Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa
File:                     3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa (raw, json)
Hash identifier:          litLAAhwAMY9FZ3IPV9oIofeI8f1LLoPwjCVn3A/mPc=
Subject key identifier:   78:0C:DA:3D:3B:7F:1F:B7:8F:1A:FC:CF:CA:6E:29:23:C7:D0:7F:E6
Certificate issuer:       /CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
Certificate serial:       30B0CBDD4FBCF12E320145C37D43B3BB034FE21D
Authority key identifier: E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa
Signing time:             Wed 08 Jul 2026 17:01:21 +0000
ROA not before:           Wed 08 Jul 2026 16:56:21 +0000
ROA not after:            Wed 07 Jul 2027 17:01:21 +0000
asID:                     274520
IP address blocks:        170.84.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b0:cb:dd:4f:bc:f1:2e:32:01:45:c3:7d:43:b3:bb:03:4f:e2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
        Validity
            Not Before: Jul  8 16:56:21 2026 GMT
            Not After : Jul  7 17:01:21 2027 GMT
        Subject: CN=780CDA3D3B7F1FB78F1AFCCFCA6E2923C7D07FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:21:00:28:14:47:f3:de:1d:3c:41:c0:b5:
                    58:1f:6a:a0:d9:bd:95:af:2c:d0:11:8a:ce:68:2a:
                    56:ec:e3:40:eb:7c:24:e7:bb:24:5b:60:c0:5c:b5:
                    f4:34:d7:11:05:32:8a:4e:1b:ee:63:64:a6:d5:3a:
                    20:48:4f:39:a3:33:bc:0a:5e:ea:de:e8:84:90:17:
                    47:95:c5:06:fa:03:04:7f:2c:92:02:40:da:c0:76:
                    2e:b7:3d:35:1c:49:a0:ce:65:d5:23:12:c6:a4:b4:
                    f5:d3:6b:6d:7c:b6:1b:72:6a:49:ae:23:0c:3b:92:
                    de:3f:8d:3f:8c:10:47:69:68:3c:92:2e:d3:e3:f4:
                    49:38:0b:19:ed:52:87:fa:dc:8b:67:a9:b3:50:04:
                    aa:f4:55:78:ab:de:c7:d4:03:61:4a:b3:ff:6e:2c:
                    1d:8a:46:e7:37:14:f9:6c:88:02:b0:07:c6:8b:31:
                    5f:3c:ea:d0:32:52:9c:30:f6:d6:e5:d3:b4:e5:c2:
                    57:10:08:77:73:d3:8a:0f:50:0e:ce:b4:7e:74:ce:
                    b7:90:76:69:19:c0:e6:c0:7c:d3:d1:f5:03:89:9d:
                    f2:8e:d6:bb:88:06:d0:e9:1f:63:ed:fc:56:ed:4c:
                    50:85:3c:fb:f0:2a:cd:f3:4f:e0:b9:43:fb:68:39:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0C:DA:3D:3B:7F:1F:B7:8F:1A:FC:CF:CA:6E:29:23:C7:D0:7F:E6
            X509v3 Authority Key Identifier:
                keyid:E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/3137302e38342e3136342e302f32322d3332203d3e20323734353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:09:4d:c3:90:23:f9:cd:d4:e8:86:d3:da:2a:0b:8c:94:87:
         ad:ac:cf:fe:8a:6e:fb:0d:b7:b1:9e:8e:6f:a1:5b:1e:3e:bb:
         db:cf:e6:f6:12:6d:e9:ba:a6:02:74:9f:05:ef:96:65:39:fc:
         4a:97:b8:ce:97:a1:76:2a:62:21:57:36:40:c8:42:e2:ee:a6:
         a7:c0:36:f8:11:10:78:f1:e5:57:19:bc:ad:fd:92:6c:6b:cc:
         15:25:89:d3:db:bd:0e:6b:80:4b:b0:57:b8:1b:dc:45:ce:6a:
         62:cd:b1:b4:2d:49:81:ff:79:95:32:5c:c8:8b:99:dd:3e:f5:
         d0:92:b9:1c:95:5a:56:8a:7a:73:fc:60:c1:47:a1:a5:f1:72:
         67:e8:f6:6b:1f:07:d8:84:7d:25:0f:12:06:40:97:a5:ca:31:
         f4:56:0e:7e:d4:72:88:e3:31:02:20:b0:77:62:c2:a7:d9:f2:
         d4:0a:fe:13:64:6d:39:05:72:a4:8a:04:13:fe:47:21:99:ac:
         18:a0:1b:50:d7:db:d0:01:a0:37:31:4d:c5:21:8f:80:2a:47:
         43:07:d8:9d:04:25:05:f0:81:dd:53:78:cc:e4:46:81:d4:3f:
         a8:3f:f2:73:b2:28:e7:af:92:f5:24:e6:a1:b8:14:04:a4:44:
         a7:da:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:01:07 2026 by rpki-client