Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          hvpEdY70BdnBN7278e2naTLE6vzx/QVvyxWS2WNVEzQ=
Subject key identifier:   EA:B9:19:47:25:F0:9C:76:B9:3C:EF:95:F6:39:CB:CE:7C:60:0D:0B
Certificate issuer:       /CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Certificate serial:       43DD5812959CFB55814E3224287ABAE590286E2B
Authority key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa
Signing time:             Mon 16 Mar 2026 19:10:30 +0000
ROA not before:           Mon 16 Mar 2026 19:05:30 +0000
ROA not after:            Mon 15 Mar 2027 19:10:30 +0000
asID:                     265181
IP address blocks:        170.233.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:58:12:95:9c:fb:55:81:4e:32:24:28:7a:ba:e5:90:28:6e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
        Validity
            Not Before: Mar 16 19:05:30 2026 GMT
            Not After : Mar 15 19:10:30 2027 GMT
        Subject: CN=EAB9194725F09C76B93CEF95F639CBCE7C600D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:c0:3e:0c:35:ed:63:e2:3f:78:65:28:fb:
                    9d:ac:20:bc:74:78:f6:59:57:4b:aa:be:06:b0:1a:
                    74:82:95:08:51:7e:45:be:d1:98:1b:41:59:ea:c8:
                    b5:b4:ac:07:45:fb:c1:98:6f:40:e7:85:46:fc:42:
                    01:42:7e:c7:75:c9:99:69:1e:9d:e8:76:a6:82:5d:
                    67:cd:c8:42:ca:ea:d0:98:90:fc:85:81:5d:77:41:
                    b5:1c:25:96:a5:60:66:4a:69:ec:89:41:4b:ba:ec:
                    73:ec:34:02:fd:60:fc:e5:30:9d:a8:3c:40:cd:76:
                    5e:45:7b:01:6f:44:d1:3f:c6:bd:5d:ff:fe:30:80:
                    ce:f2:84:fb:4d:4a:a9:85:fc:3f:37:1d:26:36:c2:
                    6f:43:de:df:d6:53:c8:72:d2:c6:4f:ff:04:44:25:
                    4d:f6:34:af:e7:73:f9:67:56:1b:73:a3:54:bc:ee:
                    e8:68:59:cd:cf:49:f5:7f:e9:b4:9c:2d:2e:97:53:
                    3e:30:a8:90:a0:a8:b8:c6:6b:fd:4c:8a:a9:e8:78:
                    0f:df:72:68:87:da:a1:f1:8b:d0:ff:b4:c3:72:c5:
                    a6:ca:2b:67:73:65:ed:a1:6e:f5:b9:05:2f:d7:ce:
                    04:db:af:70:fa:13:66:e5:a0:70:64:d7:d9:86:90:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:19:47:25:F0:9C:76:B9:3C:EF:95:F6:39:CB:CE:7C:60:0D:0B
            X509v3 Authority Key Identifier:
                keyid:D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33372e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:5a:32:cb:87:7f:87:b4:31:b5:ba:01:dd:01:63:34:60:
         4b:4e:2e:98:d5:13:13:cd:ed:2e:5c:19:d1:f5:4f:47:76:78:
         5d:c3:b5:02:0c:5f:aa:3a:f2:09:fa:0a:e6:ee:16:ad:31:26:
         6c:c2:c9:1c:07:50:b8:2e:3c:f1:4f:4a:d6:67:d9:a2:f9:8f:
         78:b0:e3:65:81:58:c9:50:62:c9:b5:a1:60:07:73:d0:ff:85:
         8d:e8:d8:bb:38:33:28:42:89:88:e7:b7:ed:90:f1:bd:d1:2b:
         23:6b:6d:c8:0d:67:e5:ce:f6:b9:84:d4:94:54:e3:5e:af:a2:
         34:38:7e:c4:02:ed:42:eb:11:0b:3d:62:db:7d:03:29:a0:7d:
         11:86:fb:bd:7d:0d:8c:67:2f:19:62:1f:17:ce:9e:5c:3c:b5:
         5f:4a:02:9f:f9:e8:b2:56:8f:d9:3d:83:64:f6:35:20:39:4a:
         10:33:11:e9:b8:9f:b7:03:b1:ef:59:60:ca:7b:bc:27:05:7e:
         91:79:35:1e:2d:b4:8a:d6:4a:46:b8:7f:9d:24:cd:29:2f:6f:
         68:74:38:94:7a:80:2e:ab:1d:83:cd:0f:d9:b3:28:39:d4:3d:
         07:bd:70:60:69:d6:4e:e3:45:a9:b6:a7:d7:96:7a:a9:f9:25:
         af:92:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:19 2026 by rpki-client