Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32342d3234203d3e20323634393532.roa
File:                     3137302e3234372e33342e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          fhimbP0JPMFJ6oX3lY4Mz4iLLyD19EaT2GZXEN4P52k=
Subject key identifier:   9F:17:C2:7B:AE:65:86:36:AF:00:6C:19:B7:1B:89:23:91:FA:2F:B7
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       6FF932AAFBCC3E3E6F218A7FD340C22ABD3DAD87
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 03 Mar 2026 15:49:26 +0000
ROA not before:           Tue 03 Mar 2026 15:44:26 +0000
ROA not after:            Tue 02 Mar 2027 15:49:26 +0000
asID:                     264952
IP address blocks:        170.247.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:32:aa:fb:cc:3e:3e:6f:21:8a:7f:d3:40:c2:2a:bd:3d:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Mar  3 15:44:26 2026 GMT
            Not After : Mar  2 15:49:26 2027 GMT
        Subject: CN=9F17C27BAE658636AF006C19B71B892391FA2FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:a3:c0:b8:32:2a:19:16:4a:65:1c:c9:bc:
                    87:7a:34:32:9c:94:8b:6f:c7:10:03:0a:ba:ec:6a:
                    f4:63:01:7e:d4:cd:23:7e:60:ab:7b:e1:1b:48:28:
                    72:11:db:d3:48:05:df:92:58:d2:52:ab:26:5f:e2:
                    1f:47:c1:6a:30:99:a5:d6:5c:a9:17:f9:d4:f3:b5:
                    56:ee:1d:10:c0:17:29:ce:93:49:fa:54:a2:6b:89:
                    d7:08:68:a6:98:b2:de:40:81:a0:cf:92:65:62:b0:
                    7b:27:a6:a9:3d:c1:fe:44:49:0d:ac:ff:cf:9c:93:
                    b7:07:ec:28:73:a4:93:13:81:3b:63:34:d2:0c:25:
                    b8:bb:1f:08:c1:ee:d1:17:9c:d3:0a:24:8d:46:dc:
                    c5:8f:3d:69:45:18:43:95:ff:d4:67:bd:db:5e:81:
                    57:0b:98:89:37:ee:d5:ff:15:59:9d:6c:fd:60:93:
                    02:b2:f6:9a:1e:4b:7d:1a:38:79:a8:60:c9:e2:e3:
                    99:ef:7b:b5:71:d9:ca:c8:61:d2:a2:8f:ca:d4:f9:
                    23:0a:58:d8:c1:dc:6d:f0:0c:70:30:53:2f:4c:3e:
                    d8:27:b8:74:05:fd:c4:b0:d1:a7:46:62:47:09:cf:
                    c8:ef:0c:2b:f4:32:43:24:9b:c7:69:c2:45:f1:81:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:C2:7B:AE:65:86:36:AF:00:6C:19:B7:1B:89:23:91:FA:2F:B7
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33342e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:30:bb:6f:f7:3e:64:ac:7d:90:19:bd:cd:ee:a3:cc:4f:
         0b:27:7f:1e:5d:09:6d:07:fe:70:1b:55:ac:14:74:d6:ef:a8:
         ca:b9:97:0e:51:9b:9c:f1:05:ff:28:0c:ec:d4:c8:0c:3b:64:
         da:d4:fe:4b:ad:24:22:81:fa:29:f1:4a:0c:b0:e0:e2:fa:41:
         7f:27:a0:99:4a:2a:6e:d3:e6:90:fb:37:77:2e:37:46:8f:24:
         ed:85:98:7e:75:d9:c5:a0:a7:84:5e:fa:2d:15:07:b9:dd:52:
         f0:8c:cc:eb:7c:57:3d:ab:9f:74:27:82:1a:00:91:33:61:11:
         a3:9e:21:ce:44:ca:95:10:9c:e3:bc:4e:50:a9:e9:5d:75:eb:
         60:29:7c:9d:00:fb:b8:7a:fb:30:2d:5c:7d:91:1e:d7:17:ab:
         4a:84:50:d1:d3:b5:93:89:15:8e:4b:b1:dc:ad:94:02:61:a8:
         bf:81:dc:58:2a:3e:4e:79:8e:e6:c7:7d:0a:d4:a7:a2:3e:6c:
         21:fb:c4:07:74:cb:2f:44:f2:7f:aa:ad:ef:c0:a0:47:11:fc:
         d1:df:d8:00:f1:49:9a:4d:b6:74:58:20:ad:c4:0e:05:5d:5c:
         81:c4:3d:df:31:95:1a:4c:a8:76:b6:8b:eb:a8:81:5c:99:ff:
         58:76:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:52 2026 by rpki-client