Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
File:                     3137302e38342e32342e302f32322d3332203d3e20323635303239.roa (raw, json)
Hash identifier:          CuxwWvFG6HGFPq4zcbLrQSh8ZFMlJS9x0lk9TihndtA=
Subject key identifier:   EC:64:DA:58:9B:82:29:EE:0E:48:45:5D:42:C7:5C:15:B3:51:FC:30
Certificate issuer:       /CN=391282C4F59DDE74999B174E8FDB2EB861BF7A8C
Certificate serial:       63027883AA70BED34E768445AF83BD17929B7232
Authority key identifier: 39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
Signing time:             Wed 18 Mar 2026 18:36:54 +0000
ROA not before:           Wed 18 Mar 2026 18:31:54 +0000
ROA not after:            Wed 17 Mar 2027 18:36:54 +0000
asID:                     265029
IP address blocks:        170.84.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:02:78:83:aa:70:be:d3:4e:76:84:45:af:83:bd:17:92:9b:72:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391282C4F59DDE74999B174E8FDB2EB861BF7A8C
        Validity
            Not Before: Mar 18 18:31:54 2026 GMT
            Not After : Mar 17 18:36:54 2027 GMT
        Subject: CN=EC64DA589B8229EE0E48455D42C75C15B351FC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:6d:76:1c:91:91:d7:fc:17:f0:e4:4f:3d:
                    e9:54:49:b7:99:fc:49:b1:db:ba:71:27:1a:7b:a0:
                    84:7e:a3:26:bf:90:fb:aa:e9:28:23:ff:b6:86:b1:
                    31:56:af:3e:d2:3b:0c:cd:1e:05:f2:83:a5:32:8f:
                    89:20:9a:90:20:72:db:72:43:8a:25:1c:d5:1a:4b:
                    00:8e:bd:b3:0d:18:9d:d6:09:b3:8a:71:d8:9d:a0:
                    1e:15:a6:a6:10:a3:e4:49:27:35:b0:b6:e2:25:05:
                    c3:5b:09:fb:34:ba:ee:23:b4:69:c2:c1:84:a4:b2:
                    3b:b4:6b:31:8d:23:8a:aa:ff:81:68:a2:41:86:1f:
                    be:ee:88:3c:2b:50:33:05:6f:4c:5f:02:92:38:44:
                    4a:08:9d:b9:7f:46:96:1c:0f:b1:59:93:0d:d2:fd:
                    d3:81:60:a4:7d:60:be:e6:27:2c:53:bf:77:a6:11:
                    b0:37:e1:61:b4:95:c6:94:3b:ca:5f:b3:fe:fa:73:
                    ac:07:ca:ce:a7:98:36:cf:d9:5a:19:78:5d:49:93:
                    e0:f1:88:85:f1:66:f4:a3:2c:e7:0c:17:8f:4d:7f:
                    eb:60:21:87:b4:ec:0c:54:35:1d:d5:c0:a9:5a:29:
                    32:b8:b7:b9:73:1e:3a:a0:3d:19:aa:3a:72:dd:ff:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:DA:58:9B:82:29:EE:0E:48:45:5D:42:C7:5C:15:B3:51:FC:30
            X509v3 Authority Key Identifier:
                keyid:39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:ea:42:2c:9a:aa:39:2f:2b:96:a0:78:69:4c:76:17:0f:b2:
         09:ec:cb:4c:d9:dd:f2:b9:01:7e:5e:fb:b7:78:5d:7e:85:4a:
         e9:ed:d7:d6:0b:46:d8:85:5c:7b:4d:62:e6:8a:39:b3:ca:0e:
         1d:f5:96:2b:e8:7c:4a:bc:64:cb:cf:d8:3e:ce:d2:40:eb:13:
         25:36:55:a0:74:e8:05:b6:bc:cc:7d:03:f7:a4:7d:a6:b4:45:
         3d:d4:e7:95:21:91:65:41:9c:3a:58:fe:d7:80:82:52:b0:76:
         85:d8:1b:ce:f1:6a:df:4b:d8:01:04:b2:0a:23:b6:84:77:c9:
         05:1c:13:e5:e9:af:17:7c:80:4b:90:7f:48:64:0b:45:b8:22:
         b7:e8:de:0a:70:03:02:7f:44:62:7a:ad:27:06:ad:19:8f:a7:
         18:bc:02:53:3e:f6:33:e7:15:f2:05:c8:85:43:cf:f8:4d:f9:
         51:f5:c4:4d:33:2c:a3:34:9b:b7:2d:8c:d5:4e:aa:0f:ba:d4:
         3e:14:d7:83:a4:1d:e0:bd:17:ef:66:29:1d:98:62:b6:a9:c8:
         25:61:d2:63:50:10:a0:52:44:9f:94:21:3d:4d:bc:0d:c8:4f:
         97:8a:47:68:96:01:c0:a4:0e:6f:5c:c9:83:7f:02:99:1e:3d:
         d6:f0:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:38 2026 by rpki-client