Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa
File:                     3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (raw, json)
Hash identifier:          GjA63/FS4OQ6bQcnQG2MYesxxuTL/g35lJGq+sK/a2U=
Subject key identifier:   A4:E7:A7:4F:09:22:8A:EE:47:BC:61:39:E3:30:DC:3A:2F:4E:C3:C3
Certificate issuer:       /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
Certificate serial:       05720A46A807C49C6239391FBD656B39443B74D2
Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa
Signing time:             Thu 05 Mar 2026 14:52:58 +0000
ROA not before:           Thu 05 Mar 2026 14:47:58 +0000
ROA not after:            Thu 04 Mar 2027 14:52:58 +0000
asID:                     266280
IP address blocks:        170.78.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl
                          rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:72:0a:46:a8:07:c4:9c:62:39:39:1f:bd:65:6b:39:44:3b:74:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
        Validity
            Not Before: Mar  5 14:47:58 2026 GMT
            Not After : Mar  4 14:52:58 2027 GMT
        Subject: CN=A4E7A74F09228AEE47BC6139E330DC3A2F4EC3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:44:66:67:94:4b:41:6c:bd:6d:6f:4e:0f:dc:
                    2d:d1:8b:bf:d4:69:38:47:c6:a4:bf:64:bc:bf:36:
                    d2:61:d1:76:55:72:f3:df:b2:7a:4d:20:55:29:17:
                    3c:fb:ff:6b:e3:ac:fa:a9:34:3c:40:4c:51:11:49:
                    db:0e:8b:26:11:bb:4d:5a:5d:9e:ed:58:f2:0e:41:
                    12:9f:e3:1a:29:d8:50:b1:09:76:8b:6b:81:6b:cf:
                    d9:fe:81:f2:b2:cf:f9:25:c5:37:e8:64:a9:9c:f4:
                    07:67:4d:1f:ce:4d:dd:fb:af:7c:85:80:b8:cb:28:
                    25:ee:cf:8a:48:11:43:35:25:4c:19:87:01:b0:c3:
                    2a:79:47:a8:d3:eb:00:47:60:11:99:9b:77:3f:f8:
                    7f:83:75:86:af:1e:72:c0:f8:06:99:5c:eb:37:6b:
                    ef:09:e7:fa:ee:b9:af:17:0c:e1:92:87:6b:77:4a:
                    41:8b:e0:04:0d:35:ed:03:c6:e2:71:38:24:7c:ae:
                    a9:c9:7d:d7:fb:13:17:0c:ec:01:71:9b:f8:d1:d5:
                    1f:09:af:9f:77:d4:2d:b0:4e:7a:39:e2:c9:7c:68:
                    de:49:1a:c6:1a:9e:dc:c8:ec:0e:f4:bb:1d:cc:cf:
                    72:ab:48:a8:23:0f:f6:9e:31:f5:36:3b:c9:f0:63:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:A7:4F:09:22:8A:EE:47:BC:61:39:E3:30:DC:3A:2F:4E:C3:C3
            X509v3 Authority Key Identifier:
                keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:cb:40:a7:57:58:51:35:c3:e5:a3:10:26:e2:e1:d0:1a:
         c8:87:41:43:8b:43:4c:0c:d6:f3:d2:07:94:00:e5:77:bd:0f:
         e6:2b:1c:8e:d3:8c:f2:b7:3d:7c:21:fb:b1:3d:e6:ff:c2:9b:
         4d:14:ef:99:9e:89:fc:a1:76:25:1c:82:8f:db:2d:dd:dd:98:
         27:11:6e:b7:3f:59:ed:8e:e7:77:8c:41:6a:94:5a:84:a5:a1:
         e5:1a:cb:9e:0c:31:c9:6c:b2:01:5b:ce:1d:df:5a:5d:c4:82:
         8d:02:d9:87:d4:55:a4:c5:28:b9:f0:e2:9b:fe:55:4f:11:65:
         6d:95:3e:1e:ff:7c:55:c0:b1:d3:81:96:7e:d9:5a:57:24:3d:
         0e:5d:d0:bc:0e:f5:b6:d0:ef:a8:55:40:70:ea:1f:9b:78:5e:
         8f:90:76:53:08:03:88:d1:a7:c1:8f:ef:2b:ce:88:38:12:e1:
         a0:38:2e:95:fe:64:a8:3c:eb:91:48:51:21:d7:9a:d1:7e:91:
         86:3b:36:e7:86:fa:fd:56:c4:f2:ce:10:aa:97:8d:c5:8d:e0:
         c7:2b:70:54:96:2c:1a:c8:7c:53:f0:8a:ac:f3:d0:c0:16:3f:
         92:e3:d4:f3:06:61:45:95:87:ca:0d:5c:d8:02:53:4d:86:0e:
         7e:7d:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:45 2026 by rpki-client