Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234392e302f32342d3234203d3e20323635303238.roa
File:                     3137302e38342e3234392e302f32342d3234203d3e20323635303238.roa (raw, json)
Hash identifier:          QlU7Y5GTt/srLEzNF/fz70unRIiUbUOdIoFMmHjgclc=
Subject key identifier:   82:BD:D0:7A:37:CF:A8:19:4C:76:71:18:82:D5:BE:97:19:87:E1:95
Certificate issuer:       /CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
Certificate serial:       202A13DC4168DA7C5BA2927651C9F1D61AC7DF18
Authority key identifier: 34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234392e302f32342d3234203d3e20323635303238.roa
Signing time:             Fri 24 Apr 2026 22:18:45 +0000
ROA not before:           Fri 24 Apr 2026 22:13:45 +0000
ROA not after:            Fri 23 Apr 2027 22:18:45 +0000
asID:                     265028
IP address blocks:        170.84.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2a:13:dc:41:68:da:7c:5b:a2:92:76:51:c9:f1:d6:1a:c7:df:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
        Validity
            Not Before: Apr 24 22:13:45 2026 GMT
            Not After : Apr 23 22:18:45 2027 GMT
        Subject: CN=82BDD07A37CFA8194C76711882D5BE971987E195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:d6:d3:90:05:a2:36:c2:1b:b1:aa:81:83:
                    68:54:5f:53:5a:8a:0b:e2:aa:9f:cf:07:49:a2:41:
                    1b:28:26:3e:f2:d2:e6:d7:c0:e3:e6:3d:18:b4:53:
                    77:be:f4:2b:ef:c5:3c:3f:da:60:32:2b:24:b2:b4:
                    cb:9c:6b:47:b2:65:d8:55:dc:a5:05:3d:a4:a5:3f:
                    e7:d6:ea:fc:37:b2:b1:d0:17:4e:7a:3c:ec:24:66:
                    e7:8c:6a:3f:2e:4d:0a:67:82:65:88:23:fd:b2:eb:
                    c5:a6:2e:ec:14:36:c8:dd:47:1c:11:99:8f:8a:d9:
                    de:1e:73:64:78:7f:64:bb:30:01:59:1d:2e:58:0d:
                    a5:55:2c:59:f8:8a:70:b7:3d:1e:ea:84:a8:57:c9:
                    2f:ef:e0:87:22:9e:2d:42:c9:9a:76:25:8f:ad:c5:
                    27:c1:01:1a:c3:15:65:3a:4d:44:65:69:f4:ae:d2:
                    01:43:d0:d3:bd:3e:ba:78:74:a8:7a:cc:a9:4d:8d:
                    38:8d:7c:d6:19:5d:69:b4:5d:98:f8:c5:2d:ea:f8:
                    08:02:d2:df:3c:2a:92:90:35:56:90:ba:6e:7e:cd:
                    23:7d:0e:ba:37:54:3f:1b:c5:d4:35:36:e0:37:68:
                    a8:0e:51:de:81:38:f9:21:0c:5e:2d:49:38:28:a7:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:D0:7A:37:CF:A8:19:4C:76:71:18:82:D5:BE:97:19:87:E1:95
            X509v3 Authority Key Identifier:
                keyid:34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234392e302f32342d3234203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:61:4d:77:9a:0b:b9:9b:8a:3c:02:f3:42:a5:96:f2:0f:14:
         55:9c:dd:7e:ba:30:6f:a4:0c:27:04:6b:49:f4:2f:84:5d:c1:
         3c:85:39:42:e9:c5:b7:f8:9c:10:aa:00:78:96:d3:7b:08:18:
         c3:fb:bc:20:b1:d9:2e:a5:5f:93:c2:e1:e8:a6:a3:00:1d:47:
         c4:43:6f:13:81:e3:64:c1:13:c7:06:dd:8b:ae:03:12:90:ae:
         83:f8:b5:9e:fc:8e:35:eb:9c:82:b3:da:5b:b8:0a:d3:24:fd:
         86:61:d2:73:63:75:d3:0a:11:01:f4:ba:cf:c5:2e:96:b2:8d:
         07:b3:b9:ef:fa:a9:27:e4:2a:cb:30:82:86:46:b4:c8:1b:3b:
         9f:38:76:68:12:9c:2a:12:03:4c:b9:3d:98:e7:2c:f0:71:a9:
         b1:01:db:37:88:3a:ac:70:62:e1:34:33:f2:72:a2:77:93:ca:
         4e:b0:06:53:56:be:9a:4a:63:1f:8e:3a:17:eb:a8:68:2d:0f:
         29:84:c4:4d:7e:68:6f:71:00:36:59:eb:2f:3d:9c:10:16:41:
         0e:a6:8c:41:5f:21:77:ad:18:80:c8:f3:c2:86:a1:b6:cd:f2:
         ef:4b:34:08:82:de:19:28:be:a1:e4:33:5f:3a:f6:59:60:ff:
         b2:4a:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:09:35 2026 by rpki-client