Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3234342e3235322e302f32322d3332203d3e203238363439.roa
File:                     3137302e3234342e3235322e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          J4DggajTxB1SPkgqQ0hP/kUMu98BzRz681jNRmFM3nU=
Subject key identifier:   97:ED:53:2B:E9:E3:17:6A:42:3B:B0:96:11:39:B0:2C:FA:A7:C8:17
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       261FA1EE275C6D6DD6983F98B8BF7E636E2D2DF6
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3234342e3235322e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:09 +0000
ROA not before:           Fri 17 Jul 2026 20:56:09 +0000
ROA not after:            Fri 16 Jul 2027 21:01:09 +0000
asID:                     28649
IP address blocks:        170.244.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:a1:ee:27:5c:6d:6d:d6:98:3f:98:b8:bf:7e:63:6e:2d:2d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:09 2026 GMT
            Not After : Jul 16 21:01:09 2027 GMT
        Subject: CN=97ED532BE9E3176A423BB0961139B02CFAA7C817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:d0:06:1e:1f:35:46:9c:b6:40:3d:e6:cb:
                    ee:ed:a2:98:41:cd:af:68:88:4a:cf:4b:19:43:96:
                    bc:d8:b7:7c:23:ed:aa:64:62:b5:3b:2d:dc:f6:17:
                    aa:75:63:d2:3b:9b:b9:fa:3a:bf:4e:f2:7d:ec:39:
                    0c:be:bb:83:cd:ce:d3:22:c8:fb:c5:0f:00:ab:5c:
                    eb:36:ab:fa:d3:d3:2d:bf:1a:00:60:0b:73:d2:04:
                    d5:b1:de:da:33:36:03:9e:ea:f6:a9:33:74:15:f4:
                    c9:76:d3:a8:f8:57:b5:8e:d7:a5:ae:60:9b:7e:38:
                    2a:f4:57:5c:80:5e:8a:ef:93:5f:31:0a:d2:c8:07:
                    61:54:b7:c9:e9:11:61:49:cc:62:23:46:15:a2:1d:
                    bb:17:e3:25:8c:90:58:d6:af:86:39:5a:5b:f4:c6:
                    7c:5d:c7:83:f9:21:74:d3:22:2e:2b:83:80:b0:e9:
                    be:07:82:c7:0b:02:de:04:84:bf:ca:71:90:f3:06:
                    d5:cd:75:2e:8a:02:59:6b:31:32:d4:47:84:1d:45:
                    6c:7c:df:de:fa:12:99:cb:b8:30:89:c7:8d:38:6f:
                    b6:a7:3a:2b:54:aa:48:6c:b4:c0:ab:d3:6a:af:88:
                    83:2f:cb:e9:28:cf:35:9f:90:e8:09:d0:18:cd:ce:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:53:2B:E9:E3:17:6A:42:3B:B0:96:11:39:B0:2C:FA:A7:C8:17
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3234342e3235322e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:fa:7f:87:b1:96:40:b7:7e:3c:82:18:63:5a:03:d6:09:e5:
         08:ce:f3:69:90:a5:63:69:67:d7:85:72:4d:3c:ca:45:ec:cf:
         b9:8e:64:67:ee:44:ec:55:ef:11:a7:3d:6a:01:4a:be:78:48:
         88:db:a7:b4:14:35:56:c0:8d:0c:c5:04:50:c1:e0:0f:af:08:
         25:ce:15:39:59:cc:b1:70:68:54:73:e7:42:74:d4:3d:ff:16:
         70:80:2f:04:27:49:d6:63:8a:4a:c0:bf:5f:7b:f7:2c:71:57:
         00:94:a5:7b:a2:90:a6:d3:1b:1d:84:2c:82:5e:93:e0:ff:ad:
         52:17:85:3d:6d:e6:4d:68:8d:7c:c0:07:b1:d9:cd:d0:bc:f9:
         8c:70:4f:b1:c4:a7:17:50:3b:80:80:c7:b4:b0:3d:e9:90:9f:
         2a:04:67:80:a6:00:3e:39:68:7c:06:83:a8:9a:d0:ce:8c:29:
         79:20:e4:c3:1e:6f:f0:f5:42:a0:2b:6c:78:ff:99:b9:74:c0:
         ec:88:37:65:fc:36:c7:9d:ae:00:94:51:73:a8:4c:27:7a:b0:
         25:09:1b:fb:49:7e:6a:52:38:9d:56:0e:0f:bf:5f:00:68:79:
         77:4e:bc:e9:19:cd:b1:d3:b6:85:d9:ef:09:36:84:ca:32:1f:
         aa:ef:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:10 2026 by rpki-client