Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3234203d3e20323632373733.roa
File:                     3137302e38322e37322e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          4UQoNRDj2Kq10DIJxzuC6o/wG5UBGBzk2ndhj+nO1fo=
Subject key identifier:   C9:6B:58:81:1A:97:9C:35:78:20:5A:B0:8C:CC:ED:3F:08:D8:D6:47
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       18301BEA404C8CA4636EDE981707F56E10904DD3
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3234203d3e20323632373733.roa
Signing time:             Sat 15 Aug 2026 16:28:31 +0000
ROA not before:           Sat 15 Aug 2026 16:23:31 +0000
ROA not after:            Sat 14 Aug 2027 16:28:31 +0000
asID:                     262773
IP address blocks:        170.82.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 21:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:30:1b:ea:40:4c:8c:a4:63:6e:de:98:17:07:f5:6e:10:90:4d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 15 16:23:31 2026 GMT
            Not After : Aug 14 16:28:31 2027 GMT
        Subject: CN=C96B58811A979C3578205AB08CCCED3F08D8D647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:30:43:9a:e2:bc:4e:7a:10:a1:33:92:10:
                    c9:02:a3:10:8a:c6:cc:3f:54:01:73:61:05:00:8e:
                    b7:d3:48:a7:20:3b:00:9c:34:62:87:5e:cb:eb:35:
                    bf:a7:57:f6:82:95:08:2d:e5:0b:ef:c8:61:5f:24:
                    b5:9d:78:d2:1d:04:56:77:fb:ba:2b:e6:e3:81:14:
                    7e:2c:0f:7a:ac:ee:19:6f:2b:2c:53:e4:ba:8e:75:
                    78:a5:5e:c0:c1:76:66:ae:2a:9e:aa:ad:09:ee:0b:
                    50:da:d3:c6:67:ac:b7:4a:be:b5:64:cf:ba:7e:66:
                    b3:17:12:11:7e:49:6e:b6:25:6c:bc:1e:f2:a6:f3:
                    83:29:a5:0c:ec:62:0c:39:27:3c:32:64:47:e2:b4:
                    de:cc:ac:30:d8:b0:9d:1b:33:01:11:9d:6f:34:19:
                    02:d3:4f:85:b4:96:25:22:68:e6:18:a0:3f:b1:bd:
                    7b:30:26:04:1b:d0:60:e4:25:e0:59:44:44:4b:70:
                    e9:b2:90:56:48:21:23:3f:ce:66:8f:48:0a:5e:a3:
                    8e:93:94:58:4e:55:62:c3:e6:53:6d:f9:34:b3:97:
                    32:a7:6b:46:af:81:e5:db:6e:e6:4b:62:88:2c:1b:
                    22:57:de:d0:ef:9c:06:90:f2:46:7f:35:ab:cd:95:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:58:81:1A:97:9C:35:78:20:5A:B0:8C:CC:ED:3F:08:D8:D6:47
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e38322e37322e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:44:13:9e:67:c5:57:0c:3a:a8:10:cc:f3:e0:2c:28:7e:75:
         e3:23:5a:51:10:5b:0d:62:f5:81:30:94:5c:a8:b3:ec:dd:ab:
         f0:cb:ec:9c:5b:1d:53:7c:02:97:84:54:57:62:33:2b:95:84:
         f5:e7:96:a6:57:5b:ba:1b:37:01:a6:28:e9:a4:03:42:c3:16:
         55:5f:d9:9f:e3:80:f9:12:aa:9a:de:71:cb:12:27:1a:ac:46:
         39:5c:e8:7c:3d:49:91:32:67:70:6e:86:61:bf:a3:76:19:f1:
         b9:68:94:7b:f0:e1:1c:20:c6:81:1e:8c:30:a5:4e:f7:20:c2:
         62:e6:a6:50:aa:af:da:6b:d3:b4:f6:14:5e:47:99:93:3a:1c:
         dc:ea:95:8c:53:e9:b4:9f:d4:32:80:42:48:ed:6b:b0:aa:75:
         86:d3:c7:a5:c4:54:dc:af:36:55:1c:8e:a2:8b:3d:21:ee:4d:
         92:11:f7:89:90:35:e7:b4:c3:04:57:06:7e:f5:31:87:68:4d:
         a5:5b:c1:cb:e7:73:a2:46:a2:76:87:42:1d:d9:90:f8:cb:f8:
         a9:5a:e4:8e:23:f6:01:61:89:a5:51:61:64:b5:d8:32:7b:c7:
         4f:2b:c1:4b:20:ac:ab:47:88:0b:ca:f0:ca:68:dd:c5:4c:cc:
         3e:90:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:28:54 2026 by rpki-client