Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3332203d3e20323636323037.roa
File:                     3137302e38302e33362e302f32322d3332203d3e20323636323037.roa (raw, json)
Hash identifier:          b10+VyTXNIAY3DdVr4Q/CsT9WoOX42xKhYaSrytMDok=
Subject key identifier:   71:7B:0D:2D:8D:5B:2F:DA:34:AF:C3:EA:88:96:5B:8B:D4:C9:2C:42
Certificate issuer:       /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Certificate serial:       57B81696B442FD27A4689FCFB9A7ED2C06C51F5C
Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3332203d3e20323636323037.roa
Signing time:             Wed 29 Apr 2026 19:06:37 +0000
ROA not before:           Wed 29 Apr 2026 19:01:37 +0000
ROA not after:            Wed 28 Apr 2027 19:06:37 +0000
asID:                     266207
IP address blocks:        170.80.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
                          rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b8:16:96:b4:42:fd:27:a4:68:9f:cf:b9:a7:ed:2c:06:c5:1f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
        Validity
            Not Before: Apr 29 19:01:37 2026 GMT
            Not After : Apr 28 19:06:37 2027 GMT
        Subject: CN=717B0D2D8D5B2FDA34AFC3EA88965B8BD4C92C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:a3:76:98:eb:f2:e9:3b:6b:0c:ff:ea:13:
                    41:05:35:e2:d0:18:ad:68:3a:5a:4b:4b:66:11:74:
                    5e:64:d0:aa:da:6c:53:49:eb:56:3a:79:1a:ed:44:
                    b9:86:73:92:17:f7:cd:3b:fb:50:80:49:4b:50:ee:
                    6e:31:e9:66:e4:75:f8:4d:73:ca:98:88:fc:b0:c1:
                    25:2a:2d:9b:a7:72:2a:81:2c:fb:8b:b2:09:d4:26:
                    64:75:0c:a0:fc:e7:06:87:7e:39:da:9b:60:1e:22:
                    65:ef:f7:37:7b:67:2c:c0:32:c1:57:39:14:b7:9c:
                    7f:be:b0:a7:45:71:47:8e:83:6c:67:aa:ea:21:88:
                    68:cc:ca:89:a4:eb:42:0f:19:91:df:70:db:fb:02:
                    6d:6d:46:13:2b:0a:36:2d:4a:63:cd:4b:55:a1:79:
                    32:da:aa:f1:86:c9:30:db:68:7b:10:e2:b3:a9:ed:
                    fb:e8:f4:c5:c9:07:cc:ba:77:81:75:c4:17:cf:5f:
                    6c:73:55:ad:dd:00:5a:4a:b6:fa:65:4f:b9:d9:a1:
                    30:d5:64:20:79:5a:00:4d:3e:ee:1d:84:46:0e:12:
                    c7:37:30:8b:91:f0:32:4b:8d:4c:29:e1:0a:96:61:
                    a2:84:65:56:27:14:9f:ba:fd:f5:17:4c:3b:ee:a3:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:0D:2D:8D:5B:2F:DA:34:AF:C3:EA:88:96:5B:8B:D4:C9:2C:42
            X509v3 Authority Key Identifier:
                keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/3137302e38302e33362e302f32322d3332203d3e20323636323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:89:23:dc:ff:78:a3:45:48:52:3a:0d:fc:eb:c9:0f:1d:e3:
         e7:87:59:7c:cb:e5:f0:8e:8e:b0:3d:e1:68:f2:4a:40:03:b2:
         99:f6:8e:6e:aa:a8:9c:2b:77:02:6b:e8:dc:81:56:a4:06:a3:
         bf:39:1e:18:e2:15:5e:3d:84:8d:eb:35:46:f5:ec:4c:b5:69:
         e9:2f:d0:e6:67:31:3d:8f:82:cd:e4:ed:e3:bb:b9:21:7c:8a:
         fd:33:d9:c0:f7:64:b1:10:bc:cb:73:c6:74:79:aa:b0:71:7c:
         79:5f:1f:c4:cb:9c:dd:d4:73:6f:ff:91:b9:14:68:d7:52:ed:
         08:d6:a8:b5:53:58:85:8f:ef:24:0a:b1:c3:20:3e:91:58:ec:
         a5:f3:32:28:0a:95:a7:2a:0e:97:42:f1:3f:ed:e7:41:9d:39:
         27:c5:9b:c1:d0:24:9f:23:70:a3:16:d7:7c:3e:c7:9e:e6:3d:
         3b:15:0f:d5:4a:02:82:71:3b:ba:cf:45:97:71:93:c2:04:93:
         78:84:dd:01:b6:f5:f5:c0:ab:e5:c0:ae:40:f0:17:25:98:9a:
         09:c8:9f:83:e7:81:9c:0b:1b:19:53:4c:3e:17:62:83:5d:85:
         2c:7e:fc:1b:8e:4c:37:d0:11:c1:05:71:24:08:ea:c7:0b:16:
         6d:19:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:35:10 2026 by rpki-client