Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          aJmS2FoAD0YPSengMGVV6F7EHffuke/LZY7SEZA4IQk=
Subject key identifier:   05:97:61:59:FA:97:74:54:B6:45:B6:6A:B3:C2:16:BA:90:38:33:B2
Certificate issuer:       /CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
Certificate serial:       06F4D13939E4EC4F9BC4016D7050EEA902A78C6E
Authority key identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time:             Fri 10 Jul 2026 14:39:59 +0000
ROA not before:           Fri 10 Jul 2026 14:34:59 +0000
ROA not after:            Fri 09 Jul 2027 14:39:59 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f4:d1:39:39:e4:ec:4f:9b:c4:01:6d:70:50:ee:a9:02:a7:8c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
        Validity
            Not Before: Jul 10 14:34:59 2026 GMT
            Not After : Jul  9 14:39:59 2027 GMT
        Subject: CN=05976159FA977454B645B66AB3C216BA903833B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:f4:72:33:2a:82:6e:22:cf:84:75:d9:61:
                    5e:09:9b:e0:24:c5:f2:5a:d8:7c:a8:76:c8:db:0d:
                    d5:cd:87:73:63:31:3a:cd:8c:f1:57:a2:f2:a1:74:
                    0b:5a:90:d1:a7:e3:16:54:94:45:e7:e5:92:e5:69:
                    7e:0a:f1:85:3f:15:9d:45:ce:a2:f0:2e:64:69:81:
                    b6:0e:e4:4c:7f:72:90:a5:6b:54:7f:73:4f:bc:95:
                    7c:da:f7:4e:b3:db:92:bc:79:0a:58:6f:c8:d4:fa:
                    6d:1b:04:8c:ee:70:57:c3:9c:35:ae:1b:6e:00:c7:
                    ea:1b:2c:ac:fc:80:d5:99:22:26:60:56:60:55:98:
                    44:76:5b:94:bd:a6:a8:33:0f:fc:e2:1d:e8:ce:16:
                    38:1e:47:48:48:5c:14:8c:4a:fe:fe:d3:90:20:30:
                    c5:7a:4b:3c:a9:22:27:3c:a3:64:f1:68:c7:26:20:
                    9a:b0:54:9b:f1:92:ac:00:a0:63:8d:a9:29:3e:8c:
                    b2:d0:e3:34:71:e2:50:17:b1:97:ba:50:b2:0e:37:
                    84:59:3a:17:03:9f:f2:8f:07:85:cc:4a:ff:63:cb:
                    19:27:1a:ac:01:63:4f:14:40:c8:9e:19:38:21:a9:
                    a5:5b:e8:3a:3a:22:3f:eb:a8:63:4a:cf:48:b0:9c:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:97:61:59:FA:97:74:54:B6:45:B6:6A:B3:C2:16:BA:90:38:33:B2
            X509v3 Authority Key Identifier:
                keyid:2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:cb:e6:23:29:23:74:67:90:b7:0c:60:5d:bf:8d:a9:2b:
         1e:d3:dd:b0:ad:55:49:a0:e9:6a:59:20:68:4e:97:b4:fd:11:
         9b:28:5c:2e:bd:c4:bb:40:f1:33:f7:81:a3:02:39:c4:3d:20:
         ba:9e:fa:77:83:94:20:4f:40:a4:e9:dc:e5:e1:10:90:0c:8c:
         c7:0e:c1:d8:ef:45:1b:35:b3:db:05:c6:c4:bc:2a:43:eb:19:
         15:e9:d3:fe:cd:62:75:8e:fc:9e:bb:cb:e2:bc:fa:b5:80:fa:
         1f:af:c6:6e:da:cc:9d:83:16:56:93:d5:11:9c:7d:d4:fd:26:
         28:04:b3:4a:12:f3:d3:11:83:7b:72:c4:b7:d8:a2:9a:f2:8d:
         5f:cb:ef:cd:73:20:0f:00:cd:9a:2f:92:6c:3b:38:d9:35:fc:
         f4:e9:6d:d7:69:63:3b:52:e2:9b:df:2d:1f:d7:28:45:62:51:
         39:ab:9e:4b:7b:7d:1d:03:40:fa:b7:03:b5:75:5e:5d:42:61:
         d7:6c:16:01:2e:82:1a:20:65:c4:63:cd:ac:04:f8:13:6d:41:
         f0:ca:9a:1f:e9:a5:2a:7e:81:73:37:69:a9:71:7d:c8:d4:50:
         86:02:68:dc:8f:5b:f9:72:c6:aa:7e:a3:1f:c3:cf:aa:b9:48:
         13:e6:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:20:58 2026 by rpki-client