Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
File:                     3137302e37382e322e302f32332d3233203d3e20323635343931.roa (raw, json)
Hash identifier:          8+GXk2UrbuokhHT1BPsOz2CWysWgpAq8bwE2f8hWJ+0=
Subject key identifier:   58:31:E3:20:10:A4:1A:41:1E:81:15:B1:26:DE:67:68:1A:5F:66:63
Certificate issuer:       /CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
Certificate serial:       21E9D9E62D69AA339611B7C5C3192E2B19E6C1A3
Authority key identifier: 20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
Signing time:             Mon 13 Jul 2026 14:04:45 +0000
ROA not before:           Mon 13 Jul 2026 13:59:45 +0000
ROA not after:            Mon 12 Jul 2027 14:04:45 +0000
asID:                     265491
IP address blocks:        170.78.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e9:d9:e6:2d:69:aa:33:96:11:b7:c5:c3:19:2e:2b:19:e6:c1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
        Validity
            Not Before: Jul 13 13:59:45 2026 GMT
            Not After : Jul 12 14:04:45 2027 GMT
        Subject: CN=5831E32010A41A411E8115B126DE67681A5F6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:8e:02:ef:3e:9e:06:02:c3:ec:43:8e:b5:
                    a7:4d:67:b7:99:bc:6d:f5:59:d8:ae:65:ca:73:da:
                    2f:34:cd:75:44:6a:07:40:db:76:46:8c:b4:da:83:
                    a1:31:79:a1:0f:ed:82:19:97:a2:66:2e:8f:5c:aa:
                    47:59:f4:d4:61:04:85:f7:ce:36:5f:2f:da:79:3b:
                    e1:8c:e9:92:fa:05:f2:72:21:f6:72:ac:41:d3:93:
                    14:ae:b6:a2:c7:82:58:11:c5:0c:ad:6b:14:76:7f:
                    72:9b:1d:d5:ef:e9:b0:a4:64:8b:7f:36:60:a3:0d:
                    cd:f7:ba:82:5c:11:dc:63:f5:2f:34:0a:b4:cf:f7:
                    a9:37:66:2e:18:91:4b:9f:df:9f:89:a7:a1:2a:5e:
                    79:a2:d5:e2:1d:b9:8e:f6:d6:0f:97:be:1a:89:cc:
                    01:12:5a:40:06:b8:f1:41:3a:2b:84:22:bd:43:be:
                    5f:5c:64:89:54:0d:d6:5e:44:ce:b0:38:66:96:69:
                    d8:d9:0d:ad:7a:bf:73:f4:fd:af:5e:36:3c:80:1c:
                    25:2e:8b:6e:5a:17:fe:73:d9:7c:b4:17:6c:da:6a:
                    b1:93:ea:0d:33:13:19:49:ab:76:ee:94:d0:ee:ad:
                    c5:e4:84:45:e4:ec:80:b0:d0:91:26:b1:a9:13:ae:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:E3:20:10:A4:1A:41:1E:81:15:B1:26:DE:67:68:1A:5F:66:63
            X509v3 Authority Key Identifier:
                keyid:20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:74:52:ae:9e:46:35:09:0e:08:68:7e:66:a4:8f:cd:eb:3e:
         3b:02:31:f8:9e:9c:7e:10:1e:e8:db:be:a5:29:76:76:55:46:
         59:c1:3f:20:0a:88:19:a8:c5:84:6c:f0:69:0a:80:8b:cf:fa:
         ba:b8:a9:e0:c2:2f:40:cc:7e:17:b9:e7:77:e2:ad:7f:45:28:
         96:fb:ad:26:a0:c7:cc:a3:af:ce:f1:ff:d2:1a:43:6c:af:18:
         85:2e:37:43:6a:dd:5f:5c:eb:9d:5e:ec:b7:96:9f:35:6d:fc:
         9a:d6:7b:38:b0:ab:d2:65:ea:52:a9:a7:31:01:12:b3:e3:1a:
         8c:00:1d:d9:77:a6:6f:72:23:b6:40:72:4f:6e:bd:2a:23:77:
         a0:17:86:6d:9c:4e:f8:c1:4b:1b:bd:be:45:49:cc:15:8e:a5:
         3a:e9:b3:2b:88:7e:87:28:74:4f:dd:85:9d:8b:08:13:42:1d:
         9a:74:33:b1:67:72:17:cb:02:40:e0:b9:6d:39:54:6b:91:62:
         98:a0:54:9d:f9:3e:e8:78:61:1d:ee:e4:e6:20:b8:61:04:6b:
         48:e9:f5:54:25:ff:c5:c8:2b:9a:44:52:45:68:23:15:a9:11:
         c3:a8:9b:83:75:e1:38:5f:72:56:f2:6c:44:c0:96:53:c4:39:
         0b:06:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:16:44 2026 by rpki-client