Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/3137392e302e38302e302f32322d3332203d3e20323731333331.roa
File:                     3137392e302e38302e302f32322d3332203d3e20323731333331.roa (raw, json)
Hash identifier:          UxgDTnFwnBGO3fkQePZS5vhb21SgTkSXHYAK4LBs7is=
Subject key identifier:   EB:D8:EC:C8:78:E6:65:17:30:E0:CA:7F:A6:41:6F:C3:A9:F4:0C:3B
Certificate issuer:       /CN=A0C424AF35DA2572268C0A23F781D698AAD850AB
Certificate serial:       5EE1C9FBAAD1054564519F83A5E03A3C0EFDEB96
Authority key identifier: A0:C4:24:AF:35:DA:25:72:26:8C:0A:23:F7:81:D6:98:AA:D8:50:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C424AF35DA2572268C0A23F781D698AAD850AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/3137392e302e38302e302f32322d3332203d3e20323731333331.roa
Signing time:             Tue 29 Sep 2026 04:02:40 +0000
ROA not before:           Tue 29 Sep 2026 03:57:40 +0000
ROA not after:            Tue 28 Sep 2027 04:02:40 +0000
asID:                     271331
IP address blocks:        179.0.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/A0C424AF35DA2572268C0A23F781D698AAD850AB.crl
                          rsync://rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/A0C424AF35DA2572268C0A23F781D698AAD850AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C424AF35DA2572268C0A23F781D698AAD850AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e1:c9:fb:aa:d1:05:45:64:51:9f:83:a5:e0:3a:3c:0e:fd:eb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C424AF35DA2572268C0A23F781D698AAD850AB
        Validity
            Not Before: Sep 29 03:57:40 2026 GMT
            Not After : Sep 28 04:02:40 2027 GMT
        Subject: CN=EBD8ECC878E6651730E0CA7FA6416FC3A9F40C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:6f:62:a3:2e:b1:f9:31:ed:6f:24:49:ae:
                    e2:b4:7e:13:04:32:c9:6f:55:8b:52:73:12:af:ce:
                    4d:25:60:b8:97:28:5d:de:26:76:ae:8b:9c:cb:98:
                    34:67:79:7c:39:a3:9d:eb:75:59:f0:45:15:13:ed:
                    2d:c6:e2:84:cb:6f:93:41:9d:55:fc:da:b6:65:02:
                    42:1f:34:4c:74:6b:ad:b8:ef:a0:fe:9f:b8:5d:75:
                    c2:8e:b4:26:cb:39:22:55:37:6b:50:51:f1:2e:28:
                    fc:82:a0:f3:ba:7c:63:97:f9:e8:1b:9b:65:10:5a:
                    1f:55:45:f3:0a:fc:9c:53:e1:da:d3:5e:fa:63:f7:
                    bb:ed:52:26:b4:68:61:d4:6c:a6:75:1f:cf:40:2d:
                    91:c2:a0:fe:29:00:1d:75:a5:a4:61:6e:16:d4:57:
                    f5:c9:d1:13:be:de:f0:c0:5f:6f:c0:35:85:8c:10:
                    e3:a7:d5:9c:9a:84:93:d9:fc:0d:55:58:62:32:31:
                    ae:f9:e1:06:1b:6f:47:d6:11:3b:b4:77:d6:19:7c:
                    cb:14:64:c7:bf:7b:fc:e0:a5:52:d1:e4:27:4f:39:
                    8b:c8:7c:ab:57:22:b8:a5:53:85:b1:27:3d:14:29:
                    33:45:55:b9:b1:3f:97:90:a1:8f:35:5d:b2:51:8b:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D8:EC:C8:78:E6:65:17:30:E0:CA:7F:A6:41:6F:C3:A9:F4:0C:3B
            X509v3 Authority Key Identifier:
                keyid:A0:C4:24:AF:35:DA:25:72:26:8C:0A:23:F7:81:D6:98:AA:D8:50:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/A0C424AF35DA2572268C0A23F781D698AAD850AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C424AF35DA2572268C0A23F781D698AAD850AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZVTn1v57kLYE74vbSkGz9JTDjYhSE7yGLJwUQo6RVFR/0/3137392e302e38302e302f32322d3332203d3e20323731333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:a8:2e:63:5f:74:ff:17:5f:f4:9e:4a:2e:24:6b:14:bd:
         ae:35:d5:71:c2:d7:2d:62:8b:25:75:ae:b9:e0:ea:a5:5f:b2:
         98:0b:91:b8:65:2c:3b:7b:ce:50:2b:56:26:fd:71:8c:66:66:
         67:71:d6:9d:0c:1e:50:ab:b1:03:4a:c8:87:06:cc:ea:71:ea:
         b6:d5:07:be:98:e4:fb:93:a5:fd:5c:46:75:71:4a:13:eb:f0:
         89:a5:de:1f:03:9c:a2:b2:7f:3a:92:bb:ca:0e:5e:c7:69:8e:
         64:ed:e2:0f:75:36:29:7f:f2:1f:ae:64:08:b6:a0:64:af:a2:
         6a:68:e1:cd:1d:b0:3d:ca:31:1e:c6:e5:6e:bb:10:d4:64:32:
         21:55:6b:3d:82:e7:dd:17:0e:3b:a7:9f:75:73:32:aa:ad:54:
         2b:f0:12:50:78:3a:9f:d4:30:35:3b:57:af:ef:54:4f:3c:05:
         3c:d3:c8:6c:1b:d1:26:4b:af:01:87:7c:73:fe:bd:b2:11:4b:
         f0:b8:77:74:65:99:c6:c0:c6:ef:f2:43:2b:a6:d4:f3:78:af:
         2e:0b:70:e0:17:8a:da:83:72:f8:b1:73:4d:b7:c1:ff:08:97:
         ab:29:b6:cb:a5:e9:d1:ff:97:c3:29:e9:fa:20:7c:c5:23:da:
         43:04:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:41:03 2026 by rpki-client