Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
File:                     3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          a2QibleUN3/SQkgLNABH/LdmZqWfIKiqxCDtYo9YeZA=
Subject key identifier:   52:81:78:B8:8D:7D:FB:2D:4E:4B:C4:F5:CC:F7:FB:E4:09:40:13:44
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       20F1EF3842D66991FC7902925D209FD2A46C59BE
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     53062
IP address blocks:        170.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f1:ef:38:42:d6:69:91:fc:79:02:92:5d:20:9f:d2:a4:6c:59:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=528178B88D7DFB2D4E4BC4F5CCF7FBE409401344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:a5:05:d9:88:41:29:80:07:28:fe:9f:e5:
                    3f:8f:bc:84:f1:eb:eb:60:d7:b0:73:8b:d8:36:03:
                    87:6c:6b:61:a7:b4:6e:59:6e:e0:f8:6a:48:c5:6b:
                    47:0c:36:58:e0:cc:3d:81:87:ca:73:69:1d:57:c1:
                    56:75:34:6b:b2:52:95:b2:8c:9c:a9:2e:ca:be:bc:
                    fa:1b:bb:c4:7c:23:2c:37:b8:ea:69:71:2c:5c:01:
                    0a:71:93:d1:c9:e0:57:fd:95:40:e4:c9:b2:7b:29:
                    06:41:e8:a7:c9:2c:73:67:84:92:26:a5:96:be:9c:
                    ad:27:57:f1:65:f7:8f:82:2d:27:3e:e6:2e:a1:6b:
                    7d:1e:6b:99:b4:3f:68:1a:35:72:ea:d3:e8:31:22:
                    a1:49:e1:4f:74:03:2c:f5:ec:dd:e9:ab:2c:11:ef:
                    d8:17:b4:b7:96:17:de:31:c3:e3:b1:a6:00:8f:0e:
                    00:af:5d:c4:3c:2e:fd:e7:c6:f1:c1:10:75:a3:b3:
                    67:2c:94:2e:1f:23:04:1e:b1:da:f2:76:9c:63:19:
                    42:41:d0:cc:0d:c8:1d:5b:24:04:75:86:0c:ea:50:
                    08:d4:f9:90:97:00:3b:e9:0a:9d:ec:fc:22:2c:6e:
                    6b:ac:90:46:c5:38:4b:f9:3e:b5:71:b3:bc:35:2c:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:81:78:B8:8D:7D:FB:2D:4E:4B:C4:F5:CC:F7:FB:E4:09:40:13:44
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:ec:ad:4d:41:9e:8a:d6:b5:26:14:1f:2f:28:47:55:af:
         8a:d8:35:14:ee:39:05:e7:22:3c:56:61:a6:6a:e2:b5:c8:a8:
         de:46:5d:c0:ff:83:b0:16:7a:04:1a:a5:97:17:b9:e7:f1:11:
         95:25:b9:0e:f5:10:e9:89:8b:e6:8e:52:fa:a1:88:93:4b:69:
         4d:f5:5f:4b:55:1a:49:a8:34:dc:bb:5d:cf:3b:65:5c:ab:99:
         2d:0b:45:48:94:83:87:0d:81:dd:20:55:d3:32:91:d9:ff:0a:
         74:91:56:e7:30:4d:68:69:8d:ef:da:e6:3e:a4:da:3b:bd:23:
         6c:b6:ad:32:ff:d5:d0:2a:1a:d6:98:a1:5a:f7:0a:76:1a:83:
         a8:10:a0:5a:49:51:6a:5f:57:82:fb:12:72:33:b4:7d:d9:76:
         1b:bb:d7:ec:d5:31:31:e4:e6:dd:3f:3b:6f:57:aa:64:22:e5:
         20:59:b0:18:08:90:88:b8:70:9c:72:2f:b8:bc:30:ad:15:d2:
         a3:7f:e8:77:e4:53:ed:66:a3:e5:c8:f9:19:1d:f3:d0:41:98:
         34:f4:3a:83:db:fc:b9:49:dd:d7:bc:a2:2c:15:6a:f2:2c:75:
         5e:7e:35:cc:ac:b5:63:61:f1:31:77:30:05:a9:49:29:17:a3:
         5a:ae:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:44 2026 by rpki-client