Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32322d3332203d3e20323636353032.roa
File:                     3137302e3234342e3137322e302f32322d3332203d3e20323636353032.roa (raw, json)
Hash identifier:          Zsx8CaC+0iu0btn8JW5GDNJz56h+vwchjVWIJIRM4qQ=
Subject key identifier:   74:8F:2E:19:9D:16:89:1A:9F:B0:58:87:AF:04:AC:7A:31:E0:0E:1C
Certificate issuer:       /CN=DF551A8956CD5E3FE73AEA8A7610CD2EDE935060
Certificate serial:       4C636ACAF14274A9FA744186D93117E0219E68AB
Authority key identifier: DF:55:1A:89:56:CD:5E:3F:E7:3A:EA:8A:76:10:CD:2E:DE:93:50:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32322d3332203d3e20323636353032.roa
Signing time:             Sat 25 Apr 2026 15:23:43 +0000
ROA not before:           Sat 25 Apr 2026 15:18:43 +0000
ROA not after:            Sat 24 Apr 2027 15:23:43 +0000
asID:                     266502
IP address blocks:        170.244.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.crl
                          rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:63:6a:ca:f1:42:74:a9:fa:74:41:86:d9:31:17:e0:21:9e:68:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF551A8956CD5E3FE73AEA8A7610CD2EDE935060
        Validity
            Not Before: Apr 25 15:18:43 2026 GMT
            Not After : Apr 24 15:23:43 2027 GMT
        Subject: CN=748F2E199D16891A9FB05887AF04AC7A31E00E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:14:68:49:4a:c7:7f:bb:bf:ec:5c:47:ea:
                    94:d1:9d:14:8e:50:65:2d:49:17:a6:11:c0:0e:fc:
                    8f:ef:ed:69:16:c0:b7:76:19:31:19:42:a1:ff:af:
                    f0:04:52:4e:fd:60:a9:0f:65:22:de:66:7a:2d:1a:
                    4b:02:34:9f:c2:fb:3f:5d:7b:60:1a:e4:04:a9:c7:
                    5a:db:cf:e5:b7:88:eb:b9:91:98:aa:11:9f:a3:4c:
                    f4:9b:e0:97:0b:f7:70:aa:35:a4:40:2a:ea:65:17:
                    60:88:0e:67:2a:e0:f5:59:41:d9:c1:a9:7e:91:f7:
                    f5:83:d2:62:bb:88:32:51:fb:6e:97:e0:21:42:19:
                    7f:2b:0e:49:96:14:fe:a7:c1:ac:2d:8d:65:18:28:
                    1e:9f:c0:a9:2c:f3:23:52:52:72:dd:2c:ac:ec:dc:
                    f3:cb:b0:5d:f8:36:64:b0:f0:28:f6:97:fc:de:04:
                    4b:33:ca:6c:91:96:40:ab:06:46:88:99:b7:50:1d:
                    91:87:df:6e:40:4c:d4:ab:3e:15:6e:eb:81:bf:8d:
                    96:45:f1:f9:a1:43:e4:ac:4f:1e:fe:c7:f7:40:c7:
                    3d:36:c5:a6:04:db:8a:27:f0:52:9e:7f:c9:ce:80:
                    48:55:16:c0:81:cb:cb:f2:41:af:43:96:7c:0a:12:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8F:2E:19:9D:16:89:1A:9F:B0:58:87:AF:04:AC:7A:31:E0:0E:1C
            X509v3 Authority Key Identifier:
                keyid:DF:55:1A:89:56:CD:5E:3F:E7:3A:EA:8A:76:10:CD:2E:DE:93:50:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF551A8956CD5E3FE73AEA8A7610CD2EDE935060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/3137302e3234342e3137322e302f32322d3332203d3e20323636353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:36:2f:53:54:a0:f9:d1:88:6f:0b:d6:8a:69:12:c3:d6:84:
         dc:dd:d2:66:e8:6e:68:3b:b3:1e:41:d8:8e:2d:32:87:a3:f2:
         b2:d6:8f:9d:f2:ec:0d:08:a8:8d:41:49:b4:94:67:46:41:c9:
         cf:2f:77:b9:ba:7f:35:e8:60:6b:fc:d9:59:df:17:f5:53:c0:
         ba:75:7d:1f:ed:bc:b6:50:d4:e9:c9:63:08:81:81:d4:79:92:
         e6:fc:ba:78:1e:89:ae:04:2b:e3:f4:f9:29:27:81:ac:3a:a7:
         25:d4:a7:26:98:7e:76:84:3b:38:cf:13:1c:02:91:2b:b5:d8:
         eb:1e:47:22:5a:2e:5b:a7:0e:d5:4c:6a:7a:cb:1b:71:a0:7c:
         62:df:87:84:7e:55:d4:58:1b:2e:da:8a:59:61:02:4b:7b:b1:
         ee:52:d8:4e:2f:fd:1d:15:f5:ae:ae:a1:40:72:3e:06:6b:83:
         9b:2d:f3:f7:9d:43:66:10:d6:8d:0d:aa:56:7c:82:b2:ac:6e:
         0d:02:ab:d4:5c:dd:88:a1:f3:a9:58:65:80:a5:bc:55:44:c3:
         47:4a:43:0e:7b:37:e0:72:53:2f:d9:0b:20:39:58:1f:19:c1:
         77:97:17:f6:c9:19:76:7d:72:58:4d:78:a1:a8:17:39:89:38:
         cd:9c:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:58:52 2026 by rpki-client