Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138392e302f32342d3234203d3e20323636333030.roa
File:                     3137302e37392e3138392e302f32342d3234203d3e20323636333030.roa (raw, json)
Hash identifier:          R/oSPDrezecwD36vZEf+gfg1u8yf7olbp7QK/C3tyVk=
Subject key identifier:   61:7D:28:4B:95:60:FC:C6:55:FA:5D:19:13:B1:FF:55:BB:41:C4:FC
Certificate issuer:       /CN=4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5
Certificate serial:       359B4CDBD81221D79D29A7CEEB785ADD53A55627
Authority key identifier: 4A:0A:14:4B:1F:E4:46:73:1C:B6:B1:B4:DA:48:F4:CA:99:8F:9F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138392e302f32342d3234203d3e20323636333030.roa
Signing time:             Mon 05 Oct 2026 12:55:09 +0000
ROA not before:           Mon 05 Oct 2026 12:50:09 +0000
ROA not after:            Mon 04 Oct 2027 12:55:09 +0000
asID:                     266300
IP address blocks:        170.79.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.crl
                          rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 11:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9b:4c:db:d8:12:21:d7:9d:29:a7:ce:eb:78:5a:dd:53:a5:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5
        Validity
            Not Before: Oct  5 12:50:09 2026 GMT
            Not After : Oct  4 12:55:09 2027 GMT
        Subject: CN=617D284B9560FCC655FA5D1913B1FF55BB41C4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:e9:12:e5:c5:7f:fe:1e:02:97:bd:e6:32:
                    43:60:7d:85:32:01:74:55:3d:ba:0c:ab:22:85:6a:
                    16:b9:58:fc:ed:aa:d2:88:60:b0:d1:f5:c4:c3:4b:
                    5f:6f:4a:91:9a:d0:7b:8d:2d:5a:d0:45:1b:35:e8:
                    9c:44:c6:5c:e3:2c:4b:89:bd:8b:38:dd:2e:56:55:
                    ee:b1:41:e7:37:4a:88:00:4d:3a:5a:42:e7:94:b8:
                    fb:7d:82:fc:f2:26:74:e6:89:ad:bf:28:c7:de:0c:
                    3a:d0:b6:10:43:fb:b2:0c:ac:05:17:df:30:f7:bd:
                    ab:d4:eb:ab:84:cd:fd:08:f3:ed:60:36:02:31:0e:
                    59:a9:c0:25:9f:42:02:11:51:56:01:25:c4:f4:1b:
                    fe:d9:81:1c:14:fb:0e:c3:54:5a:1c:45:09:75:af:
                    6c:ca:28:cd:5d:58:bb:ec:35:a6:d7:26:fe:ff:b6:
                    52:95:32:f5:7b:6e:ea:2a:47:26:17:c6:47:1a:00:
                    3f:4b:78:7b:a5:b5:06:6e:c0:c1:fc:1f:65:a9:4a:
                    a8:51:be:7c:2a:d6:79:f4:9e:80:31:99:ef:0f:8e:
                    21:df:72:c3:f2:6b:3d:40:6a:a5:76:23:73:61:ac:
                    a0:20:69:ac:b5:b4:78:8b:a3:30:57:88:40:97:3b:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:28:4B:95:60:FC:C6:55:FA:5D:19:13:B1:FF:55:BB:41:C4:FC
            X509v3 Authority Key Identifier:
                keyid:4A:0A:14:4B:1F:E4:46:73:1C:B6:B1:B4:DA:48:F4:CA:99:8F:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138392e302f32342d3234203d3e20323636333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:4c:b3:4c:0c:2d:a2:cb:60:21:71:11:a3:02:03:c2:28:
         2a:52:67:f8:84:2e:26:ea:42:65:f8:a2:1a:2c:61:96:79:8a:
         dd:64:13:9e:6d:e2:c8:fa:98:37:12:72:2e:9e:56:2f:33:ba:
         3b:ba:d1:c9:9c:b1:fe:e1:d3:ae:31:f4:9b:58:70:02:16:0b:
         93:4d:50:a8:e7:3c:b1:87:11:1d:18:4c:79:f8:16:25:1f:98:
         3a:50:e0:47:b0:7e:49:eb:83:bc:2a:20:c0:8b:a5:9b:21:74:
         36:cf:2b:9d:85:cc:7d:6e:5c:49:ed:b1:75:d2:40:2f:78:1d:
         64:72:8e:b8:a5:cb:bf:ac:c4:af:2b:40:8e:65:ab:75:34:cf:
         da:a5:b9:fa:39:59:7c:c4:c4:3a:ca:a7:a3:19:56:b3:87:e7:
         59:a8:bb:ea:be:bb:bc:5a:e9:bb:b1:8e:21:55:d8:31:2d:8a:
         f2:aa:35:15:e2:f4:30:79:3a:c2:59:75:53:08:3c:c2:2c:27:
         0e:f7:27:3a:99:6c:a3:18:87:cb:51:ef:d8:da:03:07:f6:12:
         9a:45:71:4b:51:0a:98:0c:10:ca:a1:a0:89:b6:88:89:73:a1:
         c9:9f:7a:96:3b:5c:e9:9c:44:00:e7:8a:04:d8:be:33:07:ab:
         d4:e2:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:16 2026 by rpki-client