Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          NtEkEBZn3VgmkL+kgVchHMmUWlzG9zLIAc5Hz+ATJ3w=
Subject key identifier:   12:50:8B:09:66:01:51:D7:A2:EE:C4:1D:37:12:DD:78:75:B7:BF:6D
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       3F8C3586CF9ECFD450FAB6F14865461DB7300710
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
Signing time:             Tue 24 Mar 2026 17:00:00 +0000
ROA not before:           Tue 24 Mar 2026 16:55:00 +0000
ROA not after:            Tue 23 Mar 2027 17:00:00 +0000
asID:                     271293
IP address blocks:        170.233.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8c:35:86:cf:9e:cf:d4:50:fa:b6:f1:48:65:46:1d:b7:30:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Mar 24 16:55:00 2026 GMT
            Not After : Mar 23 17:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:77:41:5e:de:fd:ae:65:a8:b9:59:d3:ae:
                    59:f8:2a:ff:e5:82:19:1b:b9:69:9e:c1:6c:19:20:
                    11:ba:18:52:b8:15:90:8c:8c:02:92:7c:13:c7:b5:
                    09:5d:06:b8:d9:36:c1:34:83:1d:58:ad:b6:87:92:
                    b7:9d:b4:00:78:98:ec:32:92:e6:18:91:7e:73:1e:
                    39:56:73:69:66:b9:34:78:dd:f6:03:d0:21:9d:54:
                    a5:9b:f2:a7:cd:b5:e5:06:d7:80:8a:93:3a:7e:be:
                    84:de:f6:80:b6:cc:77:8a:b9:a2:ec:6a:50:62:2f:
                    33:b6:be:74:00:c1:ea:8e:d7:97:d4:4c:66:b4:64:
                    21:a6:11:5b:b5:dd:ca:c3:7f:f5:85:e3:96:9a:62:
                    4a:b6:19:ef:8d:25:b1:ab:2b:48:3a:da:29:17:63:
                    e9:c1:d1:5a:8f:04:df:35:fc:04:7a:70:fc:49:ed:
                    a7:df:2b:ad:a1:85:1b:83:74:c8:a5:62:02:db:d7:
                    a6:1b:bb:f3:f1:c3:60:6f:b9:a5:52:45:51:32:36:
                    5e:1c:03:bd:ab:fd:3b:e3:0a:7c:ad:93:ad:45:c1:
                    0b:cd:d5:5d:6c:b7:27:8f:da:79:09:b7:41:01:9b:
                    52:30:aa:21:9a:00:aa:72:46:a0:42:29:a1:cd:63:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:8B:09:66:01:51:D7:A2:EE:C4:1D:37:12:DD:78:75:B7:BF:6D
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:a3:ae:94:ad:84:1b:61:4a:a4:71:06:da:f2:e7:ca:5e:
         1e:cd:f1:9f:96:03:39:91:35:42:b0:6a:d5:19:7e:fe:e1:b4:
         5a:2f:39:69:70:85:0d:1f:85:8e:d0:cd:d3:6c:5b:4b:35:6e:
         4e:76:c2:60:cd:31:ac:cf:a8:5c:20:6e:46:4a:ce:37:44:ed:
         73:fc:fb:2c:e2:41:bf:18:82:9b:77:c2:b4:58:6f:9f:92:56:
         80:3b:af:77:e9:47:17:5b:c5:d5:fb:ff:13:c5:34:05:04:ac:
         d1:7a:d2:1e:68:dd:8d:16:c0:b9:c9:57:eb:6c:f8:0a:4b:25:
         37:a3:ea:c3:b8:61:ae:f4:6e:83:e4:cc:2f:2d:96:57:01:42:
         24:a7:ee:6b:96:48:9b:8d:52:24:f9:3a:50:48:de:dc:6b:57:
         87:aa:21:36:20:15:ed:87:c7:19:2e:08:46:55:33:d6:a7:19:
         44:9c:cf:50:e3:53:06:5e:95:10:98:d1:5f:aa:db:cd:52:3b:
         b4:88:c4:25:65:e6:da:66:df:c5:56:c2:d3:3e:c6:8d:b6:7d:
         b8:a3:3c:e3:c4:99:30:df:d7:13:8e:c2:ec:6f:72:a8:0d:75:
         c0:ed:3f:65:38:38:91:22:fd:3a:48:f8:52:77:bc:80:b7:7c:
         f6:5f:7d:9e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUP4w1hs+ez9RQ+rbxSGVGHbcwBxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1M0M0RDU1NjhEMjBCMDkxOUMyRTI5ODA0RTJGNDk4
M0JDRkRGMzAeFw0yNjAzMjQxNjU1MDBaFw0yNzAzMjMxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgwQTc3NDE1RURFRkRBRTY1
QThCOTU5RDNBRTU5RjgyQUZGRTU4MjE5MUJCOTY5OUVDMTZDMTkyMDExQkExODUy
QjgxNTkwOEM4QzAyOTI3QzEzQzdCNTA5NUQwNkI4RDkzNkMxMzQ4MzFENThBREI2
ODc5MkI3OURCNDAwNzg5OEVDMzI5MkU2MTg5MTdFNzMxRTM5NTY3MzY5NjZCOTM0
NzhEREY2MDNEMDIxOUQ1NEE1OUJGMkE3Q0RCNUU1MDZENzgwOEE5MzNBN0VCRTg0
REVGNjgwQjZDQzc3OEFCOUEyRUM2QTUwNjIyRjMzQjZCRTc0MDBDMUVBOEVENzk3
RDQ0QzY2QjQ2NDIxQTYxMTVCQjVERENBQzM3RkY1ODVFMzk2OUE2MjRBQjYxOUVG
OEQyNUIxQUIyQjQ4M0FEQTI5MTc2M0U5QzFEMTVBOEYwNERGMzVGQzA0N0E3MEZD
NDlFREE3REYyQkFEQTE4NTFCODM3NEM4QTU2MjAyREJEN0E2MUJCQkYzRjFDMzYw
NkZCOUE1NTI0NTUxMzIzNjVFMUMwM0JEQUJGRDNCRTMwQTdDQUQ5M0FENDVDMTBC
Q0RENTVENkNCNzI3OEZEQTc5MDlCNzQxMDE5QjUyMzBBQTIxOUEwMEFBNzI0NkEw
NDIyOUExQ0Q2MzZBRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyAp3QV7e/a5lqLlZ065Z+Cr/5YIZG7lpnsFsGSARuhhSuBWQjIwC
knwTx7UJXQa42TbBNIMdWK22h5K3nbQAeJjsMpLmGJF+cx45VnNpZrk0eN32A9Ah
nVSlm/KnzbXlBteAipM6fr6E3vaAtsx3irmi7GpQYi8ztr50AMHqjteX1ExmtGQh
phFbtd3Kw3/1heOWmmJKthnvjSWxqytIOtopF2PpwdFajwTfNfwEenD8Se2n3yut
oYUbg3TIpWIC29emG7vz8cNgb7mlUkVRMjZeHAO9q/074wp8rZOtRcELzdVdbLcn
j9p5CbdBAZtSMKohmgCqckagQimhzWNq/QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FBJQiwlmAVHXou7EHTcS3Xh1t79tMB8GA1UdIwQYMBaAFNhTxNVWjSCwkZwuKYBO
L0mDvP3zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VwcFRkalAzZnZTQ1R0
eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzAvRDg1M0M0RDU1NjhEMjBC
MDkxOUMyRTI5ODA0RTJGNDk4M0JDRkRGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EODUzQzRENTU2OEQyMEIwOTE5QzJFMjk4MDRFMkY0OTgzQkNG
REYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FcHBUZGpQM2Z2U0NUdHlKWU5l
dVBwVGFVcjJnMjNBVUh4bzR3MzJndWNYOC8wLzMxMzczMDJlMzIzMzMzMmUzMjM0
MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3MzEzMjM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq6fAwDQYJKoZIhvcNAQELBQADggEBAFTko66UrYQbYUqkcQba8ufKXh7N8Z+W
AzmRNUKwatUZfv7htFovOWlwhQ0fhY7QzdNsW0s1bk52wmDNMazPqFwgbkZKzjdE
7XP8+yziQb8Ygpt3wrRYb5+SVoA7r3fpRxdbxdX7/xPFNAUErNF60h5o3Y0WwLnJ
V+ts+ApLJTej6sO4Ya70boPkzC8tllcBQiSn7muWSJuNUiT5OlBI3txrV4eqITYg
Fe2HxxkuCEZVM9anGUScz1DjUwZelRCY0V+q281SO7SIxCVl5tpm38VWwtM+xo22
fbijPOPEmTDf1xOOwuxvcqgNdcDtP2U4OJEi/TpI+FJ3vIC3fPZffZ4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:09 2026 by rpki-client