Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
File:                     3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          qd3jEaa1XB39UJMnNQtEgvppTeieZ7ozlkBOL+L1Co8=
Subject key identifier:   C7:39:D2:85:74:74:51:C5:19:6D:5E:D5:0B:AF:33:0A:B8:30:34:D4
Certificate issuer:       /CN=E8BB3D15068B9B0465030BF44863CBCB88D5149C
Certificate serial:       3686EC302C0B8C3C47D98B07F344C386ADC53708
Authority key identifier: E8:BB:3D:15:06:8B:9B:04:65:03:0B:F4:48:63:CB:CB:88:D5:14:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
Signing time:             Tue 15 Sep 2026 18:45:52 +0000
ROA not before:           Tue 15 Sep 2026 18:40:52 +0000
ROA not after:            Tue 14 Sep 2027 18:45:52 +0000
asID:                     262530
IP address blocks:        170.247.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:ec:30:2c:0b:8c:3c:47:d9:8b:07:f3:44:c3:86:ad:c5:37:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8BB3D15068B9B0465030BF44863CBCB88D5149C
        Validity
            Not Before: Sep 15 18:40:52 2026 GMT
            Not After : Sep 14 18:45:52 2027 GMT
        Subject: CN=C739D285747451C5196D5ED50BAF330AB83034D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:03:e2:c0:c8:50:a6:fa:f6:96:d9:61:e6:
                    9d:7c:e5:f9:8c:96:bb:9f:08:c0:b2:f2:3b:97:96:
                    8e:c8:c1:b1:03:ea:f9:17:a5:b0:5c:c8:b9:0a:d8:
                    ce:46:84:cd:df:c8:3e:73:da:4a:4c:b4:89:b8:97:
                    8d:93:99:83:ef:7e:99:86:68:cb:e9:a1:75:94:db:
                    1a:d0:a9:76:6f:51:ce:e2:4c:a8:54:c4:e9:57:6b:
                    7c:43:c9:c3:05:9c:df:a5:ed:af:b0:2f:b8:c8:9e:
                    3f:43:a3:50:17:19:21:3a:92:70:78:1c:c5:9d:b7:
                    2e:f0:1b:3c:5a:41:9f:3c:68:1a:88:29:33:b6:bc:
                    c2:5e:2b:38:83:39:32:49:ab:7d:47:dc:df:8e:eb:
                    d2:0f:a9:89:07:86:3f:24:6d:a8:46:47:8c:31:e5:
                    48:1c:f8:73:6a:87:cb:d9:69:d1:bb:fc:dd:60:85:
                    0d:c4:a0:1e:b9:c1:e0:14:51:5b:05:06:8d:6b:73:
                    d7:55:79:35:a6:f5:47:a2:65:af:f9:b9:6d:2f:8c:
                    ff:02:d9:e4:72:a8:d3:20:79:46:1b:d8:fb:e8:ac:
                    fd:31:99:88:c4:85:f7:54:a0:74:e1:40:93:33:b4:
                    e5:7b:d2:cc:7c:b4:be:e1:3a:3d:47:18:cd:b8:2d:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:D2:85:74:74:51:C5:19:6D:5E:D5:0B:AF:33:0A:B8:30:34:D4
            X509v3 Authority Key Identifier:
                keyid:E8:BB:3D:15:06:8B:9B:04:65:03:0B:F4:48:63:CB:CB:88:D5:14:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:b2:d5:69:99:07:a6:15:aa:57:a2:a6:06:68:2d:77:4f:
         e4:a9:d7:f6:c8:80:03:ca:38:23:a3:1a:28:cc:93:14:c4:81:
         10:24:18:ef:08:02:0d:ef:6b:82:0b:a0:e2:f0:30:25:de:0a:
         7d:fc:1a:cc:47:84:0b:7f:d4:0e:4d:7e:59:62:1f:61:b5:f0:
         82:25:a4:f1:a0:8e:c9:49:b9:7e:ca:fd:1f:9c:7a:35:fa:98:
         85:04:40:99:30:c7:82:51:c8:38:ec:4d:b4:0e:02:f4:99:b6:
         19:b7:6a:48:14:16:c1:d4:a2:61:c7:3c:88:83:d8:6c:03:6f:
         29:21:1d:82:ae:f1:04:e4:60:3c:63:34:ef:d6:98:0a:e2:05:
         e9:06:fb:d3:fe:b5:f6:90:e0:b7:79:a9:fc:3b:e3:b7:74:e8:
         0d:45:0c:84:af:37:08:a3:02:8d:8b:16:fc:00:72:44:5c:d6:
         3c:01:ae:a3:ac:ac:4a:ae:81:c8:bc:c0:46:42:7b:bc:1f:1f:
         69:63:10:2a:1a:b7:f3:35:15:f8:b3:63:c6:51:aa:11:c6:9d:
         24:42:96:3e:6b:0b:71:0b:11:6a:07:e6:27:d5:0e:04:cb:45:
         bd:e3:e5:17:52:a2:1b:43:f2:77:7f:f8:29:00:dc:99:60:7c:
         ef:28:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----