Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa
File:                     3137302e37392e33322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          VLTHOpNdswTj4bzKKzzkY9lOoZl+jwkj8D6zJeVMIN8=
Subject key identifier:   4B:D7:8B:85:52:8D:83:31:62:8B:DC:43:DC:61:3B:8D:BF:C0:F5:55
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       35AF25D7D0CEF5920D106669E6834D1D559F9307
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:50 +0000
ROA not before:           Mon 21 Sep 2026 19:43:50 +0000
ROA not after:            Mon 20 Sep 2027 19:48:50 +0000
asID:                     263880
IP address blocks:        170.79.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:af:25:d7:d0:ce:f5:92:0d:10:66:69:e6:83:4d:1d:55:9f:93:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:50 2026 GMT
            Not After : Sep 20 19:48:50 2027 GMT
        Subject: CN=4BD78B85528D8331628BDC43DC613B8DBFC0F555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:7a:f2:ad:96:da:f2:25:d5:a9:a8:c7:0f:
                    12:57:dc:a2:36:ec:09:be:36:a8:80:4e:95:58:dd:
                    6d:32:aa:f9:1e:6d:f3:d3:04:d6:51:fc:9b:16:76:
                    2b:59:e9:fb:69:34:e7:50:cb:db:bb:49:5e:d8:77:
                    26:a2:cb:5d:15:b9:83:96:9e:8a:d1:be:7d:13:04:
                    8e:d7:b5:4f:49:a3:f2:18:39:00:23:35:15:cb:c9:
                    57:85:0c:e2:bb:2c:d0:f7:c4:bf:d8:4b:a0:04:66:
                    d8:32:be:d0:25:9f:ec:ba:86:9c:23:1d:53:18:63:
                    f9:9b:69:a4:1a:fb:1a:b9:68:3a:21:8f:ff:51:ec:
                    ec:ca:d4:c1:a7:ad:c2:f0:bf:25:f7:74:93:b4:1e:
                    e0:6b:33:25:47:f3:ca:5b:87:eb:9d:2b:0a:c5:b0:
                    af:1c:e5:ad:9b:6e:fe:66:06:93:38:ec:e3:bc:7a:
                    82:69:94:9a:a9:3b:68:fb:4f:3d:7d:1a:7b:2a:cd:
                    65:91:17:3e:d0:9b:3b:e8:78:32:8c:4b:98:58:e9:
                    11:0f:8e:f8:5e:7b:71:f0:e3:17:a6:82:83:06:24:
                    16:49:8a:ca:2f:ee:fa:84:9b:5e:c1:3d:19:45:ef:
                    e2:f4:28:81:c1:8a:55:ae:24:9b:29:2a:78:87:09:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:8B:85:52:8D:83:31:62:8B:DC:43:DC:61:3B:8D:BF:C0:F5:55
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137302e37392e33322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:f3:50:30:78:bb:86:c5:09:2a:12:cd:9a:b6:9e:6b:55:83:
         af:88:cd:d2:ee:7a:fe:a3:19:e2:7b:ea:f1:12:2e:15:d4:5d:
         99:c2:6f:d5:22:38:da:52:ec:25:d6:04:58:63:56:15:5e:16:
         86:69:6d:4d:48:8f:00:8e:20:49:65:3b:d2:7e:26:c1:b5:d2:
         b2:d6:5b:a5:cb:72:36:50:54:6b:e2:6e:a4:a7:ea:77:e8:ea:
         88:69:da:cb:3b:fa:f8:04:b6:38:dc:f9:37:48:e7:f6:c8:8b:
         13:df:65:e2:b8:cc:b2:9b:53:2d:18:47:4d:ba:9a:ac:14:9b:
         7c:90:8a:87:cf:08:16:ad:79:b3:6a:68:a7:5f:32:67:8d:5e:
         b3:10:92:e8:b3:3c:08:53:2d:f0:13:2e:b7:31:03:0a:a1:0c:
         72:d2:b4:b2:a7:77:f4:27:60:42:f8:27:15:f3:34:07:fd:5d:
         e4:60:01:a8:dd:65:03:4f:27:76:0b:21:31:eb:dd:3b:10:85:
         db:61:c2:6c:31:fb:a5:80:25:5c:5d:49:0f:6f:e4:9d:df:7a:
         a6:0c:dc:2d:0d:c0:cc:b0:b4:50:0f:fa:6e:fe:39:2e:ea:15:
         51:14:11:1c:31:af:74:68:d1:05:75:f6:d2:28:9b:ad:f6:f0:
         8c:13:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----