Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa
File:                     3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          8YhFhqR9vL15aM2pGsbm1HScu9GEWvIzf47EatMAXnk=
Subject key identifier:   43:8C:1E:ED:DF:1C:95:50:20:0A:13:C3:0D:23:15:5C:F3:63:C9:80
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       11970DC92056022C6CC97F026D703BFBBD6F4469
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 03 Mar 2026 15:49:26 +0000
ROA not before:           Tue 03 Mar 2026 15:44:26 +0000
ROA not after:            Tue 02 Mar 2027 15:49:26 +0000
asID:                     264952
IP address blocks:        170.247.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:0d:c9:20:56:02:2c:6c:c9:7f:02:6d:70:3b:fb:bd:6f:44:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Mar  3 15:44:26 2026 GMT
            Not After : Mar  2 15:49:26 2027 GMT
        Subject: CN=438C1EEDDF1C9550200A13C30D23155CF363C980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:e7:3f:21:5c:04:a9:31:3f:fc:a8:e9:0c:
                    88:47:cc:53:cc:55:d8:f0:49:2a:f7:23:92:e3:8f:
                    a7:bd:2e:f2:14:0e:7d:ef:36:34:ed:09:b4:4e:66:
                    37:fc:25:3d:78:d1:83:35:9c:1e:1a:33:a0:08:8d:
                    88:e4:97:2f:c4:b7:3c:91:49:76:cd:ad:48:37:69:
                    39:c4:99:96:b2:1f:15:49:2c:5f:2c:a7:7d:f1:50:
                    3c:33:4d:e6:e5:e1:5a:ff:55:f6:89:55:fa:8b:58:
                    2c:31:ef:15:b3:7f:c1:01:23:36:ea:17:42:8a:be:
                    01:ff:04:d3:2b:11:07:90:b3:ed:f2:a8:c5:1e:7f:
                    a9:e9:9b:5b:92:7b:75:73:36:0a:63:bf:c9:48:27:
                    35:8d:9b:c6:e0:dc:b4:ee:db:56:ac:11:67:cc:43:
                    bb:c2:6d:23:46:e8:4e:bb:a5:70:d7:96:86:60:c5:
                    e0:2a:3b:44:46:b6:da:ac:40:09:87:af:b6:a4:8f:
                    57:6e:49:2c:88:1e:32:83:73:c6:ae:7f:04:c6:02:
                    a0:b0:d3:3b:c2:56:ed:2d:e9:03:69:8b:08:c1:bf:
                    2f:8c:a9:c7:d5:14:e2:5c:23:da:88:20:d5:f9:84:
                    da:8e:57:8a:f1:92:b8:c1:f0:9b:46:87:c3:aa:da:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8C:1E:ED:DF:1C:95:50:20:0A:13:C3:0D:23:15:5C:F3:63:C9:80
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:95:75:47:7b:a8:e9:39:3f:9b:e2:31:1a:fb:57:54:56:
         64:ae:78:89:64:c8:70:8b:c6:4b:34:a8:cb:a2:39:6b:6b:13:
         c6:a6:11:56:09:b1:d3:b5:49:39:cb:b1:3b:f9:17:38:f3:e1:
         a2:5f:fe:6b:99:ce:d8:6d:88:44:67:1e:af:ca:65:49:c1:dd:
         92:1c:c7:47:44:73:d1:39:f9:c6:38:b6:95:35:68:6e:d5:f0:
         f3:02:38:0c:3b:58:1c:ae:e7:21:f0:68:62:a0:4e:9f:aa:79:
         5f:48:76:0b:d7:c3:d5:f8:20:2f:c5:a3:38:cb:74:25:af:01:
         b6:22:2e:25:da:77:71:69:9e:29:0a:bd:a4:b6:e2:4f:53:00:
         25:49:63:cf:79:78:27:56:64:5d:cb:55:69:25:ef:fe:36:88:
         a9:64:4b:8b:c4:96:80:05:75:8d:bc:da:c7:19:74:d6:7f:53:
         d1:e4:0e:17:57:f7:f4:ca:63:bf:a8:14:0a:53:bf:63:f9:94:
         11:1c:83:eb:ae:d9:a1:f5:7c:73:bc:ec:09:aa:0b:40:5e:3e:
         de:76:ac:be:bd:90:58:12:80:5c:cf:07:86:24:38:6d:00:14:
         f8:d2:f6:28:4d:a4:c0:47:33:59:b3:3b:4e:93:65:fe:9e:e0:
         44:27:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:55 2026 by rpki-client