Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32342d3234203d3e20323635333938.roa
File:                     3137302e3235342e3134342e302f32342d3234203d3e20323635333938.roa (raw, json)
Hash identifier:          g8rTtCygxt8+hMoSqq1vlvgh/pdd12zjZZGdMqzq+pE=
Subject key identifier:   F2:BE:E4:CC:70:6D:83:2E:CB:0D:E3:0B:E1:8F:4C:59:7A:6E:C0:B0
Certificate issuer:       /CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
Certificate serial:       0EAD8222AB27683B3C88060E95929B68EC860E89
Authority key identifier: 7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32342d3234203d3e20323635333938.roa
Signing time:             Thu 07 May 2026 13:53:04 +0000
ROA not before:           Thu 07 May 2026 13:48:04 +0000
ROA not after:            Thu 06 May 2027 13:53:04 +0000
asID:                     265398
IP address blocks:        170.254.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl
                          rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:82:22:ab:27:68:3b:3c:88:06:0e:95:92:9b:68:ec:86:0e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
        Validity
            Not Before: May  7 13:48:04 2026 GMT
            Not After : May  6 13:53:04 2027 GMT
        Subject: CN=F2BEE4CC706D832ECB0DE30BE18F4C597A6EC0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:08:b0:e0:45:f3:a3:d5:d6:64:d8:ec:4f:
                    3f:a7:91:eb:33:5f:a2:a3:8e:71:f6:32:b7:38:c2:
                    63:ab:d6:ac:50:72:ca:4d:8a:5a:b0:64:f6:7d:f6:
                    07:3a:02:80:87:1b:2c:a5:e8:96:de:97:27:26:69:
                    21:41:91:d4:89:ec:31:fe:56:82:64:b2:1a:28:40:
                    ad:4b:3f:1f:6c:c0:1e:c6:08:6a:29:0e:dd:94:3c:
                    0c:82:43:a5:ac:0c:46:be:42:32:28:a0:c3:39:88:
                    c5:56:87:94:f1:0e:8a:6e:00:76:2f:e7:f0:72:3b:
                    9d:54:bf:f2:63:7a:26:a9:40:7d:f1:97:36:b7:99:
                    66:b0:1f:b7:1e:d3:6f:e7:57:84:84:d2:8b:12:51:
                    57:92:8f:52:e3:51:45:7e:3a:a2:5a:3a:53:0f:f6:
                    be:ab:a0:81:fc:c8:42:1f:76:9b:6b:b7:49:56:d1:
                    bd:02:69:c6:ac:5a:e5:e0:13:08:cd:5b:22:19:d5:
                    41:05:3f:8d:33:89:2b:e5:6b:e4:0f:9c:b8:c8:71:
                    a3:e2:e7:cd:e1:5d:77:c6:32:4d:97:7e:38:3e:ad:
                    fb:67:3d:0f:b7:8a:ff:6b:f8:4f:f1:24:c9:5b:8a:
                    b3:45:47:7d:e8:b3:1b:04:d8:20:19:71:ec:1f:18:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:E4:CC:70:6D:83:2E:CB:0D:E3:0B:E1:8F:4C:59:7A:6E:C0:B0
            X509v3 Authority Key Identifier:
                keyid:7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/3137302e3235342e3134342e302f32342d3234203d3e20323635333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:73:cc:4f:89:d7:87:3d:2c:76:1e:ac:ab:bc:66:72:00:
         51:9a:60:cc:0a:1a:89:a2:82:81:81:e9:c5:d0:ca:9c:d4:9a:
         b0:b1:82:e9:a1:e1:83:be:b7:93:4d:68:aa:80:d5:b8:15:8d:
         e8:7f:2c:8c:37:4d:ec:72:aa:3a:25:41:b3:22:cb:33:37:20:
         f5:dd:dd:dc:07:99:05:67:8b:17:89:8c:cc:23:6f:85:ce:3f:
         1e:25:95:ee:ff:4e:bc:f2:6b:5a:aa:3f:05:29:c9:17:38:e2:
         d3:d1:f4:4a:e6:cd:72:27:fc:e2:4b:59:52:65:9b:2b:83:db:
         7b:8c:51:62:55:bc:02:ca:f9:68:af:94:b1:23:1c:74:80:3a:
         f8:15:a6:ed:56:68:da:cb:99:58:12:dc:69:d8:72:78:5a:9b:
         17:3e:65:5e:74:81:02:68:03:dc:a7:fb:38:c4:68:bb:60:67:
         9e:6d:3f:5e:2f:06:5e:78:11:d3:54:62:5f:50:26:9f:eb:b2:
         7f:77:e5:bb:98:5a:6e:c5:89:7f:54:d3:d6:0a:58:fc:6b:d8:
         86:41:2b:46:52:39:67:4b:e3:73:9b:ec:cf:a6:74:55:1f:58:
         fa:68:1a:0a:1e:0a:c2:79:e3:34:27:59:87:49:bb:89:3e:a2:
         91:ae:f9:8f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDq2CIqsnaDs8iAYOlZKbaOyGDokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QwOUQ4RUE4RTkxMDZBNkRGMTY0N0M5RUREQUNFRUNE
NERBMjlGMzAeFw0yNjA1MDcxMzQ4MDRaFw0yNzA1MDYxMzUzMDRaMDMxMTAvBgNV
BAMTKEYyQkVFNENDNzA2RDgzMkVDQjBERTMwQkUxOEY0QzU5N0E2RUMwQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnCwiw4EXzo9XWZNjsTz+nkesz
X6KjjnH2Mrc4wmOr1qxQcspNilqwZPZ99gc6AoCHGyyl6JbelycmaSFBkdSJ7DH+
VoJkshooQK1LPx9swB7GCGopDt2UPAyCQ6WsDEa+QjIooMM5iMVWh5TxDopuAHYv
5/ByO51Uv/JjeiapQH3xlza3mWawH7ce02/nV4SE0osSUVeSj1LjUUV+OqJaOlMP
9r6roIH8yEIfdptrt0lW0b0CacasWuXgEwjNWyIZ1UEFP40ziSvla+QPnLjIcaPi
583hXXfGMk2Xfjg+rftnPQ+3iv9r+E/xJMlbirNFR33osxsE2CAZcewfGKW3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8r7kzHBtgy7LDeML4Y9MWXpuwLAwHwYDVR0j
BBgwFoAUfQnY6o6RBqbfFkfJ7drO7NTaKfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmppdW0zNWhIWXk5dnNieWNFb05peGs3OXdUOTRjOGhVZVJWNTk0d2RW
U0wvMC83RDA5RDhFQThFOTEwNkE2REYxNjQ3QzlFRERBQ0VFQ0Q0REEyOUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEMDlEOEVBOEU5MTA2QTZE
RjE2NDdDOUVEREFDRUVDRDREQTI5RjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqaXVtMzVoSFl5OXZzYnljRW9OaXhrNzl3VDk0YzhoVWVSVjU5NHdkVlNMLzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+kDANBgkqhkiG9w0BAQsFAAOCAQEATbdz
zE+J14c9LHYerKu8ZnIAUZpgzAoaiaKCgYHpxdDKnNSasLGC6aHhg763k01oqoDV
uBWN6H8sjDdN7HKqOiVBsyLLMzcg9d3d3AeZBWeLF4mMzCNvhc4/HiWV7v9OvPJr
Wqo/BSnJFzji09H0SubNcif84ktZUmWbK4Pbe4xRYlW8Asr5aK+UsSMcdIA6+BWm
7VZo2suZWBLcadhyeFqbFz5lXnSBAmgD3Kf7OMRou2Bnnm0/Xi8GXngR01RiX1Am
n+uyf3flu5habsWJf1TT1gpY/GvYhkErRlI5Z0vjc5vsz6Z0VR9Y+mgaCh4Kwnnj
NCdZh0m7iT6ika75jw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:20:11 2026 by rpki-client