Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa
File:                     3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (raw, json)
Hash identifier:          a59BFQDG65wPgsi4lWRjuSTsGwFD6z8GSEFjM/571lU=
Subject key identifier:   20:F0:91:5E:65:9D:0F:4C:BC:13:31:7B:7F:FD:8E:72:BF:1F:3D:D3
Certificate issuer:       /CN=BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D
Certificate serial:       6B5F9E433B1E96FC7224F90D8F43052B22FB1D63
Authority key identifier: BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa
Signing time:             Thu 25 Jun 2026 14:42:04 +0000
ROA not before:           Thu 25 Jun 2026 14:37:04 +0000
ROA not after:            Thu 24 Jun 2027 14:42:04 +0000
asID:                     264967
IP address blocks:        170.0.100.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 05:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5f:9e:43:3b:1e:96:fc:72:24:f9:0d:8f:43:05:2b:22:fb:1d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D
        Validity
            Not Before: Jun 25 14:37:04 2026 GMT
            Not After : Jun 24 14:42:04 2027 GMT
        Subject: CN=20F0915E659D0F4CBC13317B7FFD8E72BF1F3DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:26:52:b9:62:29:eb:1f:9a:8d:9e:9b:81:
                    a7:84:b3:00:2f:dd:e5:29:27:76:b3:54:3a:14:53:
                    cb:cf:ef:5d:43:57:f8:96:6e:97:c4:ba:f9:a2:35:
                    2d:73:82:5a:aa:78:ce:0c:c1:f8:0e:40:d7:ab:18:
                    67:4f:78:cb:5c:8e:5b:0c:38:bc:d7:76:cc:67:f3:
                    e8:d5:9e:11:59:d8:99:2a:64:67:94:ff:af:6c:1e:
                    88:f2:66:88:2f:42:64:80:ce:23:4d:2c:53:fc:da:
                    2e:26:18:e0:6d:6c:2c:bf:94:5b:6f:5f:4f:e1:e9:
                    40:8c:1d:ed:85:24:81:91:c8:de:9b:5d:af:22:fc:
                    a9:a9:76:c4:91:d2:fd:4b:d7:78:e4:37:79:88:3d:
                    88:7d:d5:50:6b:d2:aa:45:c0:1e:9c:0f:bc:3c:40:
                    f7:70:04:8c:f9:dc:72:36:b3:f9:a6:fa:a9:37:28:
                    6a:9f:d9:15:78:ab:69:02:b4:6f:a8:b7:e3:35:07:
                    98:96:e9:d0:8b:29:51:d6:39:91:38:40:44:61:30:
                    fc:e4:61:12:7d:ae:e8:d4:ea:64:2a:93:ee:6a:4d:
                    8c:fa:5c:8b:93:f5:ad:23:bf:d0:15:4b:08:46:a3:
                    b7:58:95:10:e4:0f:68:60:29:33:28:0a:ee:e4:1e:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F0:91:5E:65:9D:0F:4C:BC:13:31:7B:7F:FD:8E:72:BF:1F:3D:D3
            X509v3 Authority Key Identifier:
                keyid:BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:f6:f1:54:80:73:c2:57:27:e9:43:57:24:0c:e5:ed:8a:
         04:a0:4a:72:d3:cc:80:9b:42:cf:4e:e8:b3:c4:28:de:3b:dd:
         eb:f2:5b:4f:89:80:d0:16:9d:46:f0:6f:31:8a:25:48:c6:46:
         b0:56:4b:3c:56:56:d8:6d:5a:30:07:0e:e8:3f:8c:ef:e3:da:
         bb:47:44:62:d2:b8:a0:fa:33:b9:ed:b5:2d:e6:6c:3d:cc:4f:
         76:d8:27:00:92:6a:3b:e2:1f:b5:76:43:45:77:e3:7b:6b:21:
         62:2f:85:83:4b:8d:bb:ee:58:3c:a9:8d:80:83:1c:85:3f:c0:
         1c:4b:d7:1d:8a:83:81:b5:01:05:db:20:49:40:7b:be:60:36:
         92:a9:ab:93:52:7e:b4:c2:24:95:7e:29:1a:60:58:f7:2f:1e:
         df:c3:92:31:ef:6a:b1:a3:b1:11:1d:d1:8c:0a:26:b5:f8:d9:
         69:98:ae:ee:a3:77:e0:2f:75:7b:89:5d:2a:ad:a6:09:81:ee:
         4b:69:2b:2a:e4:ab:8a:ee:a4:c3:52:51:d4:b5:33:2f:31:40:
         70:49:41:76:ab:32:8e:be:e6:78:4f:79:f6:43:ab:10:0b:e9:
         62:c0:30:c4:55:8e:05:b3:2d:46:b5:3e:23:80:c1:ca:98:76:
         d7:ad:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:06 2026 by rpki-client