Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e3130342e302f32322d3332203d3e20323638393736.roa
File:                     3137302e37392e3130342e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          ATX5beVxazTZIa8Qo9SUIBnKr5QhbYkcGTFmp+jMnQ4=
Subject key identifier:   42:C4:DA:25:C0:E2:1F:C9:3D:7A:F8:9A:95:04:2D:E2:DA:32:8D:83
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       749F9D4203C4F74F6EBFB7382BDF539FCAB802F2
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e3130342e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:29 +0000
ROA not before:           Mon 11 May 2026 17:42:29 +0000
ROA not after:            Mon 10 May 2027 17:47:29 +0000
asID:                     268976
IP address blocks:        170.79.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:9d:42:03:c4:f7:4f:6e:bf:b7:38:2b:df:53:9f:ca:b8:02:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:29 2026 GMT
            Not After : May 10 17:47:29 2027 GMT
        Subject: CN=42C4DA25C0E21FC93D7AF89A95042DE2DA328D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:cd:80:41:2a:5a:46:eb:57:f4:03:f8:5a:
                    d6:8d:97:6d:83:91:ab:e7:09:da:01:5e:7e:2d:25:
                    ec:c5:a6:8b:28:8e:4f:5f:af:2a:c4:eb:65:b9:e5:
                    30:c9:7e:b8:36:06:26:16:73:07:bb:20:8f:ea:25:
                    5a:73:35:91:6d:0c:fc:e7:8a:80:00:cb:a8:e7:07:
                    0d:34:f5:87:e8:ed:92:0d:d0:4f:19:b5:9d:92:17:
                    49:c7:3a:2d:92:98:2e:d8:5c:33:0f:0d:7a:9c:37:
                    26:28:09:74:81:d8:e4:a1:db:a1:4f:0c:e6:74:b8:
                    4d:0c:83:bf:3b:ff:c0:02:f2:8d:f1:39:cd:40:26:
                    86:da:76:90:af:b5:a2:04:2c:70:44:9d:5a:14:e0:
                    8e:bf:17:27:fd:45:0e:c4:ff:b2:ff:c2:c5:f2:a0:
                    fd:30:65:00:a9:03:4c:98:75:3c:f1:88:e0:f5:e1:
                    4f:dd:d7:9b:ad:6a:f4:84:f7:87:14:5b:3a:de:f7:
                    6f:74:b0:41:e9:a5:71:35:f2:1a:9e:d0:f2:40:da:
                    a4:2e:90:a6:24:70:23:f9:24:14:19:9d:6c:7a:3b:
                    85:e0:f3:90:19:1a:e2:37:74:69:fb:7e:9d:61:ed:
                    14:69:24:74:b8:8a:6e:60:4e:83:76:14:86:26:ac:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:DA:25:C0:E2:1F:C9:3D:7A:F8:9A:95:04:2D:E2:DA:32:8D:83
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e3130342e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:32:80:b1:91:04:09:8a:90:8d:21:a0:57:2d:2f:27:68:
         3c:a4:d9:f3:38:ce:59:af:8a:fa:1a:41:ea:2e:82:01:ef:a9:
         81:d3:98:28:05:e9:4d:d6:89:ed:a3:ce:aa:c0:8e:93:f1:83:
         6c:60:5a:e7:b2:78:1d:74:28:60:23:92:a4:0c:32:db:ef:c9:
         2b:b6:2b:47:10:22:28:00:97:44:73:f1:b1:14:51:ea:af:e2:
         cd:37:fb:bd:c6:be:db:98:fa:12:07:66:e8:0d:09:2b:88:a9:
         3a:c5:83:6f:0d:f3:c9:34:7e:6c:34:af:82:4b:ac:95:40:10:
         80:f8:76:3e:d9:d0:af:cb:c4:cb:ff:d6:37:f6:18:7d:b9:f8:
         18:d2:ee:a4:df:0d:4c:15:be:5b:ff:f6:28:aa:73:4e:12:85:
         03:37:a1:bf:82:1d:64:e8:43:5e:f3:2d:ee:49:a8:92:04:88:
         84:a8:89:44:40:74:53:11:a7:72:71:2e:34:6c:e9:5a:a3:83:
         4a:86:77:db:9a:e9:f6:28:65:3a:70:98:51:eb:4e:7e:a4:11:
         28:fc:26:6f:a7:02:8d:03:e5:4a:0a:c4:8f:02:35:06:4d:73:
         e0:21:35:d0:2a:a4:db:37:f8:80:a8:5d:a2:a8:66:45:93:d2:
         98:1e:d5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:36 2026 by rpki-client