Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          hbEuSWAg7xF/MYmq4asD8aSfaU47/GSSpc07pMoILlQ=
Subject key identifier:   A2:93:6C:C7:9A:03:0F:5E:73:D8:B9:DD:F2:90:CF:46:2D:14:4D:4C
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       18E64B39E2F453B6DF63B89A22C8E8936A89627F
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:05 +0000
ROA not before:           Fri 28 Aug 2026 17:01:05 +0000
ROA not after:            Fri 27 Aug 2027 17:06:05 +0000
asID:                     262642
IP address blocks:        170.82.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e6:4b:39:e2:f4:53:b6:df:63:b8:9a:22:c8:e8:93:6a:89:62:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:05 2026 GMT
            Not After : Aug 27 17:06:05 2027 GMT
        Subject: CN=A2936CC79A030F5E73D8B9DDF290CF462D144D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:8c:2f:28:64:90:ea:65:69:0b:f8:54:bb:
                    1d:07:bf:55:8a:e0:17:0c:fb:b7:7f:c4:8b:db:39:
                    22:dd:96:70:34:c6:24:84:8d:09:6e:b4:da:b9:09:
                    ac:f7:95:e3:49:db:40:73:e8:49:e8:9a:7d:5d:a8:
                    d8:56:9d:10:e9:2a:a1:1a:83:1f:2b:54:f6:eb:21:
                    af:45:cc:71:2e:26:60:6b:64:2f:01:7d:8e:c9:26:
                    b4:2a:21:a3:b3:5c:7f:ed:c8:69:03:5c:16:29:80:
                    de:88:5c:11:36:6b:20:2b:df:04:7b:c7:68:db:51:
                    86:cb:8e:4a:b2:b5:5c:43:d1:53:f3:8a:16:ba:08:
                    ac:5a:3b:33:ca:ed:91:5d:ad:42:8b:e6:30:b0:8d:
                    70:7c:d3:00:53:2d:d4:34:04:bc:bb:20:f0:99:38:
                    69:eb:eb:39:82:d1:ed:4f:0e:fe:fd:5a:1b:ab:39:
                    27:64:4a:31:ec:17:d0:1c:3b:40:22:a0:33:f6:c4:
                    65:b4:41:1b:df:48:54:a1:04:da:bf:ca:a1:69:84:
                    1f:8d:23:df:d5:2e:00:e0:57:aa:44:ce:6b:71:e6:
                    94:2e:55:23:f5:7a:f6:bc:54:d8:0c:55:9c:6f:1e:
                    d1:ae:b7:97:16:18:87:90:17:ee:8c:35:81:b5:e1:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:93:6C:C7:9A:03:0F:5E:73:D8:B9:DD:F2:90:CF:46:2D:14:4D:4C
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:46:9e:0b:04:46:d1:64:0b:93:ce:f8:7d:0e:4d:26:a6:
         58:88:a6:07:b1:9f:b7:b3:3f:5d:62:8c:51:86:a0:93:83:02:
         80:14:16:c5:6e:36:0e:80:68:38:54:b4:b8:ff:5a:fb:bd:7e:
         a4:b9:1f:fd:ad:9b:63:a3:8d:88:52:c3:2e:a6:7d:50:35:67:
         2d:32:11:07:59:0a:15:6c:c5:2b:9a:8b:90:58:f5:71:4d:cd:
         1e:ea:4b:b9:38:3a:d5:e0:bd:88:c3:96:9f:30:59:19:b4:67:
         dc:01:25:06:2a:79:e7:fe:5a:3c:f1:61:14:67:b9:d4:75:a4:
         34:7f:e5:2f:87:18:6d:5a:65:ae:b3:db:44:42:81:69:4a:5d:
         22:19:29:12:42:0d:37:b8:d4:5d:99:a9:c0:c3:4b:14:2d:5c:
         fa:d2:2a:1a:96:ce:9c:35:4f:2a:96:1a:1b:08:09:4b:4f:11:
         01:5d:fe:f1:19:2e:27:01:c5:cf:e3:87:b5:77:49:66:dc:41:
         e0:08:ca:b3:39:c2:cc:e4:c1:83:c2:f9:cb:c1:3f:16:75:d6:
         c1:e3:7d:5d:1c:d7:9d:eb:c9:71:e5:f2:29:b9:72:31:da:af:
         76:13:cf:b6:ad:db:23:c5:78:0e:8c:3d:23:bb:35:21:a4:25:
         25:35:4c:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGOZLOeL0U7bfY7iaIsjok2qJYn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDVaFw0yNzA4MjcxNzA2MDVaMDMxMTAvBgNV
BAMTKEEyOTM2Q0M3OUEwMzBGNUU3M0Q4QjlEREYyOTBDRjQ2MkQxNDRENEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmM4wvKGSQ6mVpC/hUux0Hv1WK
4BcM+7d/xIvbOSLdlnA0xiSEjQlutNq5Caz3leNJ20Bz6Enomn1dqNhWnRDpKqEa
gx8rVPbrIa9FzHEuJmBrZC8BfY7JJrQqIaOzXH/tyGkDXBYpgN6IXBE2ayAr3wR7
x2jbUYbLjkqytVxD0VPziha6CKxaOzPK7ZFdrUKL5jCwjXB80wBTLdQ0BLy7IPCZ
OGnr6zmC0e1PDv79WhurOSdkSjHsF9AcO0AioDP2xGW0QRvfSFShBNq/yqFphB+N
I9/VLgDgV6pEzmtx5pQuVSP1eva8VNgMVZxvHtGut5cWGIeQF+6MNYG14SidAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUopNsx5oDD15z2Lnd8pDPRi0UTUwwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzMwMmUzODMyMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlJVMA0GCSqGSIb3DQEBCwUAA4IBAQBOvkaeCwRG
0WQLk874fQ5NJqZYiKYHsZ+3sz9dYoxRhqCTgwKAFBbFbjYOgGg4VLS4/1r7vX6k
uR/9rZtjo42IUsMupn1QNWctMhEHWQoVbMUrmouQWPVxTc0e6ku5ODrV4L2Iw5af
MFkZtGfcASUGKnnn/lo88WEUZ7nUdaQ0f+UvhxhtWmWus9tEQoFpSl0iGSkSQg03
uNRdmanAw0sULVz60ioals6cNU8qlhobCAlLTxEBXf7xGS4nAcXP44e1d0lm3EHg
CMqzOcLM5MGDwvnLwT8WddbB431dHNed68lx5fIpuXIx2q92E8+2rdsjxXgOjD0j
uzUhpCUlNUz5
-----END CERTIFICATE-----
Generated at Sat Oct 31 01:42:07 2026 by rpki-client