Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3234352e3135322e302f32322d3332203d3e20323638393736.roa
File:                     3137302e3234352e3135322e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          nFcXXxj7peHEKHW/dr658KOUm3wnjIyn+zpvslspJIQ=
Subject key identifier:   F5:A2:17:42:B5:28:ED:28:53:B6:93:8F:CB:8A:37:01:FA:8D:1D:A4
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       527F831D9A0A9AF43A8E2EC0B26B17B603F9F7E6
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3234352e3135322e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:37 +0000
ROA not before:           Mon 11 May 2026 17:42:37 +0000
ROA not after:            Mon 10 May 2027 17:47:37 +0000
asID:                     268976
IP address blocks:        170.245.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7f:83:1d:9a:0a:9a:f4:3a:8e:2e:c0:b2:6b:17:b6:03:f9:f7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:37 2026 GMT
            Not After : May 10 17:47:37 2027 GMT
        Subject: CN=F5A21742B528ED2853B6938FCB8A3701FA8D1DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:16:ce:24:73:67:dd:a6:e5:b2:bf:22:71:
                    01:75:92:8d:3b:db:b6:46:9c:ac:45:cd:dd:f9:cd:
                    f0:23:03:de:eb:70:75:7d:3e:03:33:2d:c1:dd:93:
                    e6:5e:f2:ce:be:48:61:fd:a1:36:64:f9:bc:69:e7:
                    7e:19:48:63:ad:9a:b0:bd:d6:13:2d:c5:02:73:a9:
                    e7:f5:bc:b9:c5:1c:26:11:1e:9f:c6:fa:88:89:d2:
                    c4:49:d9:2a:01:19:09:80:e4:60:36:bd:35:68:f5:
                    a3:e1:d7:2b:ff:4b:c7:4c:15:f2:0b:f4:5a:75:55:
                    3c:a5:11:ab:c2:47:40:cb:5c:5e:19:db:dd:39:fb:
                    4a:a3:bf:d5:64:3c:26:96:41:3a:ff:40:0f:8a:af:
                    6a:a7:8e:e1:8a:2b:22:63:83:65:ba:66:50:2e:35:
                    31:ed:cd:23:bd:2a:7d:1c:10:f1:6d:6c:7a:ce:14:
                    35:51:82:a9:a9:d9:41:8a:a1:b0:60:0d:e4:39:40:
                    ca:dc:f6:e9:45:f9:1b:e0:98:b9:af:10:cf:96:1e:
                    2c:43:f5:bf:a5:60:16:75:a5:61:e8:f8:a2:5b:43:
                    b3:fb:04:7f:fd:a7:46:5f:44:d0:bc:eb:2c:0c:c1:
                    ba:ad:ee:09:1f:b7:2f:d2:e1:28:ca:9e:0f:25:9e:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:17:42:B5:28:ED:28:53:B6:93:8F:CB:8A:37:01:FA:8D:1D:A4
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e3234352e3135322e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:ae:0c:53:a5:7a:82:b9:e1:da:bb:3f:da:a8:27:57:60:
         fa:dc:09:1d:a2:19:d4:e2:a0:86:47:15:58:43:67:99:d2:f7:
         50:d2:08:b6:9e:27:eb:04:41:49:16:82:30:85:8a:10:85:c1:
         b3:2a:75:a9:51:ed:b8:0e:cd:5f:1e:4a:d1:30:23:83:a4:5f:
         52:f4:ea:3c:c5:d3:2b:c8:47:92:b9:0a:b0:12:60:21:d2:79:
         6d:c2:fa:3e:81:46:4e:4a:f5:02:7e:80:60:9a:20:fd:d2:a4:
         ae:24:51:50:ec:3d:c3:6e:03:b6:90:07:9e:f3:39:7b:27:45:
         d9:39:ee:8c:22:53:98:bc:c4:00:d6:a6:1c:3a:5e:31:e2:14:
         ad:4c:80:25:fa:93:b7:cd:b1:0e:b6:80:38:2d:17:65:23:93:
         f2:61:2d:0a:30:20:98:1a:8e:b6:22:70:b0:8e:85:e6:c8:13:
         34:fa:a0:c9:09:b7:4d:06:75:c0:7b:70:0e:7b:3c:b2:4b:ea:
         26:7b:4f:c0:b6:15:0e:e8:b9:55:44:2c:f9:f2:a1:1e:ca:61:
         2d:b0:b3:16:06:37:50:f2:7b:c1:5d:29:af:df:8a:20:5b:75:
         59:96:b0:69:23:c0:91:e1:c5:68:41:d8:18:33:c4:f0:00:d9:
         cc:5b:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:31 2026 by rpki-client