Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36392e302f32342d3234203d3e203631373534.roa
File:                     3137302e38332e36392e302f32342d3234203d3e203631373534.roa (raw, json)
Hash identifier:          4a66ZU9cPB0tXfOrpTDBRdodthSlqVm9anmwtk4+4AA=
Subject key identifier:   4A:F4:F1:4E:C3:0D:A6:1E:F4:D4:09:37:89:01:FC:41:77:FB:81:98
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       3401783F34570D59E3849A0AD7206250974D1FF6
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36392e302f32342d3234203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:24 +0000
ROA not before:           Fri 11 Sep 2026 20:09:24 +0000
ROA not after:            Fri 10 Sep 2027 20:14:24 +0000
asID:                     61754
IP address blocks:        170.83.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:01:78:3f:34:57:0d:59:e3:84:9a:0a:d7:20:62:50:97:4d:1f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:24 2026 GMT
            Not After : Sep 10 20:14:24 2027 GMT
        Subject: CN=4AF4F14EC30DA61EF4D409378901FC4177FB8198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:9c:04:a7:31:ba:f8:ec:05:58:9f:22:f1:
                    ed:79:65:5d:c5:ce:25:12:b2:cb:72:d9:fe:d1:e3:
                    71:c4:13:ef:38:12:80:0d:30:75:7a:c9:db:b6:bf:
                    c5:de:8e:be:67:01:2e:d0:fe:31:ae:9d:94:a7:a6:
                    c6:f5:00:5c:dd:ec:dd:ff:10:3c:36:17:c2:62:06:
                    a6:2d:6a:7c:de:c0:15:64:d5:a4:36:53:ac:26:81:
                    4c:b2:fe:ed:ad:3e:2f:06:1f:00:f1:2b:a1:da:90:
                    a4:97:5c:54:3c:57:49:68:1a:f2:87:d3:1b:4b:16:
                    d1:7d:53:66:c3:39:36:7f:9d:bd:ad:e0:75:1e:93:
                    94:28:b0:95:d7:65:cb:d1:c1:d1:86:3f:6d:67:69:
                    c3:59:2a:49:de:50:71:4d:22:19:39:b4:bb:e1:5a:
                    eb:c6:be:2e:b6:ad:32:42:5d:5f:77:07:ad:42:ef:
                    74:a0:8e:2b:27:13:11:8d:60:48:19:bc:e6:14:e1:
                    21:04:88:2a:12:63:5f:44:99:cb:7d:ae:1b:f6:23:
                    bc:2e:92:95:38:aa:ab:c8:7a:1d:8c:ac:ed:4c:07:
                    06:f8:8b:a2:e9:2c:79:c5:00:d0:ef:34:33:93:83:
                    3f:c9:67:8c:bb:95:9d:d9:23:e2:8e:be:79:04:43:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F4:F1:4E:C3:0D:A6:1E:F4:D4:09:37:89:01:FC:41:77:FB:81:98
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e36392e302f32342d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:10:37:7d:a3:1e:d9:64:72:87:cf:10:53:ee:91:9c:5c:
         91:42:6b:d9:fd:aa:f8:eb:93:91:8b:6c:47:c7:30:ee:f1:72:
         53:0f:91:36:d0:9e:55:25:c2:87:1c:3c:13:80:f9:ac:61:de:
         bd:be:f6:e7:12:ea:48:90:12:ef:0f:c6:6a:5f:b2:af:aa:57:
         eb:7e:88:bb:bd:8c:b4:19:ea:81:1f:4f:b4:02:fa:ed:de:06:
         e2:8f:ec:cb:78:5c:f8:fc:84:7f:99:68:d2:a7:5c:33:d0:01:
         49:a6:51:15:7b:33:ab:25:50:ad:95:0e:c6:cf:c9:18:be:fa:
         64:b1:8b:d5:be:fb:f1:be:5a:8c:1e:cf:db:47:84:eb:bc:dc:
         af:d7:66:46:ca:12:22:98:8b:ae:9c:ab:e3:62:f3:cf:9d:3e:
         16:24:76:3a:40:c9:fa:27:bc:73:e2:19:1b:ad:0c:88:52:2a:
         92:06:a4:c2:f7:59:d1:f4:f3:4c:fc:9f:41:da:fc:42:80:77:
         0a:26:46:4a:39:0c:e6:8b:29:a9:a7:87:cd:29:8d:9a:b2:77:
         a9:c2:47:23:36:d5:dd:21:b8:ca:4c:3f:f7:b2:bd:a9:f6:00:
         02:4e:3f:9c:ff:7c:0a:d8:4e:77:7c:01:6c:6a:ce:1c:e4:d7:
         5e:64:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:07:41 2026 by rpki-client