Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa
File:                     3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (raw, json)
Hash identifier:          Vf7L0nEoqVM3zkzAfnwGKll3BsqlwtQox5GJQ4i6pB8=
Subject key identifier:   49:70:C4:76:56:4C:C0:24:31:AA:09:4E:3A:86:66:0A:EF:3B:A9:99
Certificate issuer:       /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial:       5F328777257C3E7D471D7200747A90959B46447A
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa
Signing time:             Mon 13 Jul 2026 19:10:05 +0000
ROA not before:           Mon 13 Jul 2026 19:05:05 +0000
ROA not after:            Mon 12 Jul 2027 19:10:05 +0000
asID:                     266303
IP address blocks:        170.79.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
                          rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:32:87:77:25:7c:3e:7d:47:1d:72:00:74:7a:90:95:9b:46:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
        Validity
            Not Before: Jul 13 19:05:05 2026 GMT
            Not After : Jul 12 19:10:05 2027 GMT
        Subject: CN=4970C476564CC02431AA094E3A86660AEF3BA999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:cf:ab:4a:00:18:61:39:0b:30:c9:40:12:
                    f3:5d:b6:72:0c:ec:b5:72:dd:06:fa:ca:53:11:e6:
                    58:cc:cb:61:82:5b:78:b3:a6:a1:f6:8f:5b:21:41:
                    86:7e:40:b6:79:9d:97:fe:0b:c3:af:97:6a:05:3e:
                    3f:01:be:ef:2f:cd:53:a7:9d:37:0a:75:31:f8:de:
                    f5:25:1b:2e:80:83:2a:1a:04:f4:54:02:64:dd:e1:
                    7b:54:c3:e1:17:4b:6e:77:6e:53:f2:64:46:f5:47:
                    ca:7a:17:f3:b8:3a:e9:6f:4b:b3:69:36:3f:3f:bc:
                    02:4d:7b:d8:bf:3c:2a:95:60:40:80:ac:0a:59:44:
                    78:f0:45:f7:a1:9c:19:98:ba:99:bd:34:85:e3:70:
                    7c:8f:67:2d:c9:24:14:18:b6:84:02:56:02:ce:40:
                    b4:3b:03:98:70:2a:35:3b:2e:38:29:9e:73:2b:df:
                    d2:1b:d4:5f:56:97:89:ae:25:77:9f:b2:c5:27:80:
                    cd:0f:a9:d3:a4:40:0a:37:77:28:1b:c4:46:15:9b:
                    f9:09:fb:18:bd:81:99:2f:4e:21:cd:be:31:7f:8b:
                    b5:37:5e:9e:74:06:60:4a:db:69:f6:16:0d:8b:78:
                    cf:6d:c2:41:f3:1d:7f:0a:45:eb:9e:cf:3f:18:61:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:C4:76:56:4C:C0:24:31:AA:09:4E:3A:86:66:0A:EF:3B:A9:99
            X509v3 Authority Key Identifier:
                keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:76:89:d6:21:01:af:0e:e0:1c:a2:20:35:a5:3c:b4:e7:b2:
         a3:a0:ae:9b:50:f1:3a:5a:74:d4:c6:76:05:16:f8:4a:29:59:
         b5:2f:2a:44:47:cb:9b:09:41:fd:c1:0d:f9:f7:e7:ea:62:da:
         bf:1f:20:7b:dd:c6:1a:91:75:1e:ed:5e:a5:a0:94:4d:f6:92:
         67:cf:1a:b2:40:43:9b:84:58:7e:a3:b9:9e:bf:7a:f6:38:6c:
         be:70:40:fc:eb:2a:96:e2:0d:58:ca:41:5d:19:61:d2:35:99:
         a8:73:bb:0f:6b:00:b1:c9:ed:c2:3c:ac:78:de:08:13:1d:84:
         e4:f7:ed:96:32:d2:f7:f0:81:8a:10:57:80:cf:c3:21:a8:34:
         c7:91:41:2c:c6:9c:b5:43:fd:a3:63:cf:89:3d:fa:12:c3:44:
         dc:11:1f:f3:be:f5:40:d8:f6:6d:01:ae:1b:39:a0:78:dc:d2:
         17:9e:fa:24:c9:a6:91:dd:aa:87:11:cb:7e:1a:61:01:88:35:
         ea:79:44:85:3d:cb:4f:44:bd:b8:03:60:07:c8:8e:94:ba:bf:
         bd:17:09:09:0f:b7:ef:66:6e:0b:8d:61:7b:71:39:f4:fb:9a:
         4d:c3:aa:59:c3:73:54:79:ef:6c:1d:a5:9f:1a:a6:57:61:d2:
         9a:62:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:38 2026 by rpki-client