Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32322d3234203d3e20323636343630.roa
File:                     3137302e38322e3235322e302f32322d3234203d3e20323636343630.roa (raw, json)
Hash identifier:          t10twVH0NfGZYTnRYPRbCdeOt1yTuLX5j8n7js0uPQA=
Subject key identifier:   B2:53:3D:16:AD:12:43:10:FC:1F:BC:33:2A:5D:40:B9:64:84:82:89
Certificate issuer:       /CN=16F69BAEC41D899102439F82C6967D3722C9EA1F
Certificate serial:       36E561BBEC4778DC7E459B2D0D38A3549F1D22B4
Authority key identifier: 16:F6:9B:AE:C4:1D:89:91:02:43:9F:82:C6:96:7D:37:22:C9:EA:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F69BAEC41D899102439F82C6967D3722C9EA1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32322d3234203d3e20323636343630.roa
Signing time:             Fri 13 Mar 2026 20:41:10 +0000
ROA not before:           Fri 13 Mar 2026 20:36:10 +0000
ROA not after:            Fri 12 Mar 2027 20:41:10 +0000
asID:                     266460
IP address blocks:        170.82.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/16F69BAEC41D899102439F82C6967D3722C9EA1F.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/16F69BAEC41D899102439F82C6967D3722C9EA1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F69BAEC41D899102439F82C6967D3722C9EA1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e5:61:bb:ec:47:78:dc:7e:45:9b:2d:0d:38:a3:54:9f:1d:22:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F69BAEC41D899102439F82C6967D3722C9EA1F
        Validity
            Not Before: Mar 13 20:36:10 2026 GMT
            Not After : Mar 12 20:41:10 2027 GMT
        Subject: CN=B2533D16AD124310FC1FBC332A5D40B964848289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:20:36:4d:06:e0:41:53:48:f1:9b:01:58:
                    fa:ae:71:95:05:31:1c:c8:57:c6:dd:b6:2e:e5:52:
                    de:22:66:7c:ef:f2:d0:5a:1a:f9:17:f0:49:ac:b9:
                    ef:a5:0d:43:6a:f4:21:2f:f8:42:fd:0e:81:9d:20:
                    3d:d8:3e:55:a4:b0:fd:74:e4:9f:99:19:cb:e3:66:
                    29:a8:e8:bf:f9:76:75:d3:84:61:e0:ac:b2:67:28:
                    c3:80:1d:a4:8d:90:2d:9a:80:b9:d2:40:2f:1a:5c:
                    12:50:c7:bc:e6:9d:b9:77:1f:05:c1:47:d3:22:b7:
                    4a:b7:80:da:03:a8:55:82:7e:28:37:97:40:03:5b:
                    c9:26:33:dd:b8:24:b2:85:bc:73:9d:4d:1b:89:f9:
                    e3:aa:8d:c5:75:78:97:ef:c5:3a:f7:ee:e1:70:73:
                    39:8c:0e:6e:a2:13:82:27:83:d7:6a:fe:19:72:34:
                    2e:1d:0a:61:25:bb:42:2e:bb:d9:40:8c:0e:1d:02:
                    9e:93:44:28:fa:2e:f6:31:4e:cb:07:b3:13:06:3d:
                    49:e1:42:c8:c9:c7:d5:ab:dd:a6:b6:d1:77:7e:36:
                    ef:23:29:93:41:79:b3:9a:7a:bd:b6:c8:66:49:71:
                    66:71:0b:e9:25:78:96:15:85:78:17:d8:15:91:b9:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:3D:16:AD:12:43:10:FC:1F:BC:33:2A:5D:40:B9:64:84:82:89
            X509v3 Authority Key Identifier:
                keyid:16:F6:9B:AE:C4:1D:89:91:02:43:9F:82:C6:96:7D:37:22:C9:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/16F69BAEC41D899102439F82C6967D3722C9EA1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F69BAEC41D899102439F82C6967D3722C9EA1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32322d3234203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:f8:82:c2:57:2e:53:be:90:4d:79:70:c4:83:be:db:6c:
         a3:47:39:45:a0:b5:63:7d:7a:92:d7:f6:27:a2:40:88:41:ae:
         25:cd:68:98:02:ba:0d:79:a4:45:67:3c:5e:a8:a5:1d:b6:78:
         32:f8:e0:ba:d5:9b:bc:d5:c8:2d:6e:24:7c:2f:75:99:5b:ca:
         25:7e:e5:fb:8b:d5:6c:80:c9:fa:ca:a7:97:67:bb:7e:50:4d:
         26:78:1e:55:ea:cc:68:20:f2:d9:69:0f:52:90:26:6e:23:3a:
         57:71:b5:2a:5a:0d:70:40:0a:f4:ef:25:db:d5:54:ba:9d:d6:
         c8:89:ed:8b:a5:39:f6:35:33:0a:05:b4:36:a5:ea:8b:b8:33:
         73:b4:d0:32:35:b7:f9:96:f7:1a:b3:8f:d4:25:7e:a3:db:be:
         9f:15:ac:e7:78:84:80:e5:7f:28:75:9a:65:8b:34:f7:2f:aa:
         67:5d:b3:3e:d3:98:be:8a:23:c9:ee:3e:f4:7b:14:17:9a:fe:
         fa:f4:8d:53:99:f1:08:64:b4:da:0c:89:4a:58:bb:82:24:2c:
         96:e4:16:d4:84:86:78:f2:43:fa:cf:0c:99:2a:a7:63:c9:8b:
         d5:1e:01:8f:23:67:97:cd:0c:84:07:cd:56:4d:53:06:b4:36:
         ce:2f:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:38 2026 by rpki-client