Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32342d3234203d3e20323731323435.roa
File:                     3137302e3234372e3138342e302f32342d3234203d3e20323731323435.roa (raw, json)
Hash identifier:          lvcYOojIZD2NMnHsbr0OT7Bv5XXPDKrX7gQj/ScFxBA=
Subject key identifier:   EE:02:5E:63:28:E3:2A:53:CC:26:D9:A7:53:BF:3A:10:AE:A5:A4:AE
Certificate issuer:       /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial:       04E0C7BD30AA4711E572906B224D5C29A2131257
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32342d3234203d3e20323731323435.roa
Signing time:             Sat 18 Apr 2026 22:52:48 +0000
ROA not before:           Sat 18 Apr 2026 22:47:48 +0000
ROA not after:            Sat 17 Apr 2027 22:52:48 +0000
asID:                     271245
IP address blocks:        170.247.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e0:c7:bd:30:aa:47:11:e5:72:90:6b:22:4d:5c:29:a2:13:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
        Validity
            Not Before: Apr 18 22:47:48 2026 GMT
            Not After : Apr 17 22:52:48 2027 GMT
        Subject: CN=EE025E6328E32A53CC26D9A753BF3A10AEA5A4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:30:8a:b3:13:d2:81:71:ea:a7:65:07:db:
                    70:92:6f:55:2f:aa:ac:96:26:63:a9:a7:db:72:7e:
                    2d:06:cc:fa:3c:73:54:45:72:e8:38:79:8d:fb:9f:
                    77:18:48:d7:c5:33:bb:c2:47:90:07:c0:e4:42:21:
                    ad:29:8d:94:57:88:4b:59:87:98:f8:ac:4c:71:9b:
                    94:9a:8e:45:27:6a:a0:b3:e4:07:4b:9a:9e:4a:56:
                    39:85:31:bb:5b:dd:3e:58:d7:cb:c3:63:3b:74:ad:
                    7a:70:ef:6c:19:e9:25:be:71:a1:2e:42:79:bf:67:
                    04:20:dc:74:1d:56:a9:60:2c:6b:a6:7d:dc:71:4e:
                    5a:be:70:84:33:58:4a:d3:02:d6:3a:63:59:0f:bc:
                    4f:5a:9c:eb:6c:d7:02:c3:35:da:54:23:0c:7f:28:
                    72:1c:c0:2c:49:74:32:af:b9:74:b6:2c:06:5d:61:
                    c5:5c:f2:1e:60:70:67:39:5a:b4:de:ca:24:21:bc:
                    02:10:c4:51:6e:7c:f3:cf:08:dc:9b:cf:5e:da:02:
                    91:e1:d9:f8:1c:a0:f7:e2:29:c2:f3:58:cf:2d:11:
                    cf:6f:97:4a:77:69:33:04:ad:bd:65:f7:3b:2d:01:
                    7a:1b:c6:c3:57:db:a9:bc:1f:66:d9:55:0e:38:f7:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:5E:63:28:E3:2A:53:CC:26:D9:A7:53:BF:3A:10:AE:A5:A4:AE
            X509v3 Authority Key Identifier:
                keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32342d3234203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:13:91:fb:5e:d5:03:a5:3f:c4:ed:b5:b7:6c:81:ab:3e:
         98:fd:51:d2:5d:df:4a:09:ef:f0:d7:1f:70:17:5a:c5:6d:a2:
         b5:e9:8d:85:44:bb:97:52:f2:58:16:02:c0:b7:6f:1b:45:e4:
         e8:8f:e2:57:c5:27:65:83:ba:84:8a:47:c0:6b:fa:c9:0c:c9:
         0e:8a:dd:57:89:88:ff:db:dd:a4:6c:05:07:c6:12:7b:fd:eb:
         51:d4:d5:b7:b3:72:b2:94:17:dd:27:73:2d:b6:b0:02:25:b0:
         ab:f0:c8:66:dd:51:df:f0:68:cd:10:e2:0b:f2:c8:cb:12:b2:
         81:10:af:1d:ed:4b:09:ef:ba:8d:76:51:ca:c0:9b:f4:d3:2f:
         97:3b:ba:9e:be:81:41:94:ea:03:07:52:0a:c3:c9:fc:76:d5:
         83:26:22:96:aa:30:cd:18:25:b9:af:6b:db:9e:b7:d6:35:91:
         f9:69:2e:44:ed:92:b3:fc:14:b8:5b:f9:74:b3:ed:88:21:5f:
         c4:71:dd:b3:e3:7a:9c:dc:f7:26:f6:65:54:dd:f0:bf:0d:ca:
         64:92:2b:b0:d5:67:62:d2:d5:a9:cf:40:95:8e:32:d7:95:cf:
         38:6a:06:7b:f7:b0:18:44:8b:fc:67:ae:2f:de:98:b9:51:17:
         0f:77:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:42 2026 by rpki-client