Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
File:                     3137302e38312e302e302f32322d3232203d3e20323632323936.roa (raw, json)
Hash identifier:          UJEYdtVemBvHR5y3drAimfK7riWKvsbvh4bnmeIMRD0=
Subject key identifier:   5F:2D:D9:A0:0B:9D:5D:F8:0D:AA:D2:62:9B:04:3C:A6:88:08:51:D0
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       32DD42CAFE2BFED4B830499D00CB6FB57995ECF0
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:12 +0000
ROA not before:           Mon 02 Mar 2026 18:30:12 +0000
ROA not after:            Mon 01 Mar 2027 18:35:12 +0000
asID:                     262296
IP address blocks:        170.81.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dd:42:ca:fe:2b:fe:d4:b8:30:49:9d:00:cb:6f:b5:79:95:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:12 2026 GMT
            Not After : Mar  1 18:35:12 2027 GMT
        Subject: CN=5F2DD9A00B9D5DF80DAAD2629B043CA6880851D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:20:94:f4:a1:5a:57:a3:fc:ca:f0:92:30:
                    e8:72:0e:99:b7:ad:72:61:cd:79:d3:1e:68:bd:b0:
                    a2:31:a8:d7:b3:ab:db:79:f9:8a:48:23:0d:07:db:
                    51:4f:84:68:c5:8b:3d:0d:d6:14:85:67:77:e6:52:
                    37:16:7f:6d:d8:b5:4b:60:1c:45:3c:84:4b:9f:f0:
                    ba:1a:4b:9d:6a:80:59:61:9a:66:aa:59:fe:c6:71:
                    2c:fe:ab:62:5e:d8:2b:af:b5:c3:a3:99:14:83:ad:
                    db:2d:6e:ac:e6:a1:a1:17:b0:01:31:46:8d:68:ed:
                    09:1b:9a:54:62:5e:f8:24:07:7b:db:ac:2d:94:16:
                    a2:ad:a1:88:7b:b4:9b:a7:a2:a5:8d:be:5d:9f:83:
                    6a:4d:49:46:53:fd:1d:92:d5:5b:cb:0e:af:9a:b7:
                    11:6c:d7:b2:ee:5e:df:38:7a:e1:95:54:69:bc:02:
                    57:00:7c:95:27:59:6f:aa:63:a8:02:b9:63:7b:df:
                    ad:5e:10:7a:fb:96:b0:f8:16:ff:eb:0a:d7:6f:c0:
                    78:b4:2c:0c:cc:11:cc:df:ca:93:c4:6d:97:51:48:
                    6d:2c:a4:54:f6:50:73:b4:e6:06:eb:e1:da:66:bd:
                    9a:55:82:89:7f:15:f8:b2:35:ea:03:0f:c7:1a:03:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2D:D9:A0:0B:9D:5D:F8:0D:AA:D2:62:9B:04:3C:A6:88:08:51:D0
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:ee:d5:ca:02:67:35:db:fc:e8:99:9d:ba:48:a4:59:bc:
         95:e2:03:08:d5:50:f6:71:ab:1c:06:26:cb:dc:f5:1a:bf:99:
         cc:aa:78:57:7f:fe:34:2b:fb:0f:2c:94:ff:35:c0:01:c3:b0:
         92:18:a4:b1:2d:a1:62:22:2f:a2:30:c0:2a:96:43:09:1e:46:
         90:60:0e:75:bf:82:5d:36:ba:03:b9:a5:73:a3:d4:5a:eb:2b:
         e1:f8:1d:10:1b:3e:e5:9a:a8:bd:73:c5:08:a3:a9:53:d3:5e:
         c6:9e:66:28:30:54:4a:0a:72:83:e8:88:35:2a:48:1a:05:ad:
         e4:d2:ca:ed:c4:a1:d5:73:49:a2:fe:cf:ad:e3:b3:87:0a:50:
         ea:aa:f3:7c:8e:2e:5a:f8:92:43:61:9f:01:91:c4:94:ce:08:
         2a:4c:46:c5:8f:da:62:30:56:96:1b:22:16:40:16:5a:88:da:
         6a:68:7d:3b:3c:3d:5c:c8:23:b8:26:35:79:99:4a:c3:91:80:
         ec:46:b0:e5:5d:51:48:89:9d:4b:a2:49:fc:3c:af:8c:50:f6:
         4b:b6:dc:f7:03:50:bf:e7:3c:bd:2f:8f:25:54:b7:56:61:d6:
         3a:d9:a6:5a:10:e3:f8:ea:27:6f:3a:ec:05:94:78:18:5a:51:
         c8:db:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:23 2026 by rpki-client