Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e302e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          cU9Cy1jY97Q9hsJAr6fhyUynuL6GYEOpPsuqRXNPQT8=
Subject key identifier:   B2:76:30:F0:D9:54:B5:C7:C7:D9:DB:AF:7F:73:87:F6:3C:44:69:E9
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       4BDCAEEFF270B4B0D477DA8BCA0C520EE7BC4A8B
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:15 +0000
ROA not before:           Mon 02 Mar 2026 18:30:15 +0000
ROA not after:            Mon 01 Mar 2027 18:35:15 +0000
asID:                     262296
IP address blocks:        170.81.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dc:ae:ef:f2:70:b4:b0:d4:77:da:8b:ca:0c:52:0e:e7:bc:4a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:15 2026 GMT
            Not After : Mar  1 18:35:15 2027 GMT
        Subject: CN=B27630F0D954B5C7C7D9DBAF7F7387F63C4469E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:48:42:6c:26:0e:23:72:4f:d8:e0:37:4d:
                    5d:1e:ea:df:48:a8:0b:13:ee:6b:b5:8f:07:14:34:
                    cb:04:7b:05:89:db:ce:75:52:9e:51:d9:40:1a:f3:
                    d7:04:a5:14:10:95:70:0f:13:89:3c:42:4c:b0:3c:
                    ad:f2:f7:7c:b1:28:ba:5d:97:e5:e2:98:f9:38:5a:
                    4e:e0:71:be:99:8b:c6:84:d9:94:21:f7:64:22:ba:
                    bd:10:b0:cc:da:a1:cd:03:2c:bc:86:e8:2c:37:38:
                    b0:63:6d:38:fb:49:b3:52:17:31:26:41:a5:e0:34:
                    b9:b3:83:67:64:8c:c9:cc:6c:34:58:02:4d:ae:f2:
                    66:ef:9b:67:c6:ea:85:5d:12:fd:81:7d:62:c9:03:
                    e1:dd:e6:03:07:45:d7:18:b3:11:2e:33:7e:32:72:
                    9b:4f:4a:4c:e3:69:47:17:2f:27:b9:2d:81:81:71:
                    43:60:f6:66:f4:5a:be:ff:61:a8:86:2f:a8:8b:67:
                    da:15:4c:28:d3:04:cb:1a:58:05:68:b9:0d:79:24:
                    15:21:dc:32:f0:3c:d1:16:12:d6:f6:38:b5:b9:b2:
                    6c:ed:4a:57:bc:fd:a0:23:41:5e:cc:f9:1c:a1:56:
                    55:93:44:0b:fa:8a:bb:81:18:1c:7b:87:85:86:84:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:30:F0:D9:54:B5:C7:C7:D9:DB:AF:7F:73:87:F6:3C:44:69:E9
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:2a:54:db:28:a6:30:65:62:a5:fb:7e:b5:0d:5a:31:00:
         ec:0c:13:09:30:d7:3f:43:2e:2b:8f:11:1c:39:7e:03:45:8f:
         25:2b:71:49:e1:b1:7e:df:48:cc:08:d0:a6:86:cd:2c:1d:77:
         65:7e:d3:2a:b7:1a:95:8a:e3:10:bc:89:11:f7:62:26:a0:0c:
         72:88:2f:02:23:63:c2:ee:6f:00:2f:80:5e:11:b9:d0:37:07:
         c6:c6:13:a3:9c:cc:80:f4:1d:25:a9:b9:4c:48:9d:48:ff:7c:
         40:00:1d:a8:ac:d1:59:c4:56:54:8f:c1:ce:56:91:49:4b:e6:
         fd:54:e5:cb:fc:a7:bb:89:b1:5e:cf:7e:d0:d5:8e:71:22:15:
         13:f0:a0:4a:87:a0:4e:f1:b4:7f:51:e3:ef:ad:e0:e8:ea:c6:
         7a:5f:9d:de:3b:81:de:14:11:0c:f0:d7:d4:58:6c:fd:f6:78:
         e5:c8:a4:fc:ee:d1:86:b6:d4:19:14:75:36:33:d2:86:75:f7:
         5d:8b:cb:f7:77:9d:a6:a2:c0:51:ed:46:51:fa:40:ed:27:4c:
         75:9c:8f:ed:a3:f2:c8:19:0e:70:76:91:a7:32:0e:a6:fd:31:
         89:ee:ab:8d:8d:73:2d:dd:6d:ca:e2:66:a0:3e:be:26:d9:73:
         c5:d6:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:12 2026 by rpki-client