Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3332203d3e203532393133.roa
File:                     3137302e3135302e37362e302f32322d3332203d3e203532393133.roa (raw, json)
Hash identifier:          Q9OvGuz8TTKF9RjQ74+6TngzRXXOpcOYYmP7t5SvAHM=
Subject key identifier:   05:27:BD:EF:A4:F0:5C:D3:2B:38:45:09:3A:A7:39:B1:43:71:CF:D8
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       3326861284C629B4AA74B2D452EC6198D3282602
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3332203d3e203532393133.roa
Signing time:             Mon 04 May 2026 20:18:27 +0000
ROA not before:           Mon 04 May 2026 20:13:27 +0000
ROA not after:            Mon 03 May 2027 20:18:27 +0000
asID:                     52913
IP address blocks:        170.150.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:26:86:12:84:c6:29:b4:aa:74:b2:d4:52:ec:61:98:d3:28:26:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: May  4 20:13:27 2026 GMT
            Not After : May  3 20:18:27 2027 GMT
        Subject: CN=0527BDEFA4F05CD32B3845093AA739B14371CFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:be:89:ba:e0:74:19:c8:5e:86:e1:3d:75:
                    20:f2:bc:c6:49:0e:a0:bd:ed:d9:60:df:ed:4b:6c:
                    13:78:09:65:91:de:98:6c:3f:eb:7f:26:52:55:d8:
                    58:f1:a6:9b:72:9d:40:3b:a6:80:f8:08:f3:e6:1e:
                    a8:80:09:a1:a2:72:f5:2a:c2:f9:b4:ca:c0:c5:00:
                    a5:4a:63:6e:a6:a7:a6:58:5b:44:62:8e:0f:8f:1a:
                    9b:67:e8:66:b5:65:62:1b:3b:68:7a:e7:3b:43:dc:
                    f9:2b:d9:ee:22:2a:c3:4d:42:58:84:15:6b:86:87:
                    a3:7b:01:4b:6c:82:9d:bf:39:8e:7a:20:d4:52:4e:
                    7d:ad:13:d5:66:01:0a:84:68:ef:a5:0d:6a:d2:3e:
                    9c:34:8b:21:ec:94:df:11:de:93:76:4e:1c:21:03:
                    4e:f7:88:45:4f:f9:67:77:94:96:f8:25:ef:4d:bd:
                    12:84:68:87:93:7f:a5:cd:91:1b:f5:30:20:bf:e2:
                    92:ed:c6:4b:51:53:cc:ab:e0:8a:30:d6:10:71:ca:
                    fb:1a:f7:ec:36:b5:17:c0:5f:9e:33:05:d0:2a:c4:
                    e1:72:2b:b6:3b:7d:44:fa:ff:34:08:4d:59:7c:4d:
                    af:b6:8d:b8:32:15:b1:de:2a:f6:c0:aa:e0:ca:c7:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:27:BD:EF:A4:F0:5C:D3:2B:38:45:09:3A:A7:39:B1:43:71:CF:D8
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3332203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:79:0d:31:c2:07:b3:77:ab:60:70:49:8f:fa:57:94:34:
         12:98:fc:7d:14:da:3e:e3:32:17:f4:cc:81:9e:4a:78:fa:08:
         d5:8b:3b:03:ad:0e:4e:fe:2c:6b:6d:10:d5:95:b6:96:89:63:
         90:85:d5:1a:34:ba:10:57:82:6c:f7:90:c4:80:c6:75:d6:c6:
         67:69:ff:09:5a:52:4d:96:2d:7e:13:66:49:b0:3f:c2:4f:e2:
         be:c1:57:b1:a0:a6:03:23:60:58:d2:f4:69:79:25:21:b6:83:
         da:37:f6:f0:0a:d7:17:ef:c0:58:ef:fa:70:3e:b3:fc:b2:22:
         47:4a:1c:1e:29:5d:32:4a:bc:cd:e7:da:94:48:cb:08:be:1a:
         7c:6e:f8:ee:a3:a6:d2:31:b9:e6:56:30:3e:83:4c:5a:b7:b0:
         52:e0:48:1e:9e:8c:09:93:35:4f:ae:90:bb:37:e0:b9:9e:75:
         aa:20:d2:23:3c:ac:67:6e:4b:1d:ac:d6:2f:d0:2b:a2:9b:7f:
         5a:00:ec:4f:de:58:ba:c2:02:f3:47:0e:56:90:84:f6:1e:df:
         0b:fb:78:f2:dd:a9:81:98:c9:2f:96:cc:3f:9e:41:eb:da:b5:
         94:b4:0c:ec:67:75:c5:c9:e5:c2:4e:74:2a:2d:66:a0:a2:d7:
         8d:54:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:46 2026 by rpki-client