Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3233312e3235322e302f32322d3332203d3e20323638393736.roa
File:                     3137302e3233312e3235322e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          hkrzwQp8MlUz33P428C90W6m7yTXeQW7Pi8R4msswNM=
Subject key identifier:   8E:3F:9F:D3:9E:AF:83:C1:09:A7:A5:52:E4:D0:08:D7:4E:CA:82:D1
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       6F879906A9840FF6D4FB5290C3FDEF23A4E5E0DD
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3233312e3235322e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:32 +0000
ROA not before:           Mon 11 May 2026 17:42:32 +0000
ROA not after:            Mon 10 May 2027 17:47:32 +0000
asID:                     268976
IP address blocks:        170.231.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:99:06:a9:84:0f:f6:d4:fb:52:90:c3:fd:ef:23:a4:e5:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:32 2026 GMT
            Not After : May 10 17:47:32 2027 GMT
        Subject: CN=8E3F9FD39EAF83C109A7A552E4D008D74ECA82D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:d5:cb:a5:14:e5:0c:15:15:43:f1:c7:64:
                    b5:f2:74:ae:3c:d7:cc:d7:6e:ed:7e:b2:ee:73:5f:
                    2a:b3:03:d2:b6:fe:0b:35:0d:ec:e6:59:b2:66:25:
                    a3:1e:ae:4f:3d:d7:85:03:e1:82:bf:d9:43:d4:c6:
                    00:54:11:f4:19:48:0b:f7:44:7d:d6:41:2e:80:05:
                    69:02:bb:e0:2c:16:f9:42:29:5d:62:9f:49:31:fb:
                    3c:00:f6:43:96:54:cb:74:5f:e2:e0:3e:7b:a3:ce:
                    2d:03:a2:3c:f0:8d:13:1b:53:bf:0e:85:de:9a:43:
                    57:3c:79:cb:fd:24:27:56:1c:c8:bf:dc:95:4f:57:
                    ec:95:02:c1:90:c2:73:76:cf:64:72:8e:6f:06:c6:
                    23:3c:93:03:66:d0:0e:70:3c:23:86:9b:87:07:39:
                    e3:a6:ea:6b:21:78:ee:c1:c7:21:82:70:1f:c3:0b:
                    f4:64:93:00:af:4a:46:cb:9d:c0:c2:3f:69:bd:1e:
                    15:7d:b5:ef:fd:aa:85:9b:ce:ae:9a:68:0d:45:89:
                    5f:a3:57:b5:61:26:22:3c:79:ba:e7:ae:b2:ef:1c:
                    77:88:8d:32:5e:98:19:83:7c:f5:7c:a8:d0:dc:59:
                    95:e8:3f:05:74:83:e4:f2:9c:7c:ff:e1:70:c2:43:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3F:9F:D3:9E:AF:83:C1:09:A7:A5:52:E4:D0:08:D7:4E:CA:82:D1
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3233312e3235322e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:e9:8d:54:ec:ed:b4:28:3c:7c:17:48:c8:0b:b5:5f:90:
         60:83:17:0a:96:11:ff:55:8b:6f:e6:a0:62:e0:89:f8:b2:78:
         6d:63:43:cc:21:88:ef:23:f1:46:bc:72:5f:ba:93:80:e5:08:
         78:c8:df:f4:7f:b7:4a:7f:bc:4b:e9:dc:30:af:58:c8:b8:16:
         b4:3d:59:24:ea:86:af:c6:45:32:f5:97:c9:84:0b:c3:53:70:
         5d:77:ec:11:fb:86:17:5c:03:07:1f:15:3b:3e:93:ce:55:fc:
         bb:88:eb:61:db:c1:78:73:c0:ed:49:ec:bd:94:80:91:79:b1:
         c3:fb:43:0c:b7:3e:fb:a2:bf:35:ae:00:94:c1:c0:43:ae:97:
         3e:71:49:1c:21:9e:b6:a5:f9:3d:74:f9:38:f5:30:8d:87:b6:
         2a:7f:fd:af:c8:cd:6b:a7:cb:ef:d1:59:8b:36:d4:02:fa:fd:
         74:a7:ef:bd:96:5e:c2:b2:4c:46:0b:6f:44:bb:78:e9:3b:2a:
         d1:20:6f:dc:fd:bb:a0:ba:e5:41:e8:85:1c:e8:2f:44:55:d5:
         04:c3:ef:71:cc:63:8a:ef:c4:3e:ce:5d:c3:77:4b:08:08:7d:
         86:f5:26:8f:17:6b:3d:0e:35:e9:66:c5:90:ec:2f:e8:1c:b4:
         68:a5:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:35 2026 by rpki-client