Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa
File:                     3137302e38322e38362e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          uJ1L6ogDSLjXlW+pWsdPK/8MTqOvQLTtVtF5EvHiBeU=
Subject key identifier:   AB:DD:31:94:E6:F3:9B:E9:54:F7:1C:26:96:FE:F0:B0:1C:92:FC:19
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       2761D2C835EE196995C75D8D52206CF7CDFF6444
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:03 +0000
ROA not before:           Fri 28 Aug 2026 17:01:03 +0000
ROA not after:            Fri 27 Aug 2027 17:06:03 +0000
asID:                     262642
IP address blocks:        170.82.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 07:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:61:d2:c8:35:ee:19:69:95:c7:5d:8d:52:20:6c:f7:cd:ff:64:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:03 2026 GMT
            Not After : Aug 27 17:06:03 2027 GMT
        Subject: CN=ABDD3194E6F39BE954F71C2696FEF0B01C92FC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:e9:43:8e:8e:e6:27:0a:c3:73:b2:0d:36:
                    b7:de:a7:28:f8:63:93:00:c4:4b:62:ee:8e:ee:84:
                    66:04:3f:9e:a1:ae:bf:7b:26:69:60:e9:f1:44:9f:
                    2a:71:67:d9:e7:31:60:7c:ec:29:9b:ee:d3:9d:8e:
                    13:d6:88:20:63:22:22:1e:a2:cb:42:84:19:19:a8:
                    5a:41:f1:25:1f:9e:c3:11:da:2f:26:e7:c3:f3:51:
                    f1:d0:be:7c:76:b9:21:05:3e:98:d4:76:86:77:4f:
                    7a:d6:e1:d2:3a:29:08:aa:6d:6e:60:b1:0f:73:aa:
                    21:1e:5e:89:54:79:13:eb:1a:31:9a:14:f3:48:42:
                    d6:ed:08:49:1d:2e:9d:29:25:d7:6e:6c:6f:f1:19:
                    9e:69:c7:7e:c5:f6:18:62:82:eb:6f:98:2a:30:e4:
                    44:b7:1d:37:86:44:0c:c8:40:7a:c0:48:b7:df:80:
                    52:ba:cb:b6:ca:2a:b8:72:df:85:9c:ba:63:93:c6:
                    29:53:ff:41:40:7f:1e:d0:28:01:97:c1:fa:d3:fc:
                    20:d9:f6:dd:95:ec:ce:6c:d3:d0:67:60:40:b3:39:
                    27:9e:62:28:f1:af:98:1c:0a:6f:6f:f6:9b:46:6a:
                    1a:93:bb:39:d7:e3:83:7f:5d:8b:4e:4d:50:f3:e4:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DD:31:94:E6:F3:9B:E9:54:F7:1C:26:96:FE:F0:B0:1C:92:FC:19
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137302e38322e38362e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:f7:ea:04:26:fc:d0:73:c8:c2:8a:db:2e:f5:28:ec:6b:
         51:79:58:ff:25:93:eb:aa:64:62:ee:e7:c3:56:bf:68:52:08:
         4e:e3:ff:85:b7:29:0b:2b:ed:35:6d:b3:ad:93:03:8e:c5:db:
         8e:c4:c5:6d:01:30:41:7d:c5:be:15:75:c2:51:e4:44:9a:d8:
         9f:15:70:c5:a5:45:a4:11:38:19:ab:3d:d5:32:60:db:18:97:
         be:ee:44:ef:d9:26:b8:f8:57:ba:a2:9e:94:5f:8a:83:68:0a:
         7a:e0:ac:80:bb:fa:aa:47:70:77:2e:79:40:16:a0:b5:61:a2:
         a5:b1:f6:04:0a:ec:5c:f6:1a:d2:a4:e8:25:19:ea:80:5d:ef:
         19:cf:9d:02:31:5f:64:97:7b:81:8e:41:da:d3:02:75:4d:89:
         4b:71:ef:0c:33:60:ff:89:c6:c5:0f:ce:6d:48:2d:b3:f5:d7:
         e1:90:0b:4e:01:de:8c:83:a4:1a:a2:82:77:4b:6b:db:76:b3:
         d5:87:ad:7d:48:d7:06:13:ae:6a:05:d4:c7:a5:c2:83:19:77:
         1f:97:61:3f:88:f4:c9:b6:e0:77:06:99:36:4e:3a:45:1c:dd:
         f8:d7:92:f9:5a:ca:20:99:48:f0:b6:d8:97:b0:14:8f:e7:0a:
         1d:ce:02:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJ2HSyDXuGWmVx12NUiBs983/ZEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDNaFw0yNzA4MjcxNzA2MDNaMDMxMTAvBgNV
BAMTKEFCREQzMTk0RTZGMzlCRTk1NEY3MUMyNjk2RkVGMEIwMUM5MkZDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4elDjo7mJwrDc7INNrfepyj4
Y5MAxEti7o7uhGYEP56hrr97Jmlg6fFEnypxZ9nnMWB87Cmb7tOdjhPWiCBjIiIe
ostChBkZqFpB8SUfnsMR2i8m58PzUfHQvnx2uSEFPpjUdoZ3T3rW4dI6KQiqbW5g
sQ9zqiEeXolUeRPrGjGaFPNIQtbtCEkdLp0pJddubG/xGZ5px37F9hhigutvmCow
5ES3HTeGRAzIQHrASLffgFK6y7bKKrhy34WcumOTxilT/0FAfx7QKAGXwfrT/CDZ
9t2V7M5s09BnYECzOSeeYijxr5gcCm9v9ptGahqTuznX44N/XYtOTVDz5PHbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq90xlObzm+lU9xwmlv7wsByS/BkwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzMwMmUzODMyMmUzODM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlJWMA0GCSqGSIb3DQEBCwUAA4IBAQBsCvfqBCb8
0HPIworbLvUo7GtReVj/JZPrqmRi7ufDVr9oUghO4/+FtykLK+01bbOtkwOOxduO
xMVtATBBfcW+FXXCUeREmtifFXDFpUWkETgZqz3VMmDbGJe+7kTv2Sa4+Fe6op6U
X4qDaAp64KyAu/qqR3B3LnlAFqC1YaKlsfYECuxc9hrSpOglGeqAXe8Zz50CMV9k
l3uBjkHa0wJ1TYlLce8MM2D/icbFD85tSC2z9dfhkAtOAd6Mg6QaooJ3S2vbdrPV
h619SNcGE65qBdTHpcKDGXcfl2E/iPTJtuB3Bpk2TjpFHN3415L5WsogmUjwttiX
sBSP5wodzgLP
-----END CERTIFICATE-----
Generated at Fri Oct 16 16:35:49 2026 by rpki-client