Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32332d3233203d3e20323635303933.roa
File:                     3137302e3233332e3130362e302f32332d3233203d3e20323635303933.roa (raw, json)
Hash identifier:          Slt+FThqVyoKMFi49kRgS95x29N8uY/fpeErkvqAheE=
Subject key identifier:   6B:F9:A2:99:A2:54:E7:29:E4:96:61:14:C2:F3:EC:16:71:34:22:51
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       6853BA964A631F30AA55DFC008117BD5EE26FCC5
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32332d3233203d3e20323635303933.roa
Signing time:             Fri 06 Mar 2026 07:40:22 +0000
ROA not before:           Fri 06 Mar 2026 07:35:22 +0000
ROA not after:            Fri 05 Mar 2027 07:40:22 +0000
asID:                     265093
IP address blocks:        170.233.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:ba:96:4a:63:1f:30:aa:55:df:c0:08:11:7b:d5:ee:26:fc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Mar  6 07:35:22 2026 GMT
            Not After : Mar  5 07:40:22 2027 GMT
        Subject: CN=6BF9A299A254E729E4966114C2F3EC1671342251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:c9:7f:c8:a7:cf:0d:08:33:02:69:0f:d8:
                    ac:09:e7:25:e7:f3:2f:40:9d:32:84:a9:56:2b:0e:
                    6d:94:36:f2:6f:11:d9:4e:8a:f8:bd:32:64:c5:dc:
                    56:b1:6a:f3:c4:87:8a:d3:17:d9:d2:40:70:f7:76:
                    15:ba:ba:d8:60:60:f5:cd:b8:fb:48:65:53:51:29:
                    94:68:1f:d2:b9:88:04:53:e0:c3:7c:c4:28:ca:45:
                    38:1a:d6:a9:e4:c7:e1:00:c5:70:70:a8:0c:de:92:
                    2e:e0:b4:ed:f5:0b:23:30:a6:96:77:80:ca:92:ad:
                    ed:59:1e:31:f9:15:52:7d:fe:cc:8d:73:af:7e:11:
                    37:a2:05:2a:6f:5a:28:31:dc:ef:ad:38:49:ab:11:
                    f9:b5:62:a5:eb:1e:16:89:89:57:ad:f2:d7:a6:c5:
                    02:0e:8a:f1:87:2e:2c:bd:f0:04:a7:f0:89:2e:bf:
                    7a:79:c4:2c:de:1f:51:d7:10:1d:db:e0:83:fc:56:
                    74:b4:2b:9f:6f:f9:7d:c8:7d:a4:ff:6f:ee:ad:6c:
                    4f:5c:a8:f0:0e:ad:76:81:c9:4e:62:1b:92:ec:e1:
                    5e:ee:00:8e:49:1a:1d:e1:c6:c7:db:7b:5f:3b:c0:
                    48:c5:e2:12:d9:05:6e:4b:dc:3b:db:91:ce:66:de:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:A2:99:A2:54:E7:29:E4:96:61:14:C2:F3:EC:16:71:34:22:51
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32332d3233203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:c5:9a:35:ba:1b:aa:20:3a:3c:7f:d4:ea:f1:6d:fd:a3:
         6b:b1:32:18:d2:55:c1:81:52:6e:c8:35:69:95:3e:6f:16:bb:
         92:34:85:f7:53:91:ae:47:da:09:48:22:07:ae:47:1b:87:58:
         13:7a:54:d8:4d:1b:43:3a:f8:cf:d8:68:35:5a:13:07:6f:8d:
         fe:34:5c:2c:29:84:bc:fd:b0:96:6b:4d:da:c0:02:d0:9b:46:
         ac:12:b5:56:32:3f:74:53:ec:09:2e:22:da:44:3d:04:80:3f:
         16:8e:9d:72:04:e2:8c:00:94:4d:6c:05:6e:f4:ee:97:ab:31:
         ba:8d:60:2f:3a:66:c1:e4:65:e7:f6:8d:f8:14:8c:6f:4c:5d:
         a1:3d:d4:a8:45:81:30:ac:51:ae:99:34:63:79:57:f6:e9:d4:
         d1:41:7a:db:5b:63:da:9d:cf:db:a6:54:3a:2a:42:ae:1c:11:
         6c:be:e1:c9:4e:a0:ee:72:59:d1:96:d4:bf:33:93:53:5a:03:
         16:4f:33:78:12:a0:0c:22:8d:8e:ef:55:64:60:55:27:fd:91:
         61:44:ae:1b:95:46:05:00:68:b9:46:ae:74:b9:e0:b4:23:cc:
         db:99:88:4f:53:2b:1e:78:f5:57:18:15:5c:13:ff:cd:38:fe:
         84:5d:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:37 2026 by rpki-client