Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          tRwIje8P3MFPuKzpoQGS+mE+7N/Zb4gL7KgTWBM6oCo=
Subject key identifier:   F5:EE:76:35:83:D5:70:FC:D2:7A:FD:18:83:19:C5:54:DC:37:1A:74
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       57955B885EB5EF0A2B6460759041EAA440AC5052
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:09 +0000
ROA not before:           Mon 15 Jun 2026 11:51:09 +0000
ROA not after:            Mon 14 Jun 2027 11:56:09 +0000
asID:                     28182
IP address blocks:        170.231.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:95:5b:88:5e:b5:ef:0a:2b:64:60:75:90:41:ea:a4:40:ac:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:09 2026 GMT
            Not After : Jun 14 11:56:09 2027 GMT
        Subject: CN=F5EE763583D570FCD27AFD188319C554DC371A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:46:bf:43:38:c0:7f:86:83:37:cb:4d:63:
                    0e:e4:f7:ca:09:fe:b4:83:39:08:e8:35:23:7e:53:
                    ca:64:0c:88:6f:50:eb:20:f7:ad:6b:eb:2a:36:c4:
                    12:c7:96:e3:e8:21:cc:93:42:58:3c:f0:c3:44:3f:
                    5c:31:c3:8b:e2:8b:84:e7:23:dd:35:e8:43:45:b9:
                    fc:61:79:e6:38:ae:2a:9c:38:ee:e8:7d:20:b4:4b:
                    d4:b6:94:81:9d:54:d0:b8:23:62:6a:3e:2f:fe:46:
                    6a:51:86:33:d1:16:74:3f:4e:f1:9b:c0:e9:e5:3a:
                    c3:95:b4:ee:63:f9:ef:8c:19:c4:12:31:94:27:34:
                    d2:c7:ae:c4:c2:32:36:a3:dc:b9:92:66:7a:93:7c:
                    b6:10:98:92:06:c8:79:81:b8:14:0b:e3:0f:8f:55:
                    bb:59:f9:87:19:c4:88:c6:bf:64:60:37:a9:50:55:
                    4c:d6:97:ef:d7:05:3e:b1:07:35:fb:b5:1f:f7:db:
                    85:83:f3:64:fd:95:cd:89:d3:9d:02:0c:c7:1d:9c:
                    ca:28:dc:4a:de:8f:72:75:72:a4:1f:8d:c7:61:c2:
                    dc:64:b5:df:6e:80:cb:62:f4:59:40:3b:29:84:ff:
                    0b:03:6d:0a:09:35:02:fa:e9:ab:6c:a1:c6:33:f2:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:76:35:83:D5:70:FC:D2:7A:FD:18:83:19:C5:54:DC:37:1A:74
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:96:ca:de:fc:a9:26:31:45:f2:f0:8c:78:03:68:7d:bf:73:
         f1:35:95:29:95:32:6a:5d:46:be:1f:80:21:c2:60:70:70:c5:
         11:a4:70:63:81:4f:b7:ec:5b:88:9c:be:b2:3e:9f:c4:f7:23:
         06:ed:24:18:19:29:5d:18:37:cb:81:94:4b:77:fd:38:a9:54:
         f9:c3:d7:9d:55:c4:04:77:e7:98:37:78:27:d8:ed:66:a0:49:
         2d:d2:60:f8:e1:75:8f:f9:5e:f9:33:7d:06:f7:81:22:d8:2e:
         0c:37:06:3c:23:b1:bc:57:a4:c9:9c:23:7a:30:02:f0:c2:37:
         e3:61:7e:0f:98:f9:cd:f1:00:c4:14:97:ce:10:cd:35:84:04:
         9a:e1:c4:e6:bb:83:de:e9:c4:9c:39:e0:28:a8:d3:90:f6:bb:
         4d:f1:8f:7c:2b:eb:0d:5f:07:97:7b:d3:93:ae:3a:4a:de:89:
         fd:3e:5f:3d:87:c8:27:eb:f1:b0:26:1d:0e:ed:6f:5f:8d:b3:
         54:74:43:ad:7a:07:c6:6a:a5:b5:d9:f3:95:6d:36:77:7a:e3:
         b7:07:55:f5:cf:f4:6f:96:dd:b9:7a:92:dc:92:f2:0a:ed:88:
         5d:04:4d:e5:c8:fd:c7:6c:50:f8:09:13:4d:b6:22:fa:37:1b:
         68:52:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:16:24 2026 by rpki-client