Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32322d3232203d3e20323633363237.roa
File:                     3137302e38302e302e302f32322d3232203d3e20323633363237.roa (raw, json)
Hash identifier:          4wCOy9QpOkswwmwv895T28osmnmcPTFnm20pgVBa2Rg=
Subject key identifier:   4F:72:30:89:C2:C6:3D:02:C8:32:21:0C:60:56:74:77:04:72:C6:B8
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       5E19F9426F6BC0CFD1E83307ED667C7F50E66796
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32322d3232203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:36:59 +0000
ROA not before:           Tue 24 Feb 2026 20:31:59 +0000
ROA not after:            Tue 23 Feb 2027 20:36:59 +0000
asID:                     263627
IP address blocks:        170.80.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:19:f9:42:6f:6b:c0:cf:d1:e8:33:07:ed:66:7c:7f:50:e6:67:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:31:59 2026 GMT
            Not After : Feb 23 20:36:59 2027 GMT
        Subject: CN=4F723089C2C63D02C832210C605674770472C6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:72:be:4a:6b:ec:3f:53:49:e4:09:41:ed:
                    66:44:a9:e6:32:49:20:4e:6e:23:04:f0:14:3b:2d:
                    af:21:e6:16:99:5b:19:df:b4:62:d2:16:13:76:90:
                    45:7b:81:9b:e6:3d:1a:8c:2a:a7:de:26:c9:18:50:
                    69:51:6e:12:76:47:ee:84:38:04:b8:00:67:87:1e:
                    47:f8:90:4e:f1:85:4e:af:74:5d:0f:a5:25:48:9d:
                    ad:73:68:6a:4a:cc:3c:da:49:26:8d:67:55:54:08:
                    cb:5c:87:46:7f:b6:5f:ce:f6:86:74:d2:7f:5a:dc:
                    fd:2c:55:7a:60:ff:61:9e:01:a1:9e:18:db:85:ab:
                    29:d5:0d:08:6e:29:f0:08:3e:52:a7:45:eb:e6:5e:
                    eb:98:6b:4d:cd:96:85:15:b0:1a:78:d3:91:e5:f4:
                    c5:84:6a:da:0e:be:40:74:da:97:87:68:22:80:b6:
                    36:a8:94:1c:8d:31:bb:93:58:c7:07:c0:e3:9e:14:
                    63:3b:75:f6:18:1d:ee:9c:8b:bf:19:4c:29:96:ea:
                    5b:81:35:6f:d7:91:eb:2d:3e:02:44:22:d7:20:da:
                    ef:e1:dd:cb:19:9a:07:67:a5:1c:49:59:6f:2a:d9:
                    12:93:f1:eb:33:ca:6f:0e:42:15:84:4a:33:b0:15:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:30:89:C2:C6:3D:02:C8:32:21:0C:60:56:74:77:04:72:C6:B8
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32322d3232203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:51:b1:df:2f:48:56:2d:07:8c:9b:6a:09:06:2d:8b:ad:
         ec:d6:8a:ea:e5:98:af:ea:f4:c0:dd:e6:68:cc:02:c3:f8:17:
         b8:39:c6:49:dd:bc:ea:4a:40:7f:ac:4d:f8:08:e6:ef:e4:2e:
         5a:cd:fe:af:8f:1c:69:53:01:08:0d:1f:ac:c8:15:97:5c:4a:
         88:d3:c2:29:5e:91:25:6c:65:bc:e4:44:28:73:79:73:5a:10:
         25:b3:19:f1:1b:c8:c2:1b:aa:d0:b4:1e:d1:06:d5:83:fa:f3:
         2e:0e:77:09:2f:39:40:e0:bf:0e:74:e8:bb:ad:6d:a0:e8:f6:
         22:5b:21:76:cb:a8:18:8c:29:0f:2f:ce:d6:bf:f1:35:bd:47:
         93:e1:8b:be:6b:14:3a:40:a9:70:e7:90:91:be:94:fc:b4:cd:
         af:57:97:00:0b:66:5f:8d:6f:85:e0:3b:34:17:98:c0:32:26:
         35:8d:45:95:65:8e:1f:94:99:57:5a:0c:26:27:cd:27:65:66:
         eb:a9:13:42:c6:cd:1d:1b:29:bd:46:2b:ec:c7:26:ad:5e:39:
         86:02:37:be:8c:f6:29:b3:92:cf:1a:6e:1e:ba:d4:75:9a:57:
         a8:b6:7e:59:93:3f:7e:1b:4b:62:79:70:55:9a:1e:a6:2e:11:
         51:d1:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:19:03 2026 by rpki-client