Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3137302e3234342e3231362e302f32332d3233203d3e20323633343936.roa
File:                     3137302e3234342e3231362e302f32332d3233203d3e20323633343936.roa (raw, json)
Hash identifier:          NnhJ+taGjsfzzgpHycYEVUbR5x41TSx6P6HtrnVaiG4=
Subject key identifier:   B4:6A:A1:75:B2:92:31:A4:96:EF:81:5A:B7:7B:DF:5A:4F:B1:0F:E2
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       4B90CD15CEA2156F0B9BBDC15C623970FF994753
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3137302e3234342e3231362e302f32332d3233203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:35 +0000
ROA not before:           Tue 21 Jul 2026 17:27:35 +0000
ROA not after:            Tue 20 Jul 2027 17:32:35 +0000
asID:                     263496
IP address blocks:        170.244.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:90:cd:15:ce:a2:15:6f:0b:9b:bd:c1:5c:62:39:70:ff:99:47:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:35 2026 GMT
            Not After : Jul 20 17:32:35 2027 GMT
        Subject: CN=B46AA175B29231A496EF815AB77BDF5A4FB10FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:c4:78:47:11:e6:a0:d9:3b:cc:51:cb:85:
                    9b:1f:f0:5a:37:20:b0:35:7e:71:f8:ac:2b:70:1a:
                    0c:83:78:eb:1a:89:c6:7d:0c:c6:1e:a0:34:48:ef:
                    57:6c:bf:8d:c4:9a:4b:30:08:90:bf:93:ad:5c:ae:
                    12:69:4a:d7:0e:5e:13:54:0f:40:19:a5:79:27:5a:
                    a1:ec:c9:63:35:67:e7:be:30:cc:f3:f6:39:e5:39:
                    3f:63:ab:cf:96:ef:37:05:ad:6b:b2:0a:ec:e8:bf:
                    5d:77:a3:d7:3b:d7:fc:33:47:03:d2:37:9f:e0:80:
                    b3:73:3e:72:09:7b:3f:7c:12:d0:55:59:ca:82:c7:
                    9c:ae:c1:97:5a:18:00:5a:ef:48:0a:76:eb:92:14:
                    d9:ad:e4:27:4d:3c:34:59:9c:72:e8:fa:8d:b4:5c:
                    f8:c7:b8:fd:79:48:88:38:ff:d0:b7:01:1c:15:6a:
                    36:a3:79:7a:75:ff:a4:ca:94:a4:b9:3a:15:20:87:
                    37:78:60:a3:3a:e6:3a:9d:6f:6e:cc:87:1d:00:62:
                    e3:21:7e:a2:71:c2:83:e9:f0:70:00:de:50:c8:3e:
                    65:cb:e3:1e:b3:52:85:30:96:09:e7:07:56:4b:81:
                    44:b0:8e:e0:70:a8:d9:17:40:0f:08:d9:73:19:06:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:A1:75:B2:92:31:A4:96:EF:81:5A:B7:7B:DF:5A:4F:B1:0F:E2
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3137302e3234342e3231362e302f32332d3233203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:d1:2a:05:9b:84:b6:09:fd:6b:1a:47:6e:50:cb:7e:3b:
         e4:48:f6:3c:3f:9a:3a:9b:a4:0a:76:fa:4b:d2:19:b3:5e:b8:
         56:1f:35:b2:03:0a:af:29:7b:ec:92:3c:5e:4c:db:c0:f4:ce:
         3a:58:c2:74:99:ab:89:78:10:ba:85:39:9a:f4:b3:41:04:62:
         0f:ce:85:52:fa:fe:37:f2:61:bb:27:43:57:3f:e9:38:9c:59:
         97:d4:76:9a:c6:22:1f:4b:4b:56:47:f7:cc:03:47:c5:56:6a:
         c2:67:61:43:19:4b:f7:c8:c9:c7:40:fe:be:72:e8:97:df:a7:
         3c:2f:0d:bc:1b:4d:e4:b0:68:ef:e4:5c:f0:06:c6:4d:11:29:
         91:22:ac:0e:ba:c1:74:95:2d:89:1f:48:73:62:f9:cf:3d:49:
         43:39:63:ea:4a:0b:28:df:cd:bb:10:13:5b:48:33:e2:2c:97:
         70:69:1f:1d:c7:47:71:7a:19:01:ce:f2:90:45:b4:bd:7a:3c:
         7c:2f:82:74:6c:92:1c:86:15:4e:6d:9e:05:9c:54:3d:cf:91:
         3e:b7:f8:59:9d:2f:7e:46:21:10:5f:4b:6f:de:bf:b6:2c:34:
         fa:b8:7b:4d:1a:e1:c4:27:df:86:41:35:ed:ff:ec:0d:51:24:
         38:be:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:50 2026 by rpki-client