Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa
File:                     3137302e38312e3232342e302f32322d3234203d3e203631363636.roa (raw, json)
Hash identifier:          m5AIz4adTanWEEQUeR+L+cj84ANlInhx0fKD37ggn0s=
Subject key identifier:   EB:86:8F:ED:79:FB:22:C4:4B:82:3B:C1:3C:D9:D7:57:23:F5:D8:8E
Certificate issuer:       /CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
Certificate serial:       20FFFBB6F2AADF24140E3B8ED632B6350F450D15
Authority key identifier: 2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa
Signing time:             Mon 31 Aug 2026 15:33:46 +0000
ROA not before:           Mon 31 Aug 2026 15:28:46 +0000
ROA not after:            Mon 30 Aug 2027 15:33:46 +0000
asID:                     61666
IP address blocks:        170.81.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 22:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ff:fb:b6:f2:aa:df:24:14:0e:3b:8e:d6:32:b6:35:0f:45:0d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
        Validity
            Not Before: Aug 31 15:28:46 2026 GMT
            Not After : Aug 30 15:33:46 2027 GMT
        Subject: CN=EB868FED79FB22C44B823BC13CD9D75723F5D88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:f2:ab:bb:3b:b2:ee:52:96:86:23:30:91:
                    68:cd:bb:0f:eb:c3:67:bb:73:62:38:ee:d1:61:88:
                    90:85:eb:88:d8:53:52:cf:2a:d7:56:2d:b2:66:23:
                    24:9d:31:b2:50:8d:a1:62:93:57:5f:0d:25:fc:2e:
                    c7:da:9b:6a:64:98:00:6f:06:ba:82:bf:1b:08:e5:
                    54:58:96:d9:cc:46:44:7e:5d:e4:04:b2:f0:72:a2:
                    25:f3:16:79:39:cf:1e:9a:28:5a:e9:28:55:cd:7e:
                    74:76:14:53:2b:c6:98:8b:2f:82:3d:18:3c:2f:d2:
                    0c:46:6a:99:e3:db:fe:e0:d4:2e:9e:78:ef:2e:84:
                    d1:4f:2c:0e:c9:77:c4:29:4e:52:e2:7e:77:c5:8a:
                    c4:4a:9f:c8:86:8f:50:1b:98:7c:34:5f:62:0a:69:
                    f0:e2:3a:3b:31:69:bd:89:07:2f:cb:be:b7:bc:cf:
                    22:39:8b:8a:9c:8e:f8:a8:e6:8c:8b:de:74:35:a6:
                    cc:1e:53:f1:78:a7:c9:60:91:a1:dc:90:37:09:fc:
                    53:fc:cb:98:8e:a1:c7:0a:80:f3:27:a6:f6:e9:6e:
                    e8:16:85:6e:bf:f7:c2:78:12:37:83:f8:a2:66:a1:
                    a2:b3:20:d1:1e:b6:10:8e:39:4c:c2:fb:de:f3:94:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:8F:ED:79:FB:22:C4:4B:82:3B:C1:3C:D9:D7:57:23:F5:D8:8E
            X509v3 Authority Key Identifier:
                keyid:2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:6a:9b:85:96:f9:8e:94:b2:6f:32:42:7d:ab:19:95:d8:
         da:92:77:46:83:3a:35:90:a3:bd:d5:95:b8:89:03:c4:07:7e:
         09:f1:cb:55:66:cf:81:a0:f7:d4:e9:f7:30:e6:bb:f2:98:a9:
         17:0b:e3:a4:f2:4c:0a:e0:87:13:99:82:64:cc:fd:c5:9b:a6:
         fb:2d:4a:8f:c9:3f:e6:25:47:e1:8e:03:1e:5e:d1:cd:2e:7e:
         ad:0a:4b:8f:52:c5:31:24:59:d0:36:a2:a6:58:64:32:93:6c:
         b4:89:91:64:8a:33:c3:01:27:67:88:36:50:59:c7:4a:80:ea:
         f9:b9:11:70:74:f3:44:49:94:84:c0:2b:92:27:ab:7c:c8:a3:
         a3:5c:5f:3c:20:f3:24:24:e5:2f:41:0a:b0:f4:da:6e:76:21:
         48:22:47:b0:bc:64:0c:3e:2b:7c:f9:06:2d:33:b2:e8:9e:f6:
         e4:d1:dd:a1:94:3a:fe:af:ac:06:54:da:5f:74:70:44:93:d5:
         38:aa:bc:1b:19:1a:9c:fa:6c:c2:26:98:39:2a:b6:b1:32:13:
         a2:59:7e:4c:ff:3b:94:fc:26:97:4c:dc:d0:63:b2:9a:ee:5f:
         92:90:4f:27:fa:bf:4b:b1:e4:0f:8b:fb:ba:bf:95:2e:79:2e:
         7e:fb:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:26:13 2026 by rpki-client