Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          iOwLbSKGhwDyf2g8pFGWfJzUvraX8couWYyO0u1NNBE=
Subject key identifier:   79:B2:11:00:6C:44:DD:FE:62:20:8F:20:D7:8D:54:90:3E:C9:4B:1B
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       1562F85B670BD45AF0DE46C6F174EDF9024F53D1
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:22 +0000
ROA not before:           Mon 15 Jun 2026 11:51:22 +0000
ROA not after:            Mon 14 Jun 2027 11:56:22 +0000
asID:                     28182
IP address blocks:        170.231.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:62:f8:5b:67:0b:d4:5a:f0:de:46:c6:f1:74:ed:f9:02:4f:53:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:22 2026 GMT
            Not After : Jun 14 11:56:22 2027 GMT
        Subject: CN=79B211006C44DDFE62208F20D78D54903EC94B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:b4:a9:d8:89:e0:8e:d6:3c:50:f3:4f:a1:
                    4a:02:f4:ce:b9:56:63:d8:fd:60:88:28:e2:4f:8a:
                    6b:10:9a:a1:de:52:59:fa:66:60:36:07:ea:75:6b:
                    18:ea:3e:47:54:93:46:31:60:c1:b5:38:56:41:f4:
                    a6:8b:56:c1:6d:4b:e3:d9:5b:32:f5:d0:fb:78:0a:
                    5f:58:8b:d2:19:16:fa:80:0c:60:eb:73:67:be:7b:
                    2d:6a:63:6b:1a:95:c1:b0:74:eb:63:51:f6:b1:4f:
                    ca:b3:2a:a5:21:4a:c4:e0:87:a3:2b:fd:f7:4a:56:
                    a4:2f:56:04:e1:7b:17:75:47:f9:23:5f:11:53:93:
                    e4:ed:ce:7c:a8:71:68:f1:99:50:97:c0:72:82:82:
                    2a:21:84:c7:cc:fd:0a:27:41:6a:1f:71:32:5b:6e:
                    4e:58:21:24:cc:6c:6a:1d:b9:58:ab:7a:5e:f1:a8:
                    43:21:a1:bb:35:c5:39:13:5d:00:8d:d5:4d:7a:50:
                    f6:e3:16:42:9e:6a:e5:0f:7a:0d:8c:92:0a:a4:09:
                    46:73:39:7a:f5:8b:13:49:9b:63:e1:3d:21:5a:ab:
                    fa:a1:41:1b:f5:7e:83:28:8e:4f:3e:4f:47:4c:55:
                    3d:29:25:e4:52:12:b3:ba:fe:f3:ed:97:e2:22:0f:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:11:00:6C:44:DD:FE:62:20:8F:20:D7:8D:54:90:3E:C9:4B:1B
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:69:56:35:87:04:80:66:46:38:2d:e1:11:3a:97:a1:6f:75:
         8f:36:1e:a0:36:8a:10:e1:36:66:a1:2a:45:40:44:d2:92:f5:
         e7:f5:30:4b:2b:3d:22:0e:c2:a4:86:d7:3a:31:e8:8d:55:df:
         56:e6:20:74:a9:73:15:3f:1c:20:12:e0:bb:50:14:86:b8:33:
         a4:36:bd:89:06:75:24:c4:a3:f4:ab:c4:6a:08:4a:5e:34:11:
         90:04:32:a8:e8:03:70:4f:ad:c1:38:6a:49:7f:b2:05:08:c4:
         ee:41:98:c5:04:39:75:6b:de:fb:6e:aa:7f:17:32:c7:13:8b:
         55:71:f0:9a:9e:68:3c:64:39:65:25:69:e1:1c:9a:22:c4:37:
         cf:12:e0:ba:a5:e9:7a:1f:37:12:50:ad:26:aa:8b:fc:87:4a:
         94:eb:70:cc:c3:d0:3e:7e:df:ee:52:4d:f5:53:e5:fd:f0:fc:
         6d:b1:8a:72:31:25:cf:fd:09:6c:5c:8d:2e:0c:9a:9b:ba:d4:
         1b:f5:61:80:0d:48:bc:a3:fd:5b:3c:b7:6b:84:06:66:82:36:
         fa:9f:53:ee:58:a1:e2:a1:24:4a:bd:49:58:46:95:ba:86:a3:
         23:f3:05:57:86:35:cd:6e:8d:0a:fd:65:63:6b:42:db:3d:fe:
         b8:f0:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:38 2026 by rpki-client