Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3233203d3e20323632353838.roa
File:                     3137302e38322e3230342e302f32332d3233203d3e20323632353838.roa (raw, json)
Hash identifier:          qNaqyyxWXczI11bS1yZTvDx9bUJhRAeyHOi36sLqiok=
Subject key identifier:   30:DC:02:59:5B:86:60:61:F7:02:6C:50:16:12:71:2C:D9:BE:8C:68
Certificate issuer:       /CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056
Certificate serial:       20015A707072632B53A2AB68E186A67D8F69C808
Authority key identifier: 12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3233203d3e20323632353838.roa
Signing time:             Thu 26 Mar 2026 14:39:10 +0000
ROA not before:           Thu 26 Mar 2026 14:34:10 +0000
ROA not after:            Thu 25 Mar 2027 14:39:10 +0000
asID:                     262588
IP address blocks:        170.82.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:01:5a:70:70:72:63:2b:53:a2:ab:68:e1:86:a6:7d:8f:69:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056
        Validity
            Not Before: Mar 26 14:34:10 2026 GMT
            Not After : Mar 25 14:39:10 2027 GMT
        Subject: CN=30DC02595B866061F7026C501612712CD9BE8C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:2d:f8:ce:06:7e:39:d6:5f:40:e4:b5:1a:
                    52:d8:54:21:5c:75:cb:89:ed:64:9c:60:cd:3a:8d:
                    5e:4d:e2:07:6c:65:86:a5:1b:10:84:45:cf:68:59:
                    37:64:24:87:6a:ca:72:0f:a6:98:7a:b6:5c:88:69:
                    77:14:df:19:4e:d1:52:35:90:79:9e:db:e7:d4:fd:
                    6d:42:8c:a8:72:4f:93:e8:b9:1d:5f:18:8b:d4:b5:
                    77:4c:1d:40:98:ba:1e:d5:47:b5:1c:53:ea:53:7a:
                    f5:ec:0f:be:57:90:e6:d9:63:b4:fe:85:9d:a7:51:
                    e4:bc:bc:eb:34:a8:af:bb:ca:0b:52:65:8b:56:12:
                    78:a9:ee:df:e7:7c:33:79:d0:84:c4:25:eb:8e:f9:
                    cd:01:ea:bf:27:92:c1:04:3e:80:5b:86:4d:14:9e:
                    68:e8:c5:2c:b3:26:d4:64:79:3f:cd:ce:b8:a5:3e:
                    57:75:90:8b:2e:b1:47:b0:39:2d:a2:9b:c9:43:dc:
                    b7:06:97:04:ed:2f:4e:56:c9:f4:a3:d8:68:b6:8b:
                    7c:40:9c:ab:27:eb:28:5f:5e:f7:c7:28:41:42:d0:
                    1a:6f:cd:5b:7b:2c:68:0e:19:ca:ac:04:34:d4:b6:
                    3b:d6:ae:8e:17:0a:83:53:65:d1:74:a9:a5:60:86:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DC:02:59:5B:86:60:61:F7:02:6C:50:16:12:71:2C:D9:BE:8C:68
            X509v3 Authority Key Identifier:
                keyid:12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230342e302f32332d3233203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:94:75:1c:14:19:29:b9:1b:30:0a:a6:c5:3f:50:6e:ac:e7:
         80:f9:e5:ae:d1:39:d4:90:b7:f1:e8:5f:3a:88:e2:29:a6:09:
         be:01:d3:de:a9:0a:a6:da:14:0d:d6:67:9c:90:b4:bc:ad:d9:
         3b:76:f9:02:6e:5c:f4:fe:81:15:91:29:17:de:12:24:00:0e:
         96:e2:ac:0a:0e:b4:2a:f6:65:a2:9f:62:b3:4a:94:31:df:49:
         99:d3:f2:dc:dc:21:94:2e:e5:56:a6:ed:2c:9c:ae:98:ae:78:
         15:49:6b:a4:2c:17:94:54:42:9f:8d:7a:cb:b7:7b:16:c0:6f:
         76:04:7e:e7:0b:8d:48:ef:41:bc:27:82:f9:e5:0b:d7:f4:0d:
         a7:90:1b:bb:de:db:69:a5:66:c7:9a:8a:b4:d1:90:0f:01:29:
         a7:c7:20:54:e1:4c:26:91:41:30:7a:bb:13:22:5c:73:48:e5:
         58:f7:de:0e:8f:53:7b:f8:b9:31:ed:d1:a4:ac:23:0a:04:cd:
         77:84:a4:e0:63:0d:91:30:ab:65:81:67:f0:66:6f:af:bb:91:
         62:d9:9c:0d:c1:d9:f4:84:d2:db:1b:b0:98:d7:1e:4b:0f:b9:
         c9:2b:13:d1:c1:b5:57:99:b3:b4:c5:3f:f9:32:73:9f:36:98:
         3f:f0:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:05:56 2026 by rpki-client