Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa
File:                     3137302e38342e37362e302f32322d3234203d3e20323634393939.roa (raw, json)
Hash identifier:          uKQyqF243dLK1ImnN9EnAGTBcqte+3FYSbC/kvF99mM=
Subject key identifier:   36:8F:05:CE:56:75:A8:E0:87:06:91:C6:48:C7:9B:E9:30:F2:89:88
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       3504EBD62E75D6F5E3403D9B8CF1213DA439BF42
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa
Signing time:             Thu 15 Oct 2026 19:25:11 +0000
ROA not before:           Thu 15 Oct 2026 19:20:11 +0000
ROA not after:            Thu 14 Oct 2027 19:25:11 +0000
asID:                     264999
IP address blocks:        170.84.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 13:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:04:eb:d6:2e:75:d6:f5:e3:40:3d:9b:8c:f1:21:3d:a4:39:bf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Oct 15 19:20:11 2026 GMT
            Not After : Oct 14 19:25:11 2027 GMT
        Subject: CN=368F05CE5675A8E0870691C648C79BE930F28988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:a6:d6:0f:e3:26:a9:10:cd:b5:07:cf:93:
                    4b:97:78:76:51:da:be:35:ac:57:16:fb:e3:77:8a:
                    2b:06:37:f2:a8:96:f3:36:9e:05:65:b8:67:9f:32:
                    f6:f0:1c:d6:10:de:32:c1:38:2e:d9:0d:6e:59:0f:
                    a9:54:67:64:aa:e2:02:0a:26:64:3e:f7:f9:c0:0d:
                    6c:e2:10:c7:e4:4a:92:7a:f2:a7:2c:c1:3b:4a:05:
                    22:31:c8:1e:50:21:0b:e3:6e:65:d1:ed:3f:e3:fd:
                    ce:00:78:ca:6b:dd:e4:f4:47:e4:45:9b:76:71:72:
                    d0:2a:4d:e6:03:e4:e9:12:64:95:73:ba:e6:a2:59:
                    e0:a9:af:e3:d0:84:f1:68:30:ec:f1:a9:64:f3:9f:
                    c2:db:54:ce:c2:1a:fb:76:03:7c:4f:5c:1b:99:1f:
                    2f:de:47:b1:89:11:b7:ac:35:27:f8:08:57:9c:a1:
                    a2:43:e3:98:2c:d3:ca:98:92:8c:9e:b0:6a:51:9d:
                    b3:8f:ec:66:a4:76:81:c2:e3:f9:5d:95:66:e2:3d:
                    a4:42:53:ba:72:c8:48:e1:9b:a8:cb:7a:e5:4e:b8:
                    07:d9:02:0b:2a:9e:38:39:4a:66:18:31:63:6d:14:
                    fd:13:ae:7c:dd:61:97:b1:79:bf:31:a2:4b:0a:d1:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:05:CE:56:75:A8:E0:87:06:91:C6:48:C7:9B:E9:30:F2:89:88
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:4c:f9:8b:f2:bd:40:21:c8:30:ac:55:d2:2d:fc:c3:69:
         a0:ef:d0:fb:c7:ce:fa:55:85:75:70:e2:c4:7f:9e:c6:ae:ea:
         db:68:14:68:64:27:a7:cf:27:75:7d:04:f5:c3:50:f3:a9:a3:
         1f:87:2b:42:49:a6:5e:a8:d4:10:64:f3:04:14:dc:08:d5:24:
         e6:0b:00:d5:57:16:26:fa:ee:fd:ed:c5:5e:d5:6e:77:36:65:
         2b:66:9a:d9:c1:7e:28:a9:ad:83:f0:75:0d:c0:ca:7d:3d:51:
         24:7e:41:4b:2a:1d:75:aa:fe:c2:d5:fe:cf:14:8d:74:de:de:
         70:86:51:db:af:ad:b7:a8:fa:cb:91:b6:38:c0:f0:11:32:23:
         39:ff:d6:3a:e9:89:ee:f9:5b:a2:fc:28:84:f2:11:47:ea:62:
         64:f1:74:27:ec:05:2a:07:f8:18:24:54:76:7e:84:eb:84:7a:
         bc:73:ea:14:b7:bc:05:91:ee:cf:ab:41:34:94:78:55:5f:06:
         7c:b5:ab:4c:fc:7a:09:24:99:c9:9b:f7:c7:1f:51:70:3d:5b:
         37:3e:17:e0:f9:7c:c8:13:a9:f1:f2:cd:74:0b:98:d7:e2:91:
         7c:ee:57:b4:5b:ff:54:67:d4:e9:f6:8d:cc:cd:3e:32:d4:90:
         2c:e3:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:03:32 2026 by rpki-client