Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32342d3234203d3e203533303134.roa
File:                     3137302e3234372e3139362e302f32342d3234203d3e203533303134.roa (raw, json)
Hash identifier:          2yptuzC1uHLz9m+2GKzhmkDSRx3VpO1M+heXINM46o4=
Subject key identifier:   38:6D:92:83:53:10:E9:F3:80:62:EE:4F:7C:6C:C4:BB:E3:CC:80:EF
Certificate issuer:       /CN=D57BCBD39B612B2816D24DC9939606EC4B4C8810
Certificate serial:       6E4B691004DC3AB5AD3748418E8F71F2BA8C6AA7
Authority key identifier: D5:7B:CB:D3:9B:61:2B:28:16:D2:4D:C9:93:96:06:EC:4B:4C:88:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57BCBD39B612B2816D24DC9939606EC4B4C8810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32342d3234203d3e203533303134.roa
Signing time:             Fri 17 Apr 2026 14:00:42 +0000
ROA not before:           Fri 17 Apr 2026 13:55:42 +0000
ROA not after:            Fri 16 Apr 2027 14:00:42 +0000
asID:                     53014
IP address blocks:        170.247.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/D57BCBD39B612B2816D24DC9939606EC4B4C8810.crl
                          rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/D57BCBD39B612B2816D24DC9939606EC4B4C8810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57BCBD39B612B2816D24DC9939606EC4B4C8810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:69:10:04:dc:3a:b5:ad:37:48:41:8e:8f:71:f2:ba:8c:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D57BCBD39B612B2816D24DC9939606EC4B4C8810
        Validity
            Not Before: Apr 17 13:55:42 2026 GMT
            Not After : Apr 16 14:00:42 2027 GMT
        Subject: CN=386D92835310E9F38062EE4F7C6CC4BBE3CC80EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:b5:af:58:f9:d0:8a:a6:1c:bc:f6:dd:c6:
                    df:3b:da:56:11:d0:76:83:60:4b:53:20:36:bb:97:
                    ad:d0:0a:de:f5:1b:3f:10:55:5c:6d:4b:2d:9f:1d:
                    a0:fe:23:a8:d2:e9:d8:91:b0:61:c5:78:2c:a9:ba:
                    7f:6d:19:86:9b:55:e6:fe:82:9c:dd:13:d8:1b:fd:
                    dd:ac:8f:d7:78:2e:98:96:2f:c6:44:60:9b:e4:a5:
                    d2:be:c5:be:95:09:a5:c3:de:de:7e:f6:87:8c:0c:
                    6b:c9:11:46:28:67:38:e3:93:95:ce:07:fe:4b:96:
                    11:c3:5a:09:76:9d:57:5d:cf:b4:c8:65:49:ad:bc:
                    29:dc:54:0a:b2:64:6b:dd:6a:34:19:e4:ae:0c:ce:
                    b7:fa:2d:86:06:ad:0e:cb:6f:c1:59:ea:01:26:6f:
                    38:e6:85:5b:ff:27:45:1d:9f:5a:7f:86:df:45:25:
                    54:05:9e:80:69:b2:b0:4d:5e:0c:eb:49:0f:87:97:
                    c8:b4:18:c0:b4:61:7f:f3:5c:3f:a3:12:88:3d:7b:
                    9d:7c:7b:84:4e:84:59:27:ca:71:a5:dc:94:4e:8f:
                    d8:12:32:53:74:0b:07:ec:3f:79:57:0a:56:24:3c:
                    63:c6:ba:2f:44:83:df:06:34:23:b6:12:d0:56:50:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:92:83:53:10:E9:F3:80:62:EE:4F:7C:6C:C4:BB:E3:CC:80:EF
            X509v3 Authority Key Identifier:
                keyid:D5:7B:CB:D3:9B:61:2B:28:16:D2:4D:C9:93:96:06:EC:4B:4C:88:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/D57BCBD39B612B2816D24DC9939606EC4B4C8810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57BCBD39B612B2816D24DC9939606EC4B4C8810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32342d3234203d3e203533303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:72:58:3a:15:1f:36:f0:01:bd:da:94:61:d2:79:aa:22:61:
         09:38:32:f4:96:5e:d1:52:36:c2:74:3d:38:c3:27:28:1c:37:
         04:22:1a:33:3f:d5:d4:aa:1a:4a:de:a8:c6:f0:cf:f5:e6:a6:
         7c:bd:14:3d:61:64:3c:ef:25:d2:b5:64:53:04:6e:29:e3:b8:
         6a:e2:8b:55:47:bc:9b:3e:32:78:be:89:3a:b1:4c:28:86:41:
         0f:39:d8:38:9d:26:3b:05:25:85:d5:cc:df:c8:d0:f0:7b:fe:
         1f:03:ad:6b:42:df:1b:0c:a4:77:38:c4:95:65:32:de:64:3a:
         14:d7:32:49:eb:4c:8d:89:c4:33:8b:6f:e9:0d:d7:3b:97:8b:
         c2:40:70:73:89:ab:77:1e:46:7d:6b:de:d9:5a:21:3a:10:52:
         9c:ea:92:a7:c8:8e:37:c3:1a:aa:48:10:6b:9e:ae:98:4b:26:
         3c:a3:64:63:d6:2c:70:7d:cc:c3:68:72:67:a0:e8:e8:d5:8d:
         76:81:10:09:bc:8b:66:8d:f5:e9:f9:bb:aa:4e:b5:5c:9e:15:
         5c:c7:53:62:0f:e7:d8:8d:a2:d6:9f:27:33:0d:fa:7e:7c:85:
         28:9e:d5:cf:d4:af:2d:61:19:e5:9b:d6:5c:78:a6:fd:30:79:
         18:81:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:05:39 2026 by rpki-client