Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa
File:                     3137302e3234372e38302e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          DR6khs2yYiAw+BcFOk9CPax2Iju8DOP9E+gc5BpfsVI=
Subject key identifier:   17:8A:EE:CB:F4:DC:95:7A:5A:75:62:59:F6:7B:EC:39:95:86:02:3B
Certificate issuer:       /CN=B3516EB774935A87013A509DC395B99B1CF2E06E
Certificate serial:       491EAB033A6291D1F8CB92BA08DD0C7607DAFF93
Authority key identifier: B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 19 Mar 2026 19:40:37 +0000
ROA not before:           Thu 19 Mar 2026 19:35:37 +0000
ROA not after:            Thu 18 Mar 2027 19:40:37 +0000
asID:                     61805
IP address blocks:        170.247.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 07:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1e:ab:03:3a:62:91:d1:f8:cb:92:ba:08:dd:0c:76:07:da:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3516EB774935A87013A509DC395B99B1CF2E06E
        Validity
            Not Before: Mar 19 19:35:37 2026 GMT
            Not After : Mar 18 19:40:37 2027 GMT
        Subject: CN=178AEECBF4DC957A5A756259F67BEC399586023B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:b8:02:bb:4c:fc:10:77:e6:06:65:c4:d6:
                    52:1c:26:34:11:39:7d:24:63:cc:1f:11:5e:8e:83:
                    66:cf:01:01:1e:48:17:43:72:55:1f:92:b5:5a:7f:
                    12:b9:a5:16:a0:ca:60:15:7a:6d:ac:35:db:da:0c:
                    d7:db:9a:7b:db:b6:42:b0:0b:e1:f3:6f:8d:ac:60:
                    69:cb:6d:2c:7a:45:93:b3:3f:fd:38:8a:f7:f6:4b:
                    e7:09:b2:fc:68:73:21:9c:10:ff:2e:25:68:a0:a2:
                    f7:ce:a6:60:88:ec:67:fd:f3:fc:9d:93:48:bd:0c:
                    5c:a4:d8:52:6a:c3:e4:f3:92:3f:b0:85:9d:e9:a7:
                    10:8f:aa:7b:b5:17:ba:81:30:d7:43:55:87:db:df:
                    cd:2c:71:94:51:43:14:46:0f:32:f1:82:9b:27:7e:
                    56:24:4a:eb:3a:d7:57:0f:4e:a7:4e:4e:ab:43:8b:
                    93:35:b0:d7:1c:d1:61:3d:53:7b:18:a9:b4:a6:a4:
                    ba:93:c4:35:f5:c4:8b:a2:dc:27:01:10:ff:c6:ea:
                    f3:99:dc:d2:24:37:a5:17:77:64:61:d8:f7:02:b7:
                    65:cf:d6:2f:c6:fc:22:a6:6f:1f:4b:37:9f:ca:3a:
                    d0:a9:cf:9f:13:7f:e4:d5:05:9d:2b:96:85:db:4a:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8A:EE:CB:F4:DC:95:7A:5A:75:62:59:F6:7B:EC:39:95:86:02:3B
            X509v3 Authority Key Identifier:
                keyid:B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:30:b0:cf:5b:e3:1d:de:80:68:69:bb:aa:7d:7c:a6:8e:
         ce:d9:ed:3a:5d:86:05:40:88:40:53:a5:50:37:40:76:9b:3b:
         99:ea:0a:49:ad:78:a3:bf:49:0d:df:f1:d7:84:5d:a5:7f:b4:
         07:da:83:02:69:b0:e5:16:fc:2d:c9:56:02:42:46:9c:94:4d:
         7c:86:c1:9a:3d:1a:b6:2a:06:58:22:e5:4b:b2:a9:4e:7e:fc:
         d8:47:97:01:a1:7b:41:4c:e8:e7:9e:d2:10:4a:f3:3f:34:06:
         e2:8f:e7:d3:9a:69:df:fa:51:b1:97:67:69:f2:73:2e:d1:6b:
         f2:b9:b6:42:5f:03:02:f1:3b:69:e3:c0:e1:c0:b3:b2:92:34:
         ba:11:43:29:44:55:97:62:2c:2a:17:2f:5c:b8:1e:8c:2d:62:
         31:d0:5c:b7:1f:29:7d:df:50:ac:b0:fe:4a:5e:94:06:c4:9b:
         98:f8:97:8c:fc:48:8a:f9:13:5b:68:3d:53:35:11:a3:0c:cd:
         04:ab:2f:1e:3a:3e:1d:55:10:d7:54:58:5f:74:bc:fa:4e:b7:
         1b:79:78:c5:c4:01:31:1f:6b:23:89:d4:97:dd:f1:0e:88:2d:
         07:b5:38:44:df:35:be:cc:07:62:db:12:69:04:ff:b7:1e:39:
         8b:d6:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:53:24 2026 by rpki-client