Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/3137302e3234362e3133362e302f32322d3332203d3e203532363932.roa
File:                     3137302e3234362e3133362e302f32322d3332203d3e203532363932.roa (raw, json)
Hash identifier:          MG62VK94RAPwXsKjoXTUTlf0dKZFvCFG2fJ+S0Q47Dc=
Subject key identifier:   BC:BC:22:A5:73:B4:FA:63:BD:DA:0A:5E:10:A0:66:06:0E:D0:4F:C2
Certificate issuer:       /CN=5D583209EF860E8AD53CFCC73569B5F879DA6ADF
Certificate serial:       260DA67F4B0248475F5BC6B6C813FB7A076798AE
Authority key identifier: 5D:58:32:09:EF:86:0E:8A:D5:3C:FC:C7:35:69:B5:F8:79:DA:6A:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/3137302e3234362e3133362e302f32322d3332203d3e203532363932.roa
Signing time:             Fri 06 Mar 2026 18:55:39 +0000
ROA not before:           Fri 06 Mar 2026 18:50:39 +0000
ROA not after:            Fri 05 Mar 2027 18:55:39 +0000
asID:                     52692
IP address blocks:        170.246.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.crl
                          rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:a6:7f:4b:02:48:47:5f:5b:c6:b6:c8:13:fb:7a:07:67:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D583209EF860E8AD53CFCC73569B5F879DA6ADF
        Validity
            Not Before: Mar  6 18:50:39 2026 GMT
            Not After : Mar  5 18:55:39 2027 GMT
        Subject: CN=BCBC22A573B4FA63BDDA0A5E10A066060ED04FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:ba:76:cf:27:66:ef:78:bb:13:27:74:97:
                    71:c9:89:c2:c7:e0:38:88:ca:32:a0:c6:4c:6d:5f:
                    90:aa:b8:c4:67:bd:15:35:98:2f:39:57:64:ed:4c:
                    50:c9:a4:f9:03:e6:90:1d:9a:db:bb:ca:7d:ab:c7:
                    01:17:5a:91:01:52:c0:2e:d5:d3:65:4e:7c:97:d7:
                    b2:4f:22:2e:25:69:5e:90:6a:92:35:13:5d:e3:4c:
                    0d:0e:f8:84:8f:53:33:45:31:e3:fb:e0:8e:76:9f:
                    37:4a:71:48:06:3b:0f:a1:56:62:60:7a:bf:6f:95:
                    17:20:8c:70:52:c8:17:f4:32:12:8f:73:ae:44:94:
                    34:a1:66:ef:65:d8:48:4f:1b:a5:7f:f6:fd:f5:5d:
                    87:63:b2:b5:1b:d6:bc:ba:7d:86:4a:1b:27:f8:5f:
                    bc:00:0d:63:02:a2:9c:ac:e4:06:fd:c4:d7:cd:1a:
                    76:27:23:a7:b7:0e:e8:5b:7b:80:38:54:7b:7d:b2:
                    3a:8c:b3:ba:e1:5c:36:1e:0b:40:d0:71:56:6f:b6:
                    5f:4e:f7:97:ff:c0:1d:a2:15:63:e0:24:e7:a3:0e:
                    81:5a:55:ab:9b:af:90:4a:bc:16:d5:a7:ef:3d:15:
                    54:91:ad:6d:09:53:51:86:3c:e1:16:81:44:38:0a:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:22:A5:73:B4:FA:63:BD:DA:0A:5E:10:A0:66:06:0E:D0:4F:C2
            X509v3 Authority Key Identifier:
                keyid:5D:58:32:09:EF:86:0E:8A:D5:3C:FC:C7:35:69:B5:F8:79:DA:6A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D583209EF860E8AD53CFCC73569B5F879DA6ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ewra6XmP6wE4rPWL6ZDRejErEABjoRq2vyHTjJbeWbj/0/3137302e3234362e3133362e302f32322d3332203d3e203532363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:88:0e:e1:a4:b0:43:86:58:61:34:69:39:0b:94:14:e2:
         33:85:6e:24:b3:b1:09:d1:8d:2d:c5:a5:8c:6a:30:e5:14:85:
         d3:b0:69:76:2a:17:b0:50:2a:30:f4:b8:50:54:84:c5:a1:df:
         71:07:89:62:a7:44:84:2b:20:ff:7d:3c:a9:08:6a:b6:f3:92:
         2e:35:fc:f8:ca:7c:45:01:8c:a4:1d:4b:0a:f5:14:84:57:56:
         65:9a:57:ac:27:77:ee:2d:23:2d:ad:ab:0c:63:61:d8:c5:06:
         69:46:43:75:be:b4:ff:06:7c:d0:b0:04:23:fa:5d:76:c1:bd:
         df:1f:cb:90:c6:ad:aa:7a:4a:9f:e4:68:d9:93:ae:bf:61:9a:
         82:2b:3f:79:47:97:97:4f:a0:cd:0c:11:cc:dd:fa:fd:1d:96:
         2e:38:72:81:75:a0:00:a4:d4:88:f0:d1:7c:a3:d2:6d:c0:b0:
         96:b7:8c:64:32:6d:02:a1:22:f4:1a:5a:cd:58:9a:bc:22:da:
         2f:8c:1a:e2:59:6f:e9:f1:11:83:c3:98:1d:81:91:2e:44:80:
         40:2a:d7:6a:d3:a0:1b:79:9a:fd:42:b2:83:5f:55:35:9e:07:
         c3:ff:c1:bd:fc:ec:a4:e9:a4:7c:92:a3:4a:d7:fd:42:ca:73:
         ae:2a:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:47 2026 by rpki-client