Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa
File:                     3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (raw, json)
Hash identifier:          i1t+L0AEh36P7sx3IBS27leEiECSlWmpNgLESp9whrg=
Subject key identifier:   32:BD:45:41:02:CA:7A:FA:27:6B:F2:45:0A:DB:A3:86:C8:B1:EC:68
Certificate issuer:       /CN=0673A8A85FD75BDF7374650633566E470F5D792A
Certificate serial:       3D334121DAE41221A9E03A266EF0D325DBECFD4A
Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa
Signing time:             Tue 06 Oct 2026 14:59:57 +0000
ROA not before:           Tue 06 Oct 2026 14:54:57 +0000
ROA not after:            Tue 05 Oct 2027 14:59:57 +0000
asID:                     263266
IP address blocks:        170.82.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:41:21:da:e4:12:21:a9:e0:3a:26:6e:f0:d3:25:db:ec:fd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A
        Validity
            Not Before: Oct  6 14:54:57 2026 GMT
            Not After : Oct  5 14:59:57 2027 GMT
        Subject: CN=32BD454102CA7AFA276BF2450ADBA386C8B1EC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:f2:36:95:5c:e3:37:3d:ec:c1:0e:56:80:
                    6f:5f:e7:29:e5:12:bd:6d:2c:f7:25:be:bf:64:d4:
                    e8:a6:1b:72:e7:cc:ec:cb:92:dc:42:1a:26:1c:d4:
                    75:19:c9:84:1f:86:71:b6:49:82:2c:a6:a5:25:41:
                    9e:9a:c4:e8:fa:85:0a:bd:8a:5c:31:39:b9:aa:64:
                    75:37:c0:e4:48:35:94:fe:10:80:25:80:62:6d:a1:
                    38:2c:76:a9:b5:36:63:a0:d0:58:de:8d:88:c1:c5:
                    b5:0d:c3:3a:b9:d2:0a:dd:df:f1:86:17:5c:db:df:
                    36:d4:39:62:0e:26:07:8b:2a:34:bc:05:ad:c5:76:
                    9a:f3:74:af:b9:e6:94:c8:62:c6:25:fd:3d:01:40:
                    66:45:67:25:29:88:a8:fe:39:0e:e7:28:a7:aa:41:
                    42:07:7e:55:9c:64:b1:61:f7:2d:67:29:58:46:ff:
                    1a:f9:72:31:cc:a5:1c:e9:11:a3:7b:0c:5d:ed:2f:
                    2a:72:f2:85:8b:06:06:f9:a2:6e:16:b7:0a:21:0b:
                    ab:3a:34:c6:3e:fc:b0:f3:f2:d8:11:10:a0:78:44:
                    fb:7d:48:19:c7:47:24:ff:c1:42:1a:ff:e4:70:05:
                    a8:52:d4:25:e9:7f:25:25:19:52:e7:4b:8d:41:51:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:45:41:02:CA:7A:FA:27:6B:F2:45:0A:DB:A3:86:C8:B1:EC:68
            X509v3 Authority Key Identifier:
                keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:15:ca:1e:f8:07:1a:e5:83:4b:08:82:8d:45:01:75:47:
         d9:4f:a6:f4:8c:ae:b9:1e:e4:c2:b2:c6:04:ba:c5:e1:d3:fd:
         35:03:34:90:e1:45:00:fd:3c:8b:3b:cf:b6:cf:42:7f:68:c6:
         57:62:a7:1b:69:ca:64:41:75:d6:da:4c:20:75:32:9a:cf:d4:
         c4:bf:7b:99:4c:c0:1e:84:f6:fc:2d:a5:81:92:5f:f2:cf:21:
         ea:78:8a:ed:e8:8d:d3:2c:15:41:2b:aa:ad:fd:31:4a:8d:bc:
         12:07:a0:0e:f5:b6:bd:f6:9d:d4:68:e1:1b:91:c0:97:99:cb:
         db:04:ff:a7:4b:57:fc:ce:22:92:16:06:ea:d2:03:05:b0:f1:
         45:41:8d:b7:3f:6f:00:0e:63:48:8f:5f:eb:9f:71:26:56:6b:
         e1:9e:0f:8d:c5:09:83:d4:47:4a:f2:12:be:2f:11:44:25:3b:
         5d:ad:bb:90:9c:5b:8f:bb:e6:82:38:9e:53:56:1b:bc:5a:2d:
         0b:51:5c:f5:b4:8c:a3:70:bb:a0:ff:30:ce:d4:99:ce:76:b9:
         85:c9:7f:4e:cb:23:df:80:21:c1:d1:a5:90:7f:57:2b:a0:fd:
         93:88:70:0d:fd:bb:ec:10:0b:38:b5:38:64:af:09:40:32:8e:
         c7:bf:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:24:41 2026 by rpki-client