Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa
File:                     3137302e38322e3138342e302f32322d3332203d3e203631373431.roa (raw, json)
Hash identifier:          0Dk2eQwh2hGCYBlT1toyc3fu9fvKkFEIhMp3XGtOZX0=
Subject key identifier:   BC:33:1E:EF:4D:BF:5D:85:66:92:A1:F5:19:B4:C6:D2:3F:0C:39:BD
Certificate issuer:       /CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
Certificate serial:       5BB769C7328ED7B86B764C6010C887C1AAA7D1CC
Authority key identifier: 63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa
Signing time:             Fri 23 Oct 2026 20:53:53 +0000
ROA not before:           Fri 23 Oct 2026 20:48:53 +0000
ROA not after:            Fri 22 Oct 2027 20:53:53 +0000
asID:                     61741
IP address blocks:        170.82.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl
                          rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 05:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:69:c7:32:8e:d7:b8:6b:76:4c:60:10:c8:87:c1:aa:a7:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
        Validity
            Not Before: Oct 23 20:48:53 2026 GMT
            Not After : Oct 22 20:53:53 2027 GMT
        Subject: CN=BC331EEF4DBF5D856692A1F519B4C6D23F0C39BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:73:e4:d8:ac:27:58:ed:77:ca:8b:28:d4:
                    d3:8e:46:f2:c2:4c:3e:8a:31:57:fe:67:d4:b3:af:
                    54:75:ea:28:a1:40:52:dc:b4:eb:0b:63:75:2a:fd:
                    f9:53:2c:2b:c1:a0:cc:ef:3d:52:57:e5:26:c1:b2:
                    23:dd:a2:7b:66:7d:7a:c3:8d:91:a2:2e:0b:86:1b:
                    cf:6e:86:9b:97:9a:fe:cc:b0:d9:97:93:bc:63:35:
                    87:76:b9:a6:ab:d1:9e:55:c7:14:a7:a6:c1:39:77:
                    a5:25:47:82:27:e0:ef:3b:76:61:e1:59:09:11:1b:
                    2d:de:6c:ad:95:1b:4d:32:53:e7:fc:e9:8d:d5:5c:
                    47:25:c0:d7:c1:16:8e:c5:f1:0c:59:40:16:43:0f:
                    53:0b:9b:c4:89:b6:a4:b4:4e:49:cc:d7:cc:dc:c0:
                    0e:05:af:71:b9:95:5d:a1:fe:14:8f:3a:1d:dc:91:
                    8b:9e:50:99:ba:7c:e9:b1:49:52:89:ed:48:62:84:
                    ba:c9:e5:9e:d8:cf:3a:b4:33:96:bb:c8:f5:6d:c7:
                    96:71:01:44:21:b9:f4:aa:14:94:fb:5c:7a:cd:25:
                    2c:99:3c:41:05:da:18:27:26:e1:8e:e0:a3:13:68:
                    27:1b:5e:a5:3b:27:5a:1f:7d:c5:a7:26:ca:8c:ae:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:1E:EF:4D:BF:5D:85:66:92:A1:F5:19:B4:C6:D2:3F:0C:39:BD
            X509v3 Authority Key Identifier:
                keyid:63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:11:dd:e3:60:4b:ba:8b:86:ed:96:3a:d3:cb:65:24:ae:
         80:8e:46:61:21:9a:65:13:95:45:7b:b8:bd:b2:2b:66:3e:70:
         41:e9:4d:44:c8:8f:6c:34:48:b9:cd:bd:03:fc:f4:db:e5:5b:
         51:eb:d5:5d:f4:5b:23:b6:03:c6:18:5b:eb:8d:03:7e:e6:6c:
         40:4f:2c:9d:ed:36:58:fc:5a:a6:c4:67:a4:93:12:97:bf:f5:
         1b:a1:b0:b1:51:54:29:f7:81:86:47:0d:51:4e:c4:d9:7d:be:
         73:1f:a5:82:6c:a2:78:e7:54:7f:d2:dc:dc:80:ab:99:59:15:
         e1:88:0b:16:33:1f:2d:fe:49:57:05:83:8d:91:ee:1b:37:2b:
         b2:3a:78:bd:b5:a2:e2:78:73:a9:fd:54:aa:99:c4:72:b8:db:
         78:57:c0:55:cf:ff:83:8f:6e:74:1d:5a:63:8a:08:9a:bb:e4:
         d7:89:eb:ba:81:fb:fe:ea:82:be:89:97:02:cb:1e:05:21:04:
         18:17:0a:ae:a6:c4:28:88:ae:35:fd:f5:c4:a2:4e:29:f0:be:
         43:87:c1:da:8e:85:a9:fa:09:e5:91:bc:8a:ca:99:16:4e:98:
         24:82:a8:d5:3d:b2:13:3b:b1:b5:b0:83:08:c9:ff:98:32:c4:
         66:c5:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:21:18 2026 by rpki-client