Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
File:                     3137302e3234362e39362e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier:          Kmw/4UgH0to/yoTUx15jVSTYdjtBS1S5SnDtQDDg7w8=
Subject key identifier:   27:80:49:A2:D9:C6:E7:74:D4:1C:83:41:B6:0D:26:6A:2D:55:E6:49
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       088AF882113B8953CDC120E6AC2CFFF2220FCE4F
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
Signing time:             Tue 20 Oct 2026 15:58:22 +0000
ROA not before:           Tue 20 Oct 2026 15:53:22 +0000
ROA not after:            Tue 19 Oct 2027 15:58:22 +0000
asID:                     52721
IP address blocks:        170.246.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8a:f8:82:11:3b:89:53:cd:c1:20:e6:ac:2c:ff:f2:22:0f:ce:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Oct 20 15:53:22 2026 GMT
            Not After : Oct 19 15:58:22 2027 GMT
        Subject: CN=278049A2D9C6E774D41C8341B60D266A2D55E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:48:6b:df:29:31:40:f8:d9:1d:9e:6c:c5:
                    c8:fc:89:d3:4a:25:2e:aa:10:fd:12:7f:ef:9a:c4:
                    0f:b6:9d:d1:8e:ee:fd:15:8c:0a:fe:c9:db:1c:38:
                    5e:c5:ee:72:e4:a9:ab:32:fd:63:f8:4c:14:a1:1e:
                    ac:2d:28:61:ea:8c:5e:bf:d0:e2:a1:c3:68:3e:b4:
                    94:80:ab:f5:26:7a:bf:20:2f:ba:33:d7:74:90:86:
                    34:47:78:fd:f5:90:e1:e9:4b:14:54:c9:b6:d9:b1:
                    35:35:3f:aa:cf:99:5a:62:c8:15:48:89:a1:50:e6:
                    cc:57:1f:88:76:84:02:6e:62:4c:c5:87:fa:95:48:
                    13:53:e7:36:ba:62:2b:4e:49:fe:ce:96:5d:e6:c5:
                    53:af:2e:4f:82:79:23:4c:97:ec:10:d4:40:27:2b:
                    e8:a9:3f:de:63:b5:db:a2:71:77:21:cf:26:37:b1:
                    2b:a3:0b:51:55:d6:cb:d9:76:ca:ff:23:2f:eb:af:
                    bb:ef:fd:ba:e3:08:68:a1:1d:b7:ca:78:4f:e3:bc:
                    ac:01:02:c6:8c:8f:c4:6d:35:77:ad:85:4e:74:3a:
                    14:b4:aa:bd:a7:3a:6f:ba:1c:69:06:e2:78:8f:d0:
                    a9:bb:70:c9:e6:4a:dc:d1:a6:87:d9:ab:43:5a:65:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:49:A2:D9:C6:E7:74:D4:1C:83:41:B6:0D:26:6A:2D:55:E6:49
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:35:d0:2e:5c:19:85:5d:5d:81:9d:18:e6:19:75:92:eb:
         94:d3:d0:71:68:9e:d5:2e:06:e4:24:7a:69:32:e1:a7:56:a3:
         e4:66:b4:a7:7d:24:15:30:6b:28:9f:3f:16:99:a6:21:05:e5:
         65:5f:61:53:09:a5:9d:9d:0b:eb:05:ce:c4:40:aa:86:31:f8:
         23:ad:98:ab:70:a3:dc:23:5a:27:c9:13:6f:24:58:e7:c9:ca:
         90:b4:24:40:3a:5f:c5:bc:d5:b3:23:33:17:51:be:b8:81:13:
         82:85:fa:b8:a3:31:02:b2:5b:1e:e7:6a:ba:31:e6:1c:65:eb:
         29:ba:82:b0:c7:08:6d:21:61:43:f5:db:d7:1f:61:d1:d2:12:
         23:00:84:95:cb:52:0d:07:e6:11:34:c8:01:2a:c0:fc:ac:ef:
         99:0d:e8:ed:69:a9:85:be:a2:20:d8:e0:1a:17:41:08:8a:6c:
         b0:8f:0c:bf:41:96:db:45:e8:ce:a9:03:e3:c1:39:4c:5d:8e:
         e9:0d:d0:f0:c9:77:fd:e1:fa:34:f6:b5:3f:b3:3d:53:ad:f8:
         41:c0:ab:1f:68:6c:59:ce:76:e1:ca:c3:06:68:09:b6:b9:ce:
         97:15:53:e3:e5:53:9c:2a:ab:94:19:48:e8:f9:39:3e:07:c0:
         fb:4c:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:04:41 2026 by rpki-client