Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32342d3234203d3e20323634313230.roa
File:                     3133382e39372e34322e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          VzF79hMfRgNnm1GcQhr/VG6sEJdDugZrtRlqTkXyQG0=
Subject key identifier:   06:07:05:99:4D:A5:80:CC:4C:41:26:14:E4:90:6F:7C:A7:BB:7D:F5
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       567CB95549007F0AD870213BD30C0643AC690370
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:41:16 +0000
ROA not before:           Mon 02 Mar 2026 15:36:16 +0000
ROA not after:            Mon 01 Mar 2027 15:41:16 +0000
asID:                     264120
IP address blocks:        138.97.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7c:b9:55:49:00:7f:0a:d8:70:21:3b:d3:0c:06:43:ac:69:03:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:36:16 2026 GMT
            Not After : Mar  1 15:41:16 2027 GMT
        Subject: CN=060705994DA580CC4C412614E4906F7CA7BB7DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:7a:70:89:12:e1:1c:c5:ed:99:70:bf:3d:
                    34:12:42:e7:55:79:e3:18:79:da:4a:86:cd:73:1a:
                    5a:65:c3:be:85:b8:1f:9b:52:01:20:e4:3d:3d:98:
                    20:6e:ee:6d:82:93:a6:d9:b2:11:c9:8e:2b:a3:c1:
                    c4:4d:92:e4:6e:5a:53:56:32:3f:4e:05:28:32:5e:
                    f0:4f:f0:68:13:50:8d:c9:5b:ba:5e:57:f8:c7:74:
                    cb:66:c4:2f:e4:fa:c4:37:1b:04:aa:5c:03:8c:b7:
                    cb:1e:34:b0:76:74:a6:47:4d:97:93:4c:7b:e1:82:
                    9e:15:95:82:b4:cd:fd:22:34:2c:29:07:a0:99:e5:
                    64:10:79:10:da:4b:0d:89:69:f4:e3:41:2e:8a:07:
                    b2:3d:48:26:20:8a:a8:a7:03:c6:bf:70:1e:01:94:
                    ac:c8:7a:ae:2c:67:58:c5:f6:da:06:37:bb:23:b0:
                    5c:81:fb:e6:21:56:9a:3d:e7:b7:17:0b:8a:7d:3c:
                    32:c5:4b:66:04:97:24:f8:ec:53:0d:f6:20:cc:56:
                    d9:b7:ff:f9:b7:fe:d6:a7:8e:96:02:bf:c5:97:86:
                    19:0e:3a:c2:ce:b7:a7:4a:a4:c6:d3:98:d1:5d:54:
                    84:09:48:a6:ec:cc:fa:a7:ff:cb:38:5a:d3:63:42:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:05:99:4D:A5:80:CC:4C:41:26:14:E4:90:6F:7C:A7:BB:7D:F5
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:5f:c6:2b:42:74:04:b2:f4:12:09:49:e0:ae:16:14:41:
         8d:05:e7:67:fc:63:3d:fd:97:75:ca:60:6b:61:1a:b0:2e:f0:
         dc:fe:18:2c:f0:cc:6c:aa:3c:f2:7e:42:30:dd:10:2f:91:63:
         0c:d3:a9:b6:08:70:3f:0c:75:cc:ea:af:42:5a:59:81:08:cd:
         dd:d9:cc:0e:30:82:2e:28:e9:7e:bd:ae:7b:86:37:b9:a9:2a:
         20:bc:50:07:df:8c:aa:d2:be:e9:04:9a:e8:a2:b4:10:6e:38:
         06:72:f2:39:69:84:a0:3f:86:1f:91:7d:2f:85:92:e7:65:7a:
         d8:ab:2d:f6:b2:d8:0d:51:f5:12:e9:1f:cb:6b:0f:01:9f:26:
         44:e8:fc:e5:ee:d1:72:76:2e:c3:28:53:29:34:95:c1:58:3f:
         25:68:bd:9f:66:29:d8:13:f2:24:4b:57:99:cf:ad:9a:65:6f:
         52:e3:29:6e:19:cc:df:19:c8:a2:91:4e:ba:fb:87:70:02:22:
         2e:09:5d:ef:72:eb:16:d0:af:e0:18:a0:83:52:fa:4a:30:b0:
         e3:53:c2:32:a3:46:c5:8f:05:cd:b3:14:79:07:ad:7b:78:36:
         66:d9:b1:12:6a:5b:ba:61:74:97:64:d0:c6:e4:a1:ff:f5:05:
         78:60:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:05 2026 by rpki-client