Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134342e302f32342d3234203d3e20323636333631.roa
File:                     3137302e3233392e3134342e302f32342d3234203d3e20323636333631.roa (raw, json)
Hash identifier:          38FQ7grdaAM89UJWsnif4sBOwr67ZhH9EC5YaSuzg+I=
Subject key identifier:   B7:0B:AA:22:54:9F:BA:70:B1:CF:D0:6C:01:BE:B1:84:8B:53:28:3F
Certificate issuer:       /CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
Certificate serial:       470572DA93265B195EB9037ED818A2F02E497D0E
Authority key identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134342e302f32342d3234203d3e20323636333631.roa
Signing time:             Fri 11 Sep 2026 18:22:25 +0000
ROA not before:           Fri 11 Sep 2026 18:17:25 +0000
ROA not after:            Fri 10 Sep 2027 18:22:25 +0000
asID:                     266361
IP address blocks:        170.239.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl
                          rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:05:72:da:93:26:5b:19:5e:b9:03:7e:d8:18:a2:f0:2e:49:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
        Validity
            Not Before: Sep 11 18:17:25 2026 GMT
            Not After : Sep 10 18:22:25 2027 GMT
        Subject: CN=B70BAA22549FBA70B1CFD06C01BEB1848B53283F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:50:1a:47:6b:1b:58:20:92:ec:a1:5e:c1:
                    20:47:32:f7:57:ca:be:80:7c:65:af:10:33:9d:f3:
                    99:ef:0f:ef:ad:c4:82:e8:13:ac:69:55:10:b8:8b:
                    53:e8:aa:33:70:31:39:dc:db:58:5d:86:54:cf:4c:
                    9b:22:9c:3d:54:10:45:82:4f:44:18:c8:c0:58:2e:
                    04:48:b9:db:c1:0c:8d:7a:c6:0a:d5:d4:ff:c3:33:
                    db:3d:3d:29:e4:d3:15:7f:1d:a4:20:c1:62:ae:44:
                    59:52:7a:e6:d2:7b:e7:98:18:8b:b1:c2:1d:c0:ff:
                    b0:48:38:c7:4d:ce:3b:3d:f8:a2:8e:4e:68:c3:87:
                    7a:81:97:6d:83:7a:bb:9f:af:62:df:aa:50:6a:54:
                    6c:dd:38:02:3e:69:1d:9b:19:07:f3:51:35:96:f3:
                    28:7a:05:15:64:15:bd:08:e0:e0:aa:e5:0a:ef:3b:
                    1d:39:ea:68:7a:e1:13:c7:16:3f:ca:76:42:03:b7:
                    04:bb:e1:ab:2a:93:dc:47:74:b2:ed:54:73:75:d4:
                    34:eb:61:7f:c0:b7:00:69:c5:b6:bb:11:26:06:bc:
                    f6:f6:bf:ef:7b:69:46:18:06:10:07:2b:a1:3c:11:
                    e8:9e:c1:84:19:8d:b5:a8:1b:29:f7:c3:45:7d:b2:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:AA:22:54:9F:BA:70:B1:CF:D0:6C:01:BE:B1:84:8B:53:28:3F
            X509v3 Authority Key Identifier:
                keyid:97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134342e302f32342d3234203d3e20323636333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:6d:80:b0:3b:4f:59:49:85:34:9a:33:66:ea:d8:a2:d5:
         2d:0e:6c:ac:d6:8d:d8:d3:80:05:de:9d:55:9e:9e:f6:44:73:
         9a:c9:4e:ec:d1:14:b3:df:87:e8:68:6d:1b:4e:7c:ec:14:9a:
         bf:3b:23:23:95:a8:72:a5:5c:4b:ce:33:57:54:31:93:ab:3f:
         20:c8:9e:87:9d:51:c8:7d:5a:24:ca:5c:2a:f9:19:41:88:29:
         83:17:62:a9:00:1f:dc:08:61:7b:b1:92:b0:95:df:5d:ea:db:
         fe:c1:db:07:ec:fa:85:7e:51:3f:a3:32:d7:ce:09:0c:06:53:
         74:ba:3f:aa:0d:1c:bc:ca:94:37:d7:0e:f2:5c:8b:80:21:9c:
         b3:6a:24:af:c8:b0:f7:37:06:ee:8c:ff:9d:93:e5:3f:df:dd:
         c8:b2:d0:83:6a:e3:5b:32:d7:89:ea:d5:28:55:47:54:69:8a:
         17:ac:5b:86:9c:80:21:73:a9:c8:a6:50:06:ef:4b:ab:0f:07:
         89:fb:eb:85:c5:26:7f:4f:b1:6a:a7:7e:aa:71:94:27:cd:d6:
         65:53:54:ed:7b:1b:2b:be:ac:17:a8:33:54:8c:f2:c9:fe:3e:
         44:4f:1c:48:c1:d6:37:9c:4c:22:61:68:78:c0:c9:88:7c:16:
         a9:79:2f:2d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURwVy2pMmWxleuQN+2Bii8C5JfQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdCMDU0MUM1NEY3M0VFOUVGMjE4MkY3RTA3OTNBMDZB
NjY0RDZCQzAeFw0yNjA5MTExODE3MjVaFw0yNzA5MTAxODIyMjVaMDMxMTAvBgNV
BAMTKEI3MEJBQTIyNTQ5RkJBNzBCMUNGRDA2QzAxQkVCMTg0OEI1MzI4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF51AaR2sbWCCS7KFewSBHMvdX
yr6AfGWvEDOd85nvD++txILoE6xpVRC4i1PoqjNwMTnc21hdhlTPTJsinD1UEEWC
T0QYyMBYLgRIudvBDI16xgrV1P/DM9s9PSnk0xV/HaQgwWKuRFlSeubSe+eYGIux
wh3A/7BIOMdNzjs9+KKOTmjDh3qBl22Derufr2LfqlBqVGzdOAI+aR2bGQfzUTWW
8yh6BRVkFb0I4OCq5QrvOx056mh64RPHFj/KdkIDtwS74asqk9xHdLLtVHN11DTr
YX/AtwBpxba7ESYGvPb2v+97aUYYBhAHK6E8EeiewYQZjbWoGyn3w0V9sgG/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtwuqIlSfunCxz9BsAb6xhItTKD8wHwYDVR0j
BBgwFoAUl7BUHFT3PunvIYL34Hk6BqZk1rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFxMXQxdlo4cndZYmZKQk5ZNlR6NGtyZXozWVdNQUYyYWlUV1pQVmJG
cXcvMC85N0IwNTQxQzU0RjczRUU5RUYyMTgyRjdFMDc5M0EwNkE2NjRENkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3QjA1NDFDNTRGNzNFRTlF
RjIxODJGN0UwNzkzQTA2QTY2NEQ2QkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxcTF0MXZaOHJ3WWJmSkJOWTZUejRrcmV6M1lXTUFGMmFpVFdaUFZiRnF3LzAv
MzEzNzMwMmUzMjMzMzkyZTMxMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrvkDANBgkqhkiG9w0BAQsFAAOCAQEAC81t
gLA7T1lJhTSaM2bq2KLVLQ5srNaN2NOABd6dVZ6e9kRzmslO7NEUs9+H6GhtG058
7BSavzsjI5WocqVcS84zV1Qxk6s/IMieh51RyH1aJMpcKvkZQYgpgxdiqQAf3Ahh
e7GSsJXfXerb/sHbB+z6hX5RP6My184JDAZTdLo/qg0cvMqUN9cO8lyLgCGcs2ok
r8iw9zcG7oz/nZPlP9/dyLLQg2rjWzLXierVKFVHVGmKF6xbhpyAIXOpyKZQBu9L
qw8HifvrhcUmf0+xaqd+qnGUJ83WZVNU7XsbK76sF6gzVIzyyf4+RE8cSMHWN5xM
ImFoeMDJiHwWqXkvLQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:28:05 2026 by rpki-client