Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e312e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e312e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          XXelfuohn9rXkum/5mssPxhWWpyDTFkeV1JjJifV7rI=
Subject key identifier:   10:8C:54:DA:5D:93:64:5F:87:B0:2C:02:29:83:59:6E:DC:71:E2:D0
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       68824611D59F85D2EEF08FB3DDEBBB6919C943AA
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e312e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:11 +0000
ROA not before:           Mon 02 Mar 2026 18:30:11 +0000
ROA not after:            Mon 01 Mar 2027 18:35:11 +0000
asID:                     262296
IP address blocks:        170.81.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:82:46:11:d5:9f:85:d2:ee:f0:8f:b3:dd:eb:bb:69:19:c9:43:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:11 2026 GMT
            Not After : Mar  1 18:35:11 2027 GMT
        Subject: CN=108C54DA5D93645F87B02C022983596EDC71E2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:98:c8:22:aa:9e:93:47:98:4b:28:6c:56:
                    ac:ac:12:af:7f:3d:f7:ce:c4:53:32:b6:58:e7:d2:
                    01:b4:12:90:7b:4d:f5:5f:49:52:95:44:23:d6:8a:
                    39:9a:6c:f6:1f:46:80:2b:0e:2b:47:cc:fa:96:8c:
                    40:f2:2d:4a:b5:58:06:38:18:19:2a:c7:76:cd:9b:
                    c6:81:d6:b7:1b:e1:43:e0:2a:d3:dc:ea:54:1b:6b:
                    e5:b7:63:28:64:49:c4:7e:e4:9a:33:41:4c:24:07:
                    0d:97:71:b4:76:99:ef:65:72:7b:77:4b:88:60:c7:
                    d0:7c:15:31:a7:07:35:fd:7b:cd:23:86:fe:d9:7f:
                    0c:14:f7:ef:ce:ce:7e:02:a8:84:ed:e8:bb:95:a1:
                    e6:a0:a4:ca:85:b7:d0:2b:ee:1c:e1:db:b3:45:c6:
                    44:38:fd:25:0e:09:3e:7a:f5:1c:be:88:cb:bd:ed:
                    6f:33:02:70:d7:9a:1c:d2:f1:fe:0a:3b:b6:91:59:
                    37:a0:a0:53:30:07:69:4b:d6:96:2f:e6:42:cd:a5:
                    94:5e:23:bc:0a:87:46:8e:80:c5:f5:36:40:ca:38:
                    ef:cd:23:39:cc:eb:0d:b7:be:04:43:9f:92:bf:77:
                    df:7c:51:f3:f1:50:03:4a:a4:9c:b7:68:90:d1:d6:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:54:DA:5D:93:64:5F:87:B0:2C:02:29:83:59:6E:DC:71:E2:D0
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e312e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:cf:46:3e:59:f5:b2:f3:ee:0d:50:4b:67:a3:87:cc:15:
         ea:e4:94:24:2e:ec:59:c1:0e:d1:3e:38:41:f8:51:93:6a:0d:
         6b:92:c6:70:c4:7d:0b:1c:cd:96:2a:8d:8c:d4:25:70:cc:0e:
         c6:ea:6d:d3:48:13:e9:da:4f:b8:bc:95:4b:63:8b:6f:9f:2f:
         43:45:c9:4e:7c:f9:01:a7:ce:b3:0b:c6:b0:fd:52:89:44:48:
         e7:72:42:21:89:de:3d:7a:52:d3:5c:14:38:b2:dc:a0:7f:8b:
         de:79:a1:d2:12:c9:d6:90:19:4b:e4:35:00:d1:02:58:57:41:
         72:7f:b2:d0:f8:38:88:c9:76:61:40:a3:75:a9:9e:75:9b:b3:
         d9:50:46:60:5a:59:e8:bf:f8:ba:42:0d:05:ec:0f:cf:68:4d:
         24:54:46:27:ad:23:d1:3e:3a:84:9e:f1:ff:c0:06:f3:cb:e9:
         0c:78:5e:7e:83:5e:19:4f:7b:d2:2b:5e:41:04:42:da:4f:62:
         62:11:4c:fa:c6:6c:cd:a8:cd:af:1a:ac:93:50:27:4c:6a:20:
         73:af:95:d8:4c:76:da:96:8c:15:cd:22:21:e7:83:58:fc:32:
         34:c7:ca:84:94:94:12:d7:64:72:81:b9:a3:e2:16:1e:f8:87:
         56:95:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:12 2026 by rpki-client