Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132352e302f32342d3234203d3e20323632333931.roa
File:                     3137302e3235342e3132352e302f32342d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          Z0ZOBwXCAUxgftGCv2z+5E+f3fqqOTLcjVvvldoju/M=
Subject key identifier:   1F:A5:0C:43:20:BE:42:1A:6A:0D:07:92:E5:F6:79:8D:D7:36:6A:2A
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       340F1D83F886F1593AB8532ADC028E2C42C5D28C
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132352e302f32342d3234203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:51:24 +0000
ROA not before:           Mon 02 Mar 2026 20:46:24 +0000
ROA not after:            Mon 01 Mar 2027 20:51:24 +0000
asID:                     262391
IP address blocks:        170.254.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0f:1d:83:f8:86:f1:59:3a:b8:53:2a:dc:02:8e:2c:42:c5:d2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:46:24 2026 GMT
            Not After : Mar  1 20:51:24 2027 GMT
        Subject: CN=1FA50C4320BE421A6A0D0792E5F6798DD7366A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:95:ef:48:56:20:7f:f6:45:65:86:b1:4d:
                    81:69:48:52:b5:60:ec:4d:ba:3b:1a:b0:4a:38:c1:
                    ec:65:c9:26:69:f7:70:d6:08:3c:09:bd:a6:93:3f:
                    f9:fb:b7:27:32:bb:a9:18:59:2d:1d:9e:1f:31:84:
                    8a:aa:91:8a:8e:60:79:3d:76:70:b2:e2:94:14:17:
                    64:46:f0:81:08:10:a9:f1:7e:73:f2:1d:af:78:5b:
                    79:12:5b:20:0d:66:88:7e:7e:42:6c:5d:3b:85:9a:
                    b1:43:8b:70:68:9c:b2:64:06:c7:a5:4a:58:7c:c5:
                    c0:b7:7c:1b:a3:50:fc:46:87:4e:b3:f3:41:14:a8:
                    b0:2c:1f:81:b8:4a:c2:d4:c1:69:19:aa:35:12:a3:
                    c5:e2:3a:83:df:ba:b3:20:75:94:1c:51:83:b2:d3:
                    3b:14:47:4a:ec:82:75:1b:b9:85:44:41:76:0d:bf:
                    de:15:1a:52:40:45:dd:54:50:4f:ef:ea:de:08:61:
                    ad:57:9d:ec:00:4a:80:c3:0b:17:fb:e5:1b:39:f7:
                    1e:47:43:4c:d3:61:b1:a2:02:aa:fa:83:78:1f:29:
                    53:8f:22:07:aa:35:96:9a:d9:a2:94:4b:6c:ab:3d:
                    ca:b8:6c:68:e4:a0:7c:92:6d:0d:a5:0f:b6:0e:b3:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:0C:43:20:BE:42:1A:6A:0D:07:92:E5:F6:79:8D:D7:36:6A:2A
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132352e302f32342d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:74:23:e8:27:c2:f6:e7:f7:80:4a:36:46:47:dd:05:8c:37:
         34:58:62:40:54:0f:93:b7:52:df:f3:a5:f8:77:1e:1a:b7:4d:
         bd:4c:46:e7:3d:0f:72:33:96:b1:c0:32:2f:54:e4:86:07:22:
         9b:ba:de:7c:a0:1f:1c:36:e1:b0:3c:b5:c0:06:86:2b:ab:30:
         d3:59:c0:47:c6:8c:e8:98:f6:59:18:2d:62:7f:fb:e8:05:ca:
         dc:95:db:5d:50:f5:ff:da:bd:4a:fd:2b:92:41:f2:2e:97:b6:
         7a:19:9a:c3:34:98:1c:b2:04:09:9b:d5:b5:45:48:f1:ca:4d:
         c0:59:1b:9a:9e:04:d3:71:7b:de:ac:33:fb:a0:5b:41:fb:4a:
         f9:f2:91:dd:25:6e:6e:f9:12:85:aa:75:c9:cb:24:63:57:f1:
         28:a8:2b:01:8d:d3:22:9c:08:30:76:ca:15:f9:ec:55:ca:ef:
         6a:91:53:18:6d:30:92:67:a3:97:a1:a0:f6:17:60:cf:7c:c1:
         1b:19:04:60:6b:42:48:63:12:08:3b:c8:8d:af:fa:27:10:99:
         d4:35:8e:8d:77:03:a9:fd:b8:4a:5e:3b:eb:5f:f8:84:26:97:
         c4:65:d8:e7:60:fd:c1:02:5c:1c:20:1d:13:73:f9:24:28:bf:
         25:68:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:17:50 2026 by rpki-client