Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa
File:                     3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa (raw, json)
Hash identifier:          g57W3YdTkS8ZH8gA1b79hshzaqapOSqarzo1Llqq5nQ=
Subject key identifier:   2E:6C:C9:1D:DF:C0:4E:C0:0D:5B:F3:03:05:69:E1:A2:B1:90:DB:78
Certificate issuer:       /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial:       2BF6FA333AB42535909B8CAE7952F91906892876
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa
Signing time:             Sat 18 Apr 2026 22:52:50 +0000
ROA not before:           Sat 18 Apr 2026 22:47:50 +0000
ROA not after:            Sat 17 Apr 2027 22:52:50 +0000
asID:                     271245
IP address blocks:        170.247.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:fa:33:3a:b4:25:35:90:9b:8c:ae:79:52:f9:19:06:89:28:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
        Validity
            Not Before: Apr 18 22:47:50 2026 GMT
            Not After : Apr 17 22:52:50 2027 GMT
        Subject: CN=2E6CC91DDFC04EC00D5BF3030569E1A2B190DB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:dc:b1:fa:44:36:39:18:0a:17:52:c0:bb:
                    30:f3:4b:40:a8:cf:32:0e:d7:14:ea:df:36:0a:c3:
                    2b:ad:92:e3:7d:49:0f:e7:61:63:8c:6d:75:c6:ea:
                    8b:06:5a:93:90:b7:f1:aa:9e:16:b8:ba:90:20:cb:
                    34:9e:e2:62:f8:a5:1b:4d:5f:47:e2:b1:8d:3d:cc:
                    81:8d:e9:0c:a6:30:00:7c:12:87:ba:b2:94:d4:06:
                    9b:58:de:1d:f8:8a:e3:2c:1e:8e:c9:37:65:de:42:
                    57:50:e0:bd:77:96:4d:f5:24:c9:4d:0a:fd:b0:5e:
                    b8:94:85:2b:65:7a:2d:9b:20:12:0b:f5:d4:08:29:
                    c0:c1:a5:3c:08:4f:f3:31:f2:5a:af:71:70:6e:ef:
                    17:d1:04:92:e3:88:eb:19:b1:84:4d:45:26:28:56:
                    8b:0d:20:e5:a5:08:bd:b4:31:13:3a:d9:53:a3:8a:
                    c9:6d:d2:01:c9:20:63:df:7c:42:ec:2d:d8:d0:1f:
                    74:02:7b:e3:68:8c:3a:a1:8e:f6:b1:4c:d6:c1:b6:
                    d4:9e:95:7b:cb:2c:df:c5:f8:08:1f:76:4e:f2:96:
                    f9:ab:58:94:c4:c1:89:0b:f5:85:88:86:17:9a:e7:
                    6b:e0:6b:dc:85:77:8d:f2:db:cf:27:0f:c0:fb:1a:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:C9:1D:DF:C0:4E:C0:0D:5B:F3:03:05:69:E1:A2:B1:90:DB:78
            X509v3 Authority Key Identifier:
                keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         eb:91:00:a6:2e:da:7f:2c:0b:20:fb:74:a0:c0:3c:06:72:bc:
         87:45:3e:e6:21:52:26:f7:37:b0:47:05:5b:3d:25:88:b3:b6:
         4d:d4:b0:c0:ba:5a:af:72:45:6a:11:65:1a:71:c2:6c:f1:52:
         02:f4:c4:2b:73:86:db:11:5c:a1:4d:ec:73:5c:53:a0:18:d3:
         74:c0:c9:90:ca:d0:ff:4d:82:af:24:38:e5:14:5a:fd:64:8f:
         65:ec:81:93:ab:63:fe:28:42:00:0b:3a:e1:28:61:59:05:ac:
         78:97:56:c6:92:8c:a9:c2:0a:48:ad:43:43:3c:00:47:52:05:
         f3:2e:3e:61:d5:e6:1a:83:3a:67:2f:84:59:60:1d:b5:a2:a1:
         0a:82:16:10:26:ff:54:a5:b5:e7:99:fb:fd:34:46:1b:df:57:
         bf:f5:47:22:4c:bc:94:3a:ad:c3:ea:76:81:46:5a:c3:70:b3:
         df:08:03:5b:cb:a1:68:a0:98:38:8e:05:00:94:d2:55:ee:48:
         f8:bc:9a:2c:42:c8:e2:45:9b:c6:01:9a:0f:60:c8:b6:3e:b9:
         86:ca:83:79:13:b9:cb:1f:18:01:88:a5:eb:c2:2d:31:50:98:
         a5:34:e5:d1:2b:66:7c:1b:4d:fb:97:37:59:da:1e:3b:26:fd:
         00:bf:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:51 2026 by rpki-client