Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa
File:                     3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa (raw, json)
Hash identifier:          Z5DoKyZh5BzRh8ykbCK/O5McEIoaR7+g9rS/Q56WyBU=
Subject key identifier:   8A:4D:67:03:20:55:D0:C4:4F:38:91:C8:65:60:3E:84:96:76:D9:C3
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       445AF778171944D6F382BA1048235D6FCC72824A
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 21:00:10 +0000
ROA not before:           Mon 02 Mar 2026 20:55:10 +0000
ROA not after:            Mon 01 Mar 2027 21:00:10 +0000
asID:                     262391
IP address blocks:        170.254.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:f7:78:17:19:44:d6:f3:82:ba:10:48:23:5d:6f:cc:72:82:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:55:10 2026 GMT
            Not After : Mar  1 21:00:10 2027 GMT
        Subject: CN=8A4D67032055D0C44F3891C865603E849676D9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:c1:18:56:f9:72:8f:5e:9b:2b:73:df:40:
                    fd:05:62:d7:41:71:69:89:1a:e9:2c:0d:3e:4c:b6:
                    93:b6:60:4b:17:99:98:5a:f9:5d:5c:0f:8e:ff:33:
                    70:9f:41:16:ac:04:31:61:68:b7:9c:e6:69:88:c0:
                    bd:fe:31:21:b3:39:8b:25:8f:e0:c8:f9:ac:44:2e:
                    c8:ef:1d:b1:98:e5:8b:c0:94:42:57:46:fc:ff:16:
                    6b:b6:5d:0f:50:7c:a9:68:16:fc:db:4d:26:fb:d7:
                    3d:9d:90:1f:61:68:1a:c1:6d:05:87:ec:6a:5e:58:
                    81:68:9b:3c:eb:95:73:53:7a:e6:63:8e:f0:ad:d2:
                    02:2a:28:0d:dc:20:ff:10:12:af:58:f2:6e:c3:d7:
                    74:38:62:23:e4:6f:a9:bf:2b:3b:81:b8:27:7e:b5:
                    d5:bd:ea:e4:01:82:74:84:4c:75:8b:08:17:6f:66:
                    cd:bc:14:67:b0:73:ad:89:ac:e4:01:a7:5f:a0:a7:
                    c6:31:00:ba:8c:5a:d2:61:0b:d1:2f:de:67:e1:55:
                    79:a9:f3:4e:82:b0:7c:f9:2b:a5:48:d3:fb:6a:cc:
                    d2:aa:39:ef:80:5e:0c:cf:2e:0a:d3:f2:44:26:a4:
                    1c:06:25:5a:9a:8f:c5:3b:c1:94:0e:8c:ae:11:97:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:67:03:20:55:D0:C4:4F:38:91:C8:65:60:3E:84:96:76:D9:C3
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:1c:6b:f9:be:a3:13:99:e1:c3:ee:03:7f:94:41:3a:65:
         ce:59:71:61:ae:4f:43:47:60:08:6d:4b:e6:12:8e:e5:3c:b5:
         dc:57:50:9d:6a:a2:44:03:d7:a5:0b:e9:76:98:7f:df:e1:62:
         44:d7:99:91:89:32:fb:34:87:67:8a:1d:6f:be:80:6e:4d:ac:
         5d:9c:f8:91:3c:11:d4:0b:80:3f:4d:e6:58:d2:46:54:5d:fe:
         41:19:23:29:33:13:ab:ae:65:2a:d3:f7:74:86:15:98:c6:b2:
         27:8d:43:9b:1d:1c:ff:77:c3:e5:54:b7:b0:d5:84:0e:59:2f:
         3b:d2:e6:c7:41:34:00:77:37:08:f4:28:bf:20:ec:ea:db:63:
         07:b6:b1:1d:3f:73:58:1b:36:75:e9:61:66:2a:fc:d0:e9:68:
         45:6a:b8:ee:72:d5:e1:28:1d:0c:c2:0e:c3:18:49:cf:b9:4c:
         b5:0a:c0:ff:10:fe:57:88:15:f2:ce:43:b1:94:28:79:d1:f8:
         e2:78:29:d7:94:22:6d:3a:c7:51:6b:7c:81:01:98:13:55:18:
         fb:a7:4c:fd:f0:cf:62:69:52:9c:9b:5c:0f:8a:e2:82:ec:57:
         5e:b8:3b:27:d0:ca:17:2c:0f:bf:61:16:d1:a0:29:3b:e0:91:
         24:c0:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:31 2026 by rpki-client