Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa
File:                     3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa (raw, json)
Hash identifier:          kGNYEfMlpJER5eRbFD/wXoVEO7qfLysmUrFZoQ6+sAE=
Subject key identifier:   15:F4:91:87:36:C5:C2:47:7D:C7:DD:33:53:35:F5:6C:99:CF:31:23
Certificate issuer:       /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial:       4F8108F6A68208F1899DDCF654A8F3C233949930
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa
Signing time:             Sat 18 Apr 2026 22:52:48 +0000
ROA not before:           Sat 18 Apr 2026 22:47:48 +0000
ROA not after:            Sat 17 Apr 2027 22:52:48 +0000
asID:                     271245
IP address blocks:        170.247.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:08:f6:a6:82:08:f1:89:9d:dc:f6:54:a8:f3:c2:33:94:99:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
        Validity
            Not Before: Apr 18 22:47:48 2026 GMT
            Not After : Apr 17 22:52:48 2027 GMT
        Subject: CN=15F4918736C5C2477DC7DD335335F56C99CF3123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:59:ab:cf:a7:76:12:fb:b6:22:9e:6f:16:
                    9d:c1:8d:f9:c0:3e:89:0a:6b:47:2c:8f:fb:47:04:
                    e2:06:42:64:ab:63:6e:02:33:2c:29:58:56:c3:03:
                    bf:c3:96:95:2c:20:4e:44:00:c6:1d:8b:d9:85:df:
                    e7:86:ee:c2:51:b6:c8:cf:bb:25:ca:d6:05:bb:72:
                    fc:1c:d1:da:7e:1f:c9:ba:28:fe:10:14:d2:d9:41:
                    5c:24:f2:a8:f3:ab:db:86:73:60:14:74:90:ff:50:
                    bb:70:e7:96:cc:20:02:fb:b2:8d:55:ec:30:cc:60:
                    38:b1:59:d8:85:06:da:e8:5b:dc:c3:12:de:e4:c8:
                    3c:67:6b:1b:11:9e:d5:93:fa:ed:3b:86:87:9c:ed:
                    d8:d1:fc:72:7c:3a:e3:e6:95:92:af:53:61:8f:ec:
                    cd:19:a6:53:9b:d0:1c:66:22:b3:7f:6f:42:81:6c:
                    69:c1:4b:16:65:62:c9:1d:b8:c5:16:55:1c:e2:79:
                    e0:88:c7:51:18:37:80:8a:73:9a:75:14:25:67:0c:
                    cc:5e:ab:cb:d0:70:e4:03:03:a9:2c:83:34:27:ad:
                    b0:eb:d8:a7:b2:50:d9:69:fe:c7:64:ff:39:28:2a:
                    36:f1:82:99:9b:46:b2:5a:71:08:b7:44:fd:46:07:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:91:87:36:C5:C2:47:7D:C7:DD:33:53:35:F5:6C:99:CF:31:23
            X509v3 Authority Key Identifier:
                keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:bc:e6:7f:f8:e0:f9:b4:bc:0d:ca:a2:34:e9:4c:34:88:
         64:37:ee:a3:bb:1c:c1:b1:6d:50:9e:59:a9:6d:4a:bf:0b:a8:
         cc:57:58:8f:4a:4f:26:cf:93:a5:3d:c6:9d:03:c2:c0:48:91:
         4b:f7:4d:9d:f0:d1:8d:24:7f:6f:99:9c:4c:82:03:eb:9f:93:
         84:8f:f5:60:be:08:10:eb:7d:1c:e8:b2:61:85:11:e0:db:8b:
         34:54:f9:07:20:5d:67:16:59:56:d4:fc:42:92:18:74:1c:4a:
         54:fa:a9:dc:64:8f:fb:b2:8a:3e:de:44:ac:b8:64:87:a0:34:
         c2:82:71:61:03:94:7b:4d:4a:b6:d6:b9:f4:67:c1:04:04:15:
         be:ca:5c:7b:ec:eb:3c:7b:48:d0:1f:ba:b6:4f:46:c6:63:9a:
         a0:e2:65:14:d9:b2:8b:ff:8d:c2:20:ef:d3:de:a7:09:3f:a6:
         a0:3c:41:8b:23:6a:b9:8a:62:e3:c7:6f:1c:42:87:32:d8:2f:
         ea:c2:95:24:12:3a:4a:e8:d5:f2:23:88:5f:e6:56:27:fa:bc:
         c6:56:0b:9f:8b:7a:5d:84:54:c1:ed:eb:5b:56:a1:b1:d6:e3:
         b2:ab:3a:83:d6:a3:3d:02:3e:cb:88:74:07:5d:96:eb:b9:24:
         80:04:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:44 2026 by rpki-client