Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          QPlmAzrXIYhOMnFSE8b1sM9sctBtgOI5T1RZ3hzFXxY=
Subject key identifier:   40:CF:73:2E:EE:53:69:6F:BF:C1:D1:65:1B:94:04:1F:D6:F6:B1:A5
Certificate issuer:       /CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
Certificate serial:       6BEC34864BFFF355EF77A4CB449AD694FD36202D
Authority key identifier: EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
Signing time:             Sat 29 Aug 2026 13:31:09 +0000
ROA not before:           Sat 29 Aug 2026 13:26:09 +0000
ROA not after:            Sat 28 Aug 2027 13:31:09 +0000
asID:                     265224
IP address blocks:        170.239.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl
                          rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 19:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ec:34:86:4b:ff:f3:55:ef:77:a4:cb:44:9a:d6:94:fd:36:20:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
        Validity
            Not Before: Aug 29 13:26:09 2026 GMT
            Not After : Aug 28 13:31:09 2027 GMT
        Subject: CN=40CF732EEE53696FBFC1D1651B94041FD6F6B1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a4:ea:9d:03:47:e6:0e:2f:6c:e7:de:24:3b:
                    01:d2:14:fb:2e:37:04:2a:fe:91:37:90:59:b5:6f:
                    b8:d5:09:62:1c:47:60:5d:e4:22:89:31:58:4a:53:
                    7d:a9:39:a6:ff:e1:82:b3:93:a3:7e:04:fe:80:8b:
                    c3:64:05:22:95:ff:f6:7d:ca:b0:ee:86:99:fe:de:
                    70:d7:cc:62:8d:67:3c:0b:86:19:32:3c:ae:ca:d9:
                    e2:14:45:54:6e:26:39:b3:75:66:a7:a2:b0:de:e1:
                    a5:b3:c9:a8:5d:0e:0b:c3:a4:60:fa:34:fb:78:d2:
                    99:e1:55:b5:38:5b:fe:f2:88:4d:96:69:9e:d5:66:
                    77:88:04:b7:ca:f8:c4:9b:98:bd:49:b5:d0:29:8d:
                    38:f2:6f:89:7b:c0:5c:15:d0:a2:47:0e:ba:9a:57:
                    e0:62:cb:9c:72:a8:c6:3c:ca:42:f6:5f:8a:ec:29:
                    d5:71:4d:c2:28:4d:37:c5:a7:d4:e8:6c:ed:c2:56:
                    2e:f4:a9:16:37:ed:c7:53:62:ef:b1:c9:9b:bd:16:
                    11:00:81:7e:0c:69:e6:02:2d:4e:50:c2:9f:4f:12:
                    41:6d:8f:71:aa:ef:37:86:4c:dd:d9:37:22:12:e1:
                    3f:81:d1:60:22:f9:59:66:3a:3b:a6:57:31:65:55:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CF:73:2E:EE:53:69:6F:BF:C1:D1:65:1B:94:04:1F:D6:F6:B1:A5
            X509v3 Authority Key Identifier:
                keyid:EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:bf:b2:20:0f:2f:e5:dd:a1:50:1d:9a:e0:71:82:19:95:30:
         cd:33:03:df:a6:71:3b:24:8e:85:64:ff:17:63:cc:53:8e:2c:
         4e:f2:f3:2a:c2:dc:9f:8d:82:e0:e7:89:e0:43:f4:e4:2b:6f:
         40:08:50:0b:c6:a9:6b:06:9c:c1:b5:1b:d3:39:b4:f5:f1:a2:
         c1:6a:f6:5d:0b:f8:e6:e1:57:2d:36:94:8e:b0:6c:da:15:7c:
         a9:dc:85:df:12:74:e4:d3:71:c6:7e:83:62:4c:8a:df:ab:c0:
         e6:88:20:c6:ea:bd:93:db:44:69:86:d2:c5:23:6b:5b:4c:e5:
         29:ab:f3:72:7f:eb:b5:e4:20:2b:1e:81:c8:94:d8:78:54:2e:
         30:5f:54:0d:a7:27:11:7f:98:4f:c5:b7:5d:39:b3:53:ea:1b:
         95:0a:84:c3:a4:d0:68:26:54:af:5f:85:cb:57:9b:24:5d:c0:
         a9:af:ec:8c:57:10:81:fe:f7:8d:15:32:53:aa:9f:7f:b8:2e:
         4c:71:27:5b:a8:51:1b:93:1c:7f:79:ea:5e:ce:d8:45:ac:d2:
         30:d7:c7:db:6c:08:7a:bc:10:cf:ce:97:b4:dd:e8:92:88:fb:
         96:32:4c:33:da:86:31:13:ec:09:b7:5d:f8:e4:da:08:2c:70:
         cf:ee:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:04:34 2026 by rpki-client