Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3234203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32322d3234203d3e20323636303231.roa (raw, json)
Hash identifier:          rThJfiHD5qD+VQM+DyAHSzC4hBoV2OIBCAg+qOxhjks=
Subject key identifier:   B9:28:37:4D:A8:72:3B:94:0C:DB:7D:60:6A:75:8A:46:C3:9C:F8:05
Certificate issuer:       /CN=F962DD578111D378F08A3E9399E25F341B4EA747
Certificate serial:       7480A0E99A90116926959FA70141F7A54900E1A5
Authority key identifier: F9:62:DD:57:81:11:D3:78:F0:8A:3E:93:99:E2:5F:34:1B:4E:A7:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F962DD578111D378F08A3E9399E25F341B4EA747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3234203d3e20323636303231.roa
Signing time:             Thu 12 Mar 2026 20:21:42 +0000
ROA not before:           Thu 12 Mar 2026 20:16:42 +0000
ROA not after:            Thu 11 Mar 2027 20:21:42 +0000
asID:                     266021
IP address blocks:        170.245.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F962DD578111D378F08A3E9399E25F341B4EA747.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F962DD578111D378F08A3E9399E25F341B4EA747.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F962DD578111D378F08A3E9399E25F341B4EA747.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:80:a0:e9:9a:90:11:69:26:95:9f:a7:01:41:f7:a5:49:00:e1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F962DD578111D378F08A3E9399E25F341B4EA747
        Validity
            Not Before: Mar 12 20:16:42 2026 GMT
            Not After : Mar 11 20:21:42 2027 GMT
        Subject: CN=B928374DA8723B940CDB7D606A758A46C39CF805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:e8:98:34:fb:74:b5:f7:45:81:c0:01:1c:
                    c4:66:7b:99:67:ad:11:9d:0b:e1:70:f9:56:3e:ae:
                    78:e0:f3:dd:94:d6:99:3e:3b:61:bb:71:d3:94:53:
                    71:87:72:19:10:8a:b5:11:52:62:b5:7f:0c:4d:1e:
                    6c:a1:91:69:fd:cd:72:f0:41:28:e0:66:9d:3c:26:
                    29:82:6b:4c:b2:e0:b3:5b:de:7f:35:93:a5:e3:d0:
                    8c:be:df:3f:54:36:e7:da:ba:20:87:71:20:f9:7a:
                    a1:be:0d:a0:bf:24:73:c8:e1:e6:d2:25:6c:d5:d6:
                    51:f6:10:00:6d:15:12:72:6d:4d:fd:c4:31:7b:61:
                    9e:9d:9e:f6:6d:d5:b1:39:b8:4e:db:7b:47:09:95:
                    7f:72:15:de:02:ed:a1:4f:ce:ca:c3:5e:ac:b7:66:
                    a2:76:f4:77:86:33:de:f0:f1:6d:b0:ee:0c:37:e3:
                    c0:88:76:9f:75:d7:02:e4:b4:ba:53:e6:bd:dc:8e:
                    8d:b7:34:49:ed:15:be:8b:73:8f:83:f0:04:af:8c:
                    db:5d:6a:3d:15:97:98:7c:62:3c:13:86:58:02:30:
                    ec:94:39:c8:1e:be:ba:ab:14:1a:21:b6:df:06:c6:
                    80:b0:f5:46:7e:85:d0:87:74:4a:79:42:b9:6d:12:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:37:4D:A8:72:3B:94:0C:DB:7D:60:6A:75:8A:46:C3:9C:F8:05
            X509v3 Authority Key Identifier:
                keyid:F9:62:DD:57:81:11:D3:78:F0:8A:3E:93:99:E2:5F:34:1B:4E:A7:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F962DD578111D378F08A3E9399E25F341B4EA747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F962DD578111D378F08A3E9399E25F341B4EA747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3234203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:3c:49:de:8f:e7:4c:f8:4a:e7:02:2f:8a:75:3c:ea:4b:
         cd:9b:3b:83:1b:38:fa:60:31:8e:5a:aa:6a:00:a5:04:6c:ed:
         ea:a3:9e:40:aa:72:20:8c:de:eb:c4:27:99:74:24:44:65:a0:
         5c:37:13:a5:0a:02:eb:37:fb:99:2f:86:9b:85:22:72:3c:b3:
         c3:44:07:62:91:42:09:46:3e:03:15:64:5c:76:00:21:ef:29:
         8f:22:fc:75:73:da:5a:65:9e:00:0b:b8:4f:1e:fd:33:2c:c5:
         c7:aa:f1:0e:2e:13:6f:1a:3d:0e:96:55:1b:45:23:e7:55:70:
         5d:be:5e:91:eb:7e:bf:3c:66:03:19:e9:16:1e:74:57:f3:c6:
         7d:15:58:31:96:5d:12:15:7c:ea:00:a2:e9:77:46:dc:76:d8:
         33:37:bd:8b:a8:69:06:92:22:fc:bf:54:74:c6:c3:a1:a1:29:
         4b:a1:3f:64:fd:99:a4:e7:fc:71:e5:36:86:3f:dc:06:ff:25:
         49:3b:20:28:62:8d:d7:0f:62:7e:e9:bc:25:61:b6:d6:a4:36:
         fe:c1:64:89:80:cd:bc:c0:b2:b0:57:b2:b4:c0:4b:85:4b:67:
         d4:a2:14:11:af:b7:d5:2a:33:80:31:c3:f9:38:c4:13:58:ca:
         54:b8:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:23:36 2026 by rpki-client