Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa
File:                     3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa (raw, json)
Hash identifier:          hpBGllnbeShADvGOMQ9op5wbhRl+Szkm9HZDkI7HSQw=
Subject key identifier:   13:48:99:0C:F3:B0:7A:71:33:EF:EC:69:1B:D4:64:5E:08:50:C9:F0
Certificate issuer:       /CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
Certificate serial:       4DFF5CFDA9834EF64CA4AB8EB3EC2997C9EACBAA
Authority key identifier: 34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa
Signing time:             Fri 24 Apr 2026 22:18:43 +0000
ROA not before:           Fri 24 Apr 2026 22:13:43 +0000
ROA not after:            Fri 23 Apr 2027 22:18:43 +0000
asID:                     265028
IP address blocks:        170.84.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ff:5c:fd:a9:83:4e:f6:4c:a4:ab:8e:b3:ec:29:97:c9:ea:cb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
        Validity
            Not Before: Apr 24 22:13:43 2026 GMT
            Not After : Apr 23 22:18:43 2027 GMT
        Subject: CN=1348990CF3B07A7133EFEC691BD4645E0850C9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:d4:12:5d:95:e6:2b:7e:70:53:09:36:cd:
                    95:65:e6:b5:5b:95:dd:42:d1:66:73:e7:70:fe:51:
                    02:4b:1d:cd:92:ca:d2:e4:fa:72:cf:83:91:ee:7f:
                    03:84:22:d1:a1:0a:a6:fe:6b:4f:24:7f:77:a9:dc:
                    87:0e:d1:23:41:a2:2a:0b:22:fa:53:05:05:8d:1b:
                    c4:ed:4e:c3:a2:25:d4:0b:cf:72:46:d5:93:6c:74:
                    ec:31:b0:65:a4:64:63:99:11:a3:56:98:a6:6a:c7:
                    9c:1d:b1:51:aa:c1:10:43:46:12:7a:3b:3b:c5:6c:
                    dc:96:d8:b6:f1:2b:31:e0:05:ff:15:fe:e4:bf:04:
                    cc:68:52:8d:06:2e:9c:40:87:17:fd:3f:24:8a:7a:
                    1a:16:85:db:72:e9:07:ef:70:0b:62:ff:ac:70:f2:
                    ed:bc:05:b9:51:21:bf:f3:a1:3d:e0:a4:0e:56:4b:
                    5a:f9:17:a0:2a:1a:2b:b5:0d:e3:95:d9:c7:39:43:
                    ec:bf:53:f4:a2:9a:6e:f7:66:f5:94:e7:4d:05:36:
                    dc:93:7e:42:c0:2f:fd:d5:54:f7:24:19:f2:5f:8a:
                    96:a6:ed:d7:c8:91:a9:b4:9f:3f:6b:0f:6f:f8:5d:
                    0c:74:7b:a6:50:d2:c5:6b:69:0f:14:16:0e:cf:55:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:99:0C:F3:B0:7A:71:33:EF:EC:69:1B:D4:64:5E:08:50:C9:F0
            X509v3 Authority Key Identifier:
                keyid:34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:93:f9:da:9e:ee:bd:e5:55:d0:4c:42:f0:4b:26:29:78:
         22:44:17:51:ce:47:46:b5:4b:2f:ff:f9:71:3f:a5:13:89:15:
         01:7e:c7:f7:c5:a8:27:44:29:64:30:72:79:d5:d5:4f:42:f0:
         f2:0a:d2:65:2e:ee:a0:8b:f7:93:81:5a:5f:3b:1e:de:42:ee:
         1e:45:b0:93:47:c8:e5:4f:30:65:cb:19:48:1e:64:c7:f2:66:
         5a:00:e2:10:6f:2a:83:97:fc:64:96:ca:68:39:bf:d2:fa:98:
         b4:8d:63:5e:75:bd:91:60:ab:3f:f8:76:d3:b5:25:c4:0d:2b:
         23:d8:25:25:dc:8b:5b:3b:1a:76:8c:f1:c2:43:45:c4:8c:9e:
         a2:55:ed:98:42:53:11:e3:66:32:77:a5:38:b2:8c:d7:98:6f:
         e1:80:98:27:7b:21:8b:52:63:54:23:a4:62:4d:28:32:7d:37:
         53:cc:51:87:b3:07:fe:eb:8f:ae:9e:4f:46:f4:2d:31:56:84:
         d5:c3:b5:6e:ff:99:70:7d:d8:d4:a8:bd:1f:8a:0a:f3:ae:3c:
         15:d3:78:fc:5a:d5:e7:d6:2b:cb:9c:42:9f:ac:b9:f8:c1:96:
         2a:b7:ab:ac:e1:4a:79:09:33:d4:ef:10:12:ba:1f:a0:49:d4:
         a6:a5:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:21 2026 by rpki-client