5f:36:af:a9:0a:f0:42:5b:91:a5:
                    07:b6:e7:96:62:34:78:b7:1c:87:40:20:48:ea:4c:
                    1a:73:9e:2a:40:de:d5:ae:d5:dc:c7:97:41:3f:18:
                    74:57:7a:6c:bb:99:59:a1:5b:96:f9:ae:cd:aa:a4:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:4B:4A:69:DE:70:28:99:83:5F:B0:81:EC:8C:8D:C2:BC:EA:E2
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:e4:6e:08:db:84:99:ce:38:aa:40:05:b5:49:ad:be:ee:
         36:69:ae:65:69:4e:6e:8c:59:05:0a:a8:94:bf:d0:d2:20:81:
         07:76:1e:d7:27:78:0b:80:51:a2:11:2c:de:2b:23:d5:23:30:
         32:b6:22:2c:14:64:f2:2f:16:58:92:48:65:34:64:be:a1:90:
         ff:08:a2:a8:0c:f1:5b:ed:ec:73:c9:92:e3:ea:6f:88:62:db:
         f5:1a:47:b4:f2:00:15:60:c7:13:6d:ff:9b:51:83:c1:0f:70:
         a2:11:e9:73:98:d7:5c:1f:15:3f:00:89:4c:a6:5c:4a:04:49:
         f0:eb:4a:cc:b5:58:d9:01:37:9a:7c:36:f3:36:e8:41:bb:1f:
         51:aa:3f:63:4c:e4:9b:9f:99:7f:37:ae:b1:4d:ea:f7:4f:c8:
         5b:9a:5b:57:08:25:57:cc:ed:89:98:30:14:70:d2:01:b2:6a:
         83:e9:9d:12:3b:be:93:d9:78:83:c3:83:5e:3a:f0:35:fb:bf:
         dd:71:47:93:f7:93:70:d2:83:58:62:2f:94:60:4e:30:d2:1a:
         9c:81:66:bd:c9:25:17:b3:7a:e3:6f:0b:8b:b8:b8:8d:bf:de:
         06:04:ef:5d:00:3a:01:18:a9:30:b2:de:ee:d2:9b:bc:26:e9:
         3f:dd:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:36:02 2026 by rpki-client