Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
File:                     3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          5Z9XavyxkW6qk5dOUYbI5prCFeIoX0OcIKxYCDv/3Io=
Subject key identifier:   FF:6E:76:88:08:77:94:B5:73:26:6C:E2:94:A2:A2:1C:9E:24:65:85
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       3F34DD247F93EEC124899775170B73AB715E6095
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:23 +0000
ROA not before:           Mon 27 Apr 2026 18:30:23 +0000
ROA not after:            Mon 26 Apr 2027 18:35:23 +0000
asID:                     265141
IP address blocks:        170.0.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:34:dd:24:7f:93:ee:c1:24:89:97:75:17:0b:73:ab:71:5e:60:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:23 2026 GMT
            Not After : Apr 26 18:35:23 2027 GMT
        Subject: CN=FF6E7688087794B573266CE294A2A21C9E246585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:58:df:ee:af:a9:ae:d0:62:67:37:6c:b2:
                    f5:fa:3d:31:58:ee:bb:ba:61:1d:6a:9e:6d:97:84:
                    97:0c:4d:1f:5b:ad:f0:3d:3d:bb:95:b7:85:eb:97:
                    b5:3a:8f:81:8d:e2:c5:5e:60:55:bc:d2:c5:28:4e:
                    25:65:ff:16:5a:9b:f5:4c:82:da:12:e2:27:b3:1e:
                    b3:19:c9:68:8b:5e:0f:49:95:f3:67:71:f9:30:58:
                    e5:61:3f:db:c5:76:3c:e7:b9:04:62:00:88:0c:a2:
                    47:3c:a1:da:0e:21:59:f3:89:70:4c:f6:4e:68:b1:
                    f3:7e:ff:30:94:c4:2c:b9:47:38:05:64:33:c5:b7:
                    1e:67:c2:9b:e8:44:75:69:54:11:a0:5f:4c:48:d0:
                    65:a3:67:53:33:5d:56:af:75:29:9f:85:26:c2:bd:
                    19:74:44:b7:ae:2b:8f:8a:e8:f0:35:22:69:3e:09:
                    2f:96:00:f5:29:a4:b6:26:1e:7d:f2:67:60:ea:6e:
                    91:83:03:3e:06:bd:77:9b:06:79:81:fb:66:58:99:
                    31:c1:76:de:3b:d5:d1:48:47:87:af:55:2e:c4:18:
                    26:1e:7e:51:8b:ba:43:ac:97:f6:41:2b:52:cb:a3:
                    a0:28:30:b8:93:a9:67:1b:f7:a5:20:13:54:e8:44:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6E:76:88:08:77:94:B5:73:26:6C:E2:94:A2:A2:1C:9E:24:65:85
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:84:b5:5e:c7:40:97:ac:06:01:5f:be:5b:e6:70:f8:68:
         22:cc:53:5f:2f:d6:02:12:9d:9c:9c:37:ff:19:08:03:d5:e4:
         4d:39:f2:bf:a1:6c:c2:69:17:fb:db:22:d6:9c:d3:dd:89:95:
         b4:4b:00:1e:2e:ae:b3:74:23:b7:3b:5a:5e:09:16:d7:c1:50:
         e9:f6:ac:b2:24:f1:72:95:e7:d5:14:47:5f:00:82:7f:b9:89:
         f6:7b:74:2d:4f:e6:16:b7:01:21:fd:7b:60:c7:43:d8:4d:2e:
         84:d0:a4:b4:d4:fc:af:f9:3c:dd:33:39:e9:9b:f5:9e:35:70:
         87:c2:72:9b:4f:c1:4d:33:12:ce:d1:3b:6f:4f:ad:05:06:3e:
         22:9c:0a:d5:88:d9:06:ba:51:52:80:68:7e:94:96:11:cb:a7:
         17:64:cd:c9:bf:f4:2b:35:e0:00:fa:58:75:aa:a6:7e:1c:17:
         fa:fd:d0:16:10:f1:1a:18:d3:2a:7d:24:ce:6e:d5:0a:b5:93:
         98:c3:e4:85:7a:57:2d:52:dc:6a:8f:75:4a:95:79:47:71:d1:
         3a:2a:0d:a0:08:4d:e8:49:59:7b:29:86:3f:9c:cd:61:e8:0c:
         7a:20:f2:93:fb:4c:07:5b:a9:ae:d2:53:c0:65:1a:4a:03:47:
         43:62:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:26 2026 by rpki-client