Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa
File:                     3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (raw, json)
Hash identifier:          Wjx5i+cZIylBJo6AdYJ21cMuzZIam3nXl9aWEHqeHeI=
Subject key identifier:   13:8E:E1:94:2F:8A:F1:43:ED:BC:FA:31:3E:36:01:2E:3C:1A:F6:56
Certificate issuer:       /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial:       770EFB6053548614905B9C4C7B03B66898E9D165
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa
Signing time:             Tue 10 Mar 2026 16:34:26 +0000
ROA not before:           Tue 10 Mar 2026 16:29:26 +0000
ROA not after:            Tue 09 Mar 2027 16:34:26 +0000
asID:                     28636
IP address blocks:        170.150.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
                          rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0e:fb:60:53:54:86:14:90:5b:9c:4c:7b:03:b6:68:98:e9:d1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
        Validity
            Not Before: Mar 10 16:29:26 2026 GMT
            Not After : Mar  9 16:34:26 2027 GMT
        Subject: CN=138EE1942F8AF143EDBCFA313E36012E3C1AF656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:8b:2f:30:66:97:67:03:a5:87:ce:3d:e0:
                    be:64:01:8d:e9:0d:b7:05:8d:28:a7:07:8e:7c:08:
                    52:3b:de:02:8d:e7:53:6b:57:d1:c1:c4:a3:9d:b7:
                    5a:d1:e1:0c:b7:e4:92:02:61:df:51:40:06:29:6c:
                    e8:9a:14:2a:e8:9f:e6:8c:c0:a4:5d:24:62:66:0a:
                    be:e3:a8:a3:05:0f:04:3d:4a:58:5c:92:35:1c:2b:
                    09:a8:2c:c0:94:5e:c3:17:fc:f4:f7:a4:08:75:71:
                    f5:b3:cd:fd:2c:56:59:59:36:a6:6e:b6:6d:46:76:
                    84:79:6b:c0:d5:14:27:51:e5:83:c9:58:5a:f2:a2:
                    1b:98:81:7b:81:33:d6:1b:0e:71:74:77:76:b4:78:
                    f8:f2:af:38:7a:fe:2d:4b:ba:54:9d:57:c4:86:77:
                    48:04:a7:1e:34:77:ca:6f:d9:b8:eb:0c:5a:2c:be:
                    74:d5:bf:fd:97:12:f5:9e:d3:22:80:1f:90:be:fb:
                    52:f6:24:bc:be:9d:07:55:58:e9:da:b2:ab:76:c6:
                    67:ba:ea:60:6d:1a:26:4c:e9:e6:e1:a8:97:6b:85:
                    3a:0a:cf:b6:bd:94:a8:c8:b2:de:61:5c:fe:82:e9:
                    6e:47:c5:0c:cd:cf:bc:08:be:aa:da:0c:b6:c8:22:
                    50:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8E:E1:94:2F:8A:F1:43:ED:BC:FA:31:3E:36:01:2E:3C:1A:F6:56
            X509v3 Authority Key Identifier:
                keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:b7:d6:da:c6:18:28:27:b8:b9:a9:3b:1d:3a:ff:21:ad:
         54:52:a0:63:4e:b2:d2:4f:f7:58:b0:58:60:f6:73:3f:82:2c:
         fc:23:00:00:ac:dc:78:b8:15:0e:9b:0c:44:52:55:0e:44:af:
         8d:5d:d4:1c:69:22:8c:6a:cb:a7:80:d6:d0:b3:9c:59:49:68:
         82:32:63:95:85:e2:6f:24:a5:e1:4f:1c:5d:c5:6e:3f:13:b5:
         1b:3d:ee:72:af:11:c3:ea:5e:30:9e:f7:e9:3b:6b:52:1d:07:
         40:a1:f6:c5:d7:c3:09:15:cb:e3:d3:ac:05:f6:65:0a:80:72:
         53:a9:c4:f2:ac:c1:e0:de:73:f7:be:88:92:94:88:fd:0e:77:
         f3:82:dc:6f:17:dd:72:e1:6d:3c:4f:30:c9:8c:96:60:81:43:
         99:9c:62:af:a2:e1:0a:23:e9:44:92:76:0f:6a:6c:91:5e:99:
         b5:e4:96:94:72:e7:60:13:20:60:dc:e1:a9:d6:ff:13:6e:ae:
         a4:c1:b5:4a:6f:ee:d8:23:99:88:ca:49:65:91:1c:ad:90:b5:
         a2:72:cc:a7:19:2a:86:ef:38:4d:cc:62:08:7c:b2:f2:f1:38:
         53:50:dd:43:88:54:01:99:b4:fa:7b:eb:d8:07:18:48:bb:12:
         1c:a6:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:14 2026 by rpki-client