Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa
File:                     3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          Td89NPOnCwP+2s+Scx9K1cTSPVkZjkTEPVVxrz/F9ZM=
Subject key identifier:   04:64:D8:79:FD:0C:D1:E6:21:E4:79:3C:9E:82:CC:65:55:15:47:D2
Certificate issuer:       /CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
Certificate serial:       79DAE4ED332B60E1ACB631A020FFA03CCBDF0FE5
Authority key identifier: 6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa
Signing time:             Thu 03 Sep 2026 17:35:45 +0000
ROA not before:           Thu 03 Sep 2026 17:30:45 +0000
ROA not after:            Thu 02 Sep 2027 17:35:45 +0000
asID:                     61584
IP address blocks:        170.254.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:da:e4:ed:33:2b:60:e1:ac:b6:31:a0:20:ff:a0:3c:cb:df:0f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
        Validity
            Not Before: Sep  3 17:30:45 2026 GMT
            Not After : Sep  2 17:35:45 2027 GMT
        Subject: CN=0464D879FD0CD1E621E4793C9E82CC65551547D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:0b:e1:12:7a:f1:8f:76:e0:37:23:13:27:
                    2d:ef:4a:8a:36:1a:f4:a7:f6:f4:0a:0c:80:16:1f:
                    41:a6:f3:fa:02:2f:b9:01:5b:20:85:62:03:ff:53:
                    be:4c:16:bb:a7:f8:c9:c7:cc:e7:b9:bb:de:b4:62:
                    90:3c:29:cc:6e:d0:b1:c9:a9:78:05:e1:35:e9:f2:
                    74:8d:4d:14:3c:5c:d9:1a:89:75:8c:66:51:70:e0:
                    ee:97:91:05:bd:38:2a:44:1a:93:4c:ae:73:86:f1:
                    13:4f:bd:53:73:0b:dd:0a:2f:e7:aa:c7:ad:9f:a7:
                    7a:22:d2:63:81:66:f5:ce:eb:35:8b:0c:ff:6f:c5:
                    2a:98:fd:90:3f:94:9a:36:a2:9c:45:c0:c5:4b:7c:
                    69:76:2e:cc:15:3b:dc:19:f4:b8:00:99:8a:d3:91:
                    bd:c9:7d:20:02:8c:fd:b3:18:b2:a8:eb:18:29:ba:
                    c0:e7:d6:00:a5:3f:7e:7d:19:87:17:38:b9:79:46:
                    76:81:0d:c6:7f:15:73:bd:a8:88:83:a2:a0:54:7e:
                    06:2e:6d:8b:bb:16:d1:73:dd:7c:d6:ce:da:d7:12:
                    db:af:ae:8c:74:7b:11:fd:6b:04:2f:a4:1f:69:ca:
                    64:5b:bd:12:58:a5:73:e2:0b:38:75:7f:80:5c:08:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:D8:79:FD:0C:D1:E6:21:E4:79:3C:9E:82:CC:65:55:15:47:D2
            X509v3 Authority Key Identifier:
                keyid:6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:c4:fd:b5:d5:6e:c6:e3:27:c1:82:28:59:d9:f6:b0:e0:
         7e:f0:5d:d9:0f:76:84:77:1a:76:2b:a0:df:ac:ab:86:07:32:
         b5:9c:33:25:0c:da:c6:06:9f:4b:65:97:48:12:50:05:08:33:
         71:a2:74:15:4f:50:71:80:30:9a:f1:65:95:08:24:00:be:b1:
         45:46:3f:f3:1b:f7:81:2e:68:f2:1a:46:8c:bc:32:0c:e3:66:
         77:ed:9d:c7:d5:7b:f7:06:44:31:ef:95:a4:a4:87:d7:40:a4:
         f3:1d:8c:70:4c:fc:1d:97:dd:72:91:74:16:2a:f7:61:2b:a3:
         cf:d9:5f:d7:65:10:dd:67:41:bf:c1:0b:a9:1d:a0:7e:01:ee:
         1b:1f:c0:f7:f7:01:e5:37:8d:ee:95:f0:54:56:62:9a:c9:64:
         ce:8f:37:7a:ab:c5:d5:8f:f3:6a:94:60:b2:3d:b3:bc:0f:db:
         6d:1a:9f:ee:20:32:21:36:ee:6d:12:3b:a7:3c:90:be:7d:db:
         0a:07:d1:59:af:30:d5:d4:f8:fa:ae:8f:b2:f8:23:0d:7f:c6:
         ae:a7:bb:5a:b5:01:ef:dd:4c:bd:3d:a7:7a:b7:58:b6:a0:4a:
         4e:98:fe:f8:d5:22:91:f7:b4:22:7f:4c:dd:c8:93:b5:63:31:
         1c:2d:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:29:36 2026 by rpki-client