Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          /UHZuWhKtLl3K44duCrs3KfczOvBHjAF626LpD7Z42M=
Subject key identifier:   45:D4:B1:86:0E:3E:8E:52:DF:CE:ED:42:B6:45:52:6B:29:4E:A9:19
Certificate issuer:       /CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Certificate serial:       36474E2FC8A6228EA0E6ED63B61415F00644136D
Authority key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
Signing time:             Wed 22 Apr 2026 14:18:11 +0000
ROA not before:           Wed 22 Apr 2026 14:13:11 +0000
ROA not after:            Wed 21 Apr 2027 14:18:11 +0000
asID:                     262642
IP address blocks:        170.82.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:47:4e:2f:c8:a6:22:8e:a0:e6:ed:63:b6:14:15:f0:06:44:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
        Validity
            Not Before: Apr 22 14:13:11 2026 GMT
            Not After : Apr 21 14:18:11 2027 GMT
        Subject: CN=45D4B1860E3E8E52DFCEED42B645526B294EA919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:d0:31:40:df:91:52:04:1e:83:e3:1c:55:
                    c4:38:ca:de:c5:69:37:99:35:75:77:14:83:90:13:
                    08:e2:c0:6f:87:97:6c:e6:41:2d:32:31:14:f7:51:
                    e9:4a:be:d4:ae:83:65:b8:74:b7:42:03:69:8c:43:
                    ca:06:2d:c6:02:ea:0e:aa:6b:6d:ad:13:19:ae:04:
                    1a:fa:a0:5c:10:90:f3:fe:a0:2d:57:6b:08:f7:43:
                    9e:46:88:5d:af:08:8f:05:1e:61:be:ce:a3:91:00:
                    d3:4b:52:ea:de:2c:96:77:2c:f1:01:ff:36:f3:05:
                    1b:50:8f:83:bd:d1:08:c3:d6:a2:59:31:70:1e:05:
                    1f:b8:d4:8f:b1:5a:6d:09:d9:c1:b1:a1:b0:08:a5:
                    5a:82:e8:ac:cf:12:26:f7:1a:73:b6:c9:2a:1f:2a:
                    31:56:fd:02:13:cc:87:92:0e:57:9d:d6:80:51:3f:
                    3e:5d:4c:ac:1b:89:40:ff:78:14:8e:2a:5d:0e:f4:
                    ec:11:4f:c6:1e:b5:95:5e:78:95:a0:5e:11:92:f9:
                    c4:ad:bc:44:14:90:f6:27:d4:78:b0:27:8e:9e:5d:
                    08:84:85:93:3a:a8:98:ad:46:11:20:ff:d5:b3:83:
                    ae:94:9e:55:c2:e6:b0:4c:db:1e:2b:c9:c4:a8:91:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:B1:86:0E:3E:8E:52:DF:CE:ED:42:B6:45:52:6B:29:4E:A9:19
            X509v3 Authority Key Identifier:
                keyid:28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:bd:95:f7:35:76:12:b0:5d:0b:8c:bd:34:7d:5a:e2:1a:46:
         0d:b3:8d:90:6c:b6:bd:0a:f0:34:c6:6e:24:02:2c:be:1e:58:
         f2:f2:64:98:e4:c5:e3:48:08:44:69:2a:d0:5d:ca:07:90:e1:
         d6:f6:ae:61:9f:40:46:00:b4:ea:20:9b:e8:81:14:c5:ce:2d:
         5a:05:9f:bc:01:38:87:cb:b7:bc:3c:eb:4d:f2:02:c4:3f:9b:
         fb:16:a8:02:0d:20:91:3a:f9:cf:4e:10:69:3b:62:e4:c6:f8:
         a5:cf:22:2d:f9:74:7d:f1:f0:f5:62:d1:52:79:2c:b3:7e:e0:
         30:38:2b:53:df:20:31:7c:6f:1b:df:be:c2:53:64:cf:ec:e4:
         34:b3:42:b9:07:ab:f5:76:6f:f8:0b:85:d3:2b:36:24:7e:e2:
         43:ea:e2:66:7d:38:a6:58:20:70:7c:5e:77:80:b6:8e:ee:ff:
         a5:2c:c5:ed:b3:e9:5b:47:04:3c:a9:0e:ae:9d:82:b3:cd:aa:
         f6:bd:90:c8:83:58:6e:f0:53:f0:71:8f:f7:ac:9d:bb:5c:d1:
         11:7a:b7:24:4d:41:50:c5:85:03:85:3d:28:04:16:1a:55:ca:
         7b:91:02:aa:67:f6:2e:0b:e1:52:d5:05:2d:db:bd:5c:b8:51:
         10:1d:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:41:33 2026 by rpki-client