Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
File:                     3137302e302e32382e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          Dm+xdUI+Asp4UgGsNTsQ5rFMa06zPscBU09votBEf9M=
Subject key identifier:   85:55:32:62:F4:5C:8A:EA:DE:CE:E1:FB:F1:01:D1:27:4C:8C:DE:FA
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       24FA7B95F547ED7CE4FD6D8E7EB8245BB7C002F6
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:00 +0000
ROA not before:           Thu 25 Jun 2026 11:55:00 +0000
ROA not after:            Thu 24 Jun 2027 12:00:00 +0000
asID:                     262784
IP address blocks:        170.0.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:7b:95:f5:47:ed:7c:e4:fd:6d:8e:7e:b8:24:5b:b7:c0:02:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:00 2026 GMT
            Not After : Jun 24 12:00:00 2027 GMT
        Subject: CN=85553262F45C8AEADECEE1FBF101D1274C8CDEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:cc:7b:42:d7:47:a8:57:63:7a:8f:49:ed:
                    ef:bf:d5:d5:54:73:ac:4c:f8:1e:d4:27:cf:96:61:
                    cd:4c:a8:35:44:7a:c1:7d:b5:dd:f2:c5:a1:cc:95:
                    92:dd:1d:74:2b:1b:87:20:2d:08:90:66:b4:12:31:
                    53:6e:12:91:41:23:c9:5a:4a:b4:78:c0:2f:e6:c6:
                    6c:96:3c:9c:b5:30:ca:30:a3:34:80:44:91:5e:91:
                    8b:17:87:2a:44:3c:32:4d:78:a5:1f:67:c4:ee:df:
                    97:8f:bb:13:80:55:35:42:8c:ca:f2:b2:ef:bb:01:
                    68:ff:35:7b:70:12:7f:8f:db:89:46:ea:56:95:ca:
                    f0:c3:ee:da:12:22:73:1d:7f:2a:48:6d:00:e6:7e:
                    3d:30:6d:19:27:49:a7:62:28:40:88:0a:57:66:53:
                    5d:cc:87:76:d2:21:4d:fc:18:b2:af:a3:c2:54:eb:
                    43:bb:30:2f:73:d3:fb:c9:04:16:49:28:15:41:d9:
                    36:9c:83:ae:60:6b:c0:fc:92:14:f7:84:17:1f:4d:
                    da:28:8d:87:ab:90:86:3e:61:a9:e8:16:d3:63:9f:
                    50:bd:ff:4a:87:e9:00:39:99:a7:65:41:d7:d0:0e:
                    a6:e0:ca:45:40:16:74:62:ed:32:f4:df:24:fd:e6:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:55:32:62:F4:5C:8A:EA:DE:CE:E1:FB:F1:01:D1:27:4C:8C:DE:FA
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:6c:b0:4d:eb:4a:27:e1:56:7f:bc:fc:1f:3f:04:ef:f4:
         48:33:cb:dc:68:fa:9c:9e:16:16:28:62:a9:79:b2:79:57:35:
         67:3b:aa:4f:76:b7:c7:11:9b:e0:c0:76:52:da:46:36:f3:f2:
         3d:ae:93:78:70:24:03:cc:8b:1f:80:01:4a:0f:92:51:2b:70:
         4b:d8:5e:ec:94:ff:30:6a:50:c4:5e:82:4e:e0:1e:9e:f9:6e:
         d6:30:46:7a:c7:df:e1:26:aa:79:34:91:5e:ee:ec:c4:4f:be:
         c6:d9:16:ee:ba:b6:0c:05:c0:e1:74:54:24:13:ee:d2:44:f6:
         58:d2:55:06:62:d5:94:16:df:af:0a:5d:30:aa:42:3b:aa:4d:
         47:aa:c7:7f:86:85:50:a4:f8:e8:80:6b:b8:2a:41:95:c9:6a:
         d5:58:46:54:28:61:1b:d5:cd:6e:c4:59:ce:76:83:5c:8a:a2:
         b2:01:98:7b:f5:fb:04:4b:90:70:f1:26:0b:81:d5:9a:ed:0a:
         14:14:4a:74:86:24:d1:38:fb:8c:db:b8:8c:1f:ff:2e:c8:8d:
         b6:85:b6:ec:86:cf:e4:38:18:02:c9:48:11:f0:c4:5b:fc:31:
         18:4d:ab:7c:0f:f4:f5:09:3b:07:50:31:c1:f8:28:77:81:56:
         ae:b7:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:36:29 2026 by rpki-client