Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38342e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          pLACLNQw945SJX8vKeh9Nx4pF5FBLAHXX4ibeEnv8wU=
Subject key identifier:   2D:23:7F:15:D9:CC:FB:8B:5C:0E:BB:03:A7:56:03:3D:81:68:3D:E1
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       2A2C8B2D3E6CF0AA2EF85AED4CB8EEC22ABD8CE6
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:01 +0000
ROA not before:           Fri 28 Aug 2026 17:01:01 +0000
ROA not after:            Fri 27 Aug 2027 17:06:01 +0000
asID:                     262642
IP address blocks:        170.82.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 02:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2c:8b:2d:3e:6c:f0:aa:2e:f8:5a:ed:4c:b8:ee:c2:2a:bd:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:01 2026 GMT
            Not After : Aug 27 17:06:01 2027 GMT
        Subject: CN=2D237F15D9CCFB8B5C0EBB03A756033D81683DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:b7:16:c0:05:63:51:63:b7:d2:3d:85:1d:
                    3a:8f:cb:eb:ed:84:4b:f7:09:ec:6f:8a:12:a8:78:
                    bb:dd:15:f4:c4:d0:25:dd:55:12:8b:53:f0:f0:34:
                    bd:27:a2:9a:76:f0:28:66:9d:b7:74:4f:32:1a:39:
                    ae:e1:5d:77:25:c6:33:d7:4e:2e:8d:6f:8d:19:4a:
                    99:c0:e6:a2:ab:70:76:b4:4a:b2:ab:cc:30:85:ae:
                    ba:5f:57:f4:54:35:c8:d3:b2:1b:81:aa:f3:f8:6c:
                    dd:30:22:2b:57:dc:e7:72:02:6a:59:30:e8:5c:20:
                    49:8c:35:83:90:bf:be:85:d9:a5:09:ac:41:3d:f7:
                    e4:aa:ec:09:0d:90:03:b4:0b:6d:a5:7a:35:15:e7:
                    c7:c6:33:82:54:5a:f6:58:8b:a1:3a:1c:84:54:3b:
                    b0:d6:5b:10:3f:f1:27:a9:69:dd:f2:00:02:d2:87:
                    87:30:25:2e:0c:5f:18:c6:0d:6c:2d:c5:c6:c9:26:
                    5e:96:f0:94:79:69:0d:15:53:cc:7d:35:f5:f2:f1:
                    4a:b7:4d:46:a1:ee:a9:c5:42:3e:42:0b:1a:69:93:
                    73:f1:0b:96:45:45:25:e8:09:83:7d:fe:67:c6:64:
                    02:01:87:e4:04:7c:1b:c2:97:ab:e5:6b:8b:fa:22:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:23:7F:15:D9:CC:FB:8B:5C:0E:BB:03:A7:56:03:3D:81:68:3D:E1
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f1:90:eb:52:1c:a9:50:bf:1a:5f:91:14:96:8d:53:ca:a5:
         b8:c1:0a:c5:65:bb:a8:7f:57:c6:41:a3:5a:88:76:77:ac:c7:
         76:d0:d1:84:67:07:3a:1c:8b:f6:ec:a6:74:99:30:61:56:73:
         cd:d9:c4:04:af:12:ff:2d:2a:be:99:b3:57:93:c9:6a:2b:64:
         82:10:7c:33:1e:eb:f2:86:40:14:53:b1:f5:65:c6:de:4f:2a:
         9b:15:75:f2:97:6b:1b:e4:08:2b:b2:dc:36:ab:f2:34:dc:e0:
         56:3b:75:e1:93:a9:9f:e1:1c:74:ee:86:9b:f1:33:d0:84:d7:
         82:b4:b9:9b:14:24:63:d5:85:ad:5c:27:0b:1a:d8:94:bc:d9:
         dd:b8:5f:08:c8:43:18:64:c7:88:ca:36:4e:1f:ae:e9:95:ce:
         38:e6:f4:41:15:07:7d:8b:f7:4e:c8:5b:82:de:78:00:05:29:
         e4:82:0a:b7:e7:9b:62:19:40:bc:5c:8c:50:9a:fb:39:b6:42:
         0f:77:64:6b:b9:e5:d1:70:21:64:2b:57:5f:ee:62:09:1d:37:
         ec:5e:2a:fb:c4:df:71:3e:58:e6:07:86:eb:7f:20:6c:be:a6:
         c3:62:e3:6c:12:1b:b8:c5:d5:72:af:2c:66:c9:58:8c:f4:42:
         98:17:31:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKiyLLT5s8Kou+FrtTLjuwiq9jOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDFaFw0yNzA4MjcxNzA2MDFaMDMxMTAvBgNV
BAMTKDJEMjM3RjE1RDlDQ0ZCOEI1QzBFQkIwM0E3NTYwMzNEODE2ODNERTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2rcWwAVjUWO30j2FHTqPy+vt
hEv3CexvihKoeLvdFfTE0CXdVRKLU/DwNL0nopp28Chmnbd0TzIaOa7hXXclxjPX
Ti6Nb40ZSpnA5qKrcHa0SrKrzDCFrrpfV/RUNcjTshuBqvP4bN0wIitX3OdyAmpZ
MOhcIEmMNYOQv76F2aUJrEE99+Sq7AkNkAO0C22lejUV58fGM4JUWvZYi6E6HIRU
O7DWWxA/8Sepad3yAALSh4cwJS4MXxjGDWwtxcbJJl6W8JR5aQ0VU8x9NfXy8Uq3
TUah7qnFQj5CCxppk3PxC5ZFRSXoCYN9/mfGZAIBh+QEfBvCl6vla4v6IljVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULSN/FdnM+4tcDrsDp1YDPYFoPeEwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzMwMmUzODMyMmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlJUMA0GCSqGSIb3DQEBCwUAA4IBAQBQ8ZDrUhyp
UL8aX5EUlo1TyqW4wQrFZbuof1fGQaNaiHZ3rMd20NGEZwc6HIv27KZ0mTBhVnPN
2cQErxL/LSq+mbNXk8lqK2SCEHwzHuvyhkAUU7H1ZcbeTyqbFXXyl2sb5Agrstw2
q/I03OBWO3Xhk6mf4Rx07oab8TPQhNeCtLmbFCRj1YWtXCcLGtiUvNnduF8IyEMY
ZMeIyjZOH67plc445vRBFQd9i/dOyFuC3ngABSnkggq355tiGUC8XIxQmvs5tkIP
d2RrueXRcCFkK1df7mIJHTfsXir7xN9xPljmB4brfyBsvqbDYuNsEhu4xdVyryxm
yViM9EKYFzFo
-----END CERTIFICATE-----
Generated at Wed Oct 14 12:49:09 2026 by rpki-client