Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
File:                     3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa (raw, json)
Hash identifier:          KU+rsv06FvQQFxx6Ca+TNJXUxMBS8lx2dBV8WvcxJws=
Subject key identifier:   FA:0E:AB:E0:08:94:5E:E1:2E:16:64:EC:74:D5:67:0F:90:95:12:01
Certificate issuer:       /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial:       20DB0F91AB793BCC9F0E00818773B988D690E384
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
Signing time:             Sat 18 Apr 2026 22:52:48 +0000
ROA not before:           Sat 18 Apr 2026 22:47:48 +0000
ROA not after:            Sat 17 Apr 2027 22:52:48 +0000
asID:                     271245
IP address blocks:        170.247.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:db:0f:91:ab:79:3b:cc:9f:0e:00:81:87:73:b9:88:d6:90:e3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
        Validity
            Not Before: Apr 18 22:47:48 2026 GMT
            Not After : Apr 17 22:52:48 2027 GMT
        Subject: CN=FA0EABE008945EE12E1664EC74D5670F90951201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:bc:2b:0c:58:f4:d1:b2:36:43:3f:71:a4:
                    85:34:e8:14:f3:d4:f4:07:c3:e9:7a:e4:3e:34:a9:
                    2b:27:17:a9:ec:ff:a7:a4:c2:f8:99:4b:71:52:4c:
                    ba:40:be:5d:a0:e6:82:89:67:47:06:94:bd:50:06:
                    18:4f:64:e8:cb:fa:b9:d4:af:aa:15:de:5a:c2:61:
                    92:cf:a8:15:0b:5f:5e:49:49:2d:31:c4:b5:a5:68:
                    75:34:14:f9:d5:00:1a:3c:26:98:df:53:c0:14:75:
                    20:c5:6f:cd:8d:7f:d4:ef:bf:8d:ea:78:74:fa:6a:
                    99:43:c5:05:4c:81:4b:82:db:47:77:9e:0a:ec:67:
                    e9:2f:3b:23:f4:7d:92:f0:18:cf:d8:d2:ce:15:e5:
                    6d:09:53:dc:44:9a:79:e3:4d:0f:cb:97:7f:38:59:
                    39:53:6c:87:91:58:e1:92:96:bd:6c:34:a8:c0:7e:
                    5a:4a:e7:ec:00:19:3e:e8:b3:c1:86:27:7c:05:17:
                    e8:54:fa:d2:d0:76:80:bf:d8:b1:80:a7:3a:52:c4:
                    96:2c:5a:2d:76:aa:f1:d4:3f:d7:49:fa:a8:3d:b2:
                    64:3e:88:5b:1d:ac:48:92:75:33:f7:e4:80:e3:b6:
                    8d:78:d8:87:6d:c8:89:8e:2f:93:a9:eb:f0:23:9d:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0E:AB:E0:08:94:5E:E1:2E:16:64:EC:74:D5:67:0F:90:95:12:01
            X509v3 Authority Key Identifier:
                keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:a5:9c:ab:90:a8:e0:66:73:14:d2:58:94:0d:83:3a:11:
         91:1e:f3:ba:98:e2:b3:1b:2d:6e:1e:48:25:cd:e0:7c:11:a7:
         66:aa:fb:f2:79:a0:10:df:f8:ed:91:76:db:54:e9:b9:62:8e:
         38:06:0d:2c:a1:6a:9f:fd:b9:fe:55:00:fa:4a:63:6b:49:95:
         43:14:e4:97:b9:37:16:b6:1b:4a:45:1f:2f:f3:1d:6b:a8:e7:
         c7:70:84:5f:e9:d5:b9:cd:a9:1f:9a:88:9d:54:cf:36:5a:57:
         e6:66:4d:2c:a6:3a:0b:a1:a9:80:53:72:dc:cc:09:d1:1b:fa:
         4a:93:b1:7b:d4:7a:49:37:dc:ef:af:20:6b:07:b7:84:35:48:
         16:ba:29:bb:64:33:1b:b8:05:96:87:58:b9:62:37:11:63:65:
         c1:52:28:30:d5:1d:5b:9c:9a:e6:d6:0c:2d:8c:b3:e9:b5:f0:
         99:b0:1c:27:51:82:37:b7:4a:a4:bd:1f:ed:66:58:fa:70:ec:
         be:2a:7e:54:fa:9b:f9:68:d7:71:10:66:f7:45:14:76:e4:d6:
         74:fe:89:e5:1e:da:42:4d:87:df:83:2b:1a:5f:f4:b8:f7:37:
         24:d3:40:00:e2:55:f5:d9:75:a8:27:b3:c1:dc:3a:c9:ec:37:
         68:b8:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:48 2026 by rpki-client