Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e332e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          sjc3df31u5qYd1zM4S+gI9acC1cM+AGR+wXXndoxd0g=
Subject key identifier:   26:82:95:29:DB:1A:1A:FC:E2:67:49:06:EE:18:D3:11:CA:18:DC:54
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       0C93DDD7C6837BEE44B6A6A8098583678998AEC4
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:00 +0000
ROA not before:           Tue 24 Feb 2026 20:32:00 +0000
ROA not after:            Tue 23 Feb 2027 20:37:00 +0000
asID:                     263627
IP address blocks:        170.80.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:dd:d7:c6:83:7b:ee:44:b6:a6:a8:09:85:83:67:89:98:ae:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:00 2026 GMT
            Not After : Feb 23 20:37:00 2027 GMT
        Subject: CN=26829529DB1A1AFCE2674906EE18D311CA18DC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:02:11:fd:28:01:91:68:f0:39:38:0c:43:
                    7a:2e:4d:e5:4b:22:9d:9c:08:fb:fe:fd:4f:69:1a:
                    8d:1b:11:cd:12:37:25:e1:ef:45:bd:96:58:93:cb:
                    cd:45:3d:41:df:10:b7:4e:36:c4:07:0f:30:3b:10:
                    1f:b9:54:82:8f:48:86:42:bf:b5:39:aa:e5:9c:67:
                    f3:82:5e:dc:c8:71:b3:92:d8:c7:5f:68:30:05:6f:
                    c5:6c:6a:f0:12:91:42:b7:6d:aa:fa:98:e4:ae:d1:
                    9a:83:85:b4:df:0e:2b:de:9b:8e:5c:36:e8:1c:65:
                    f1:8d:1b:61:e0:51:14:67:ab:0e:a8:d5:4e:2e:76:
                    cb:d4:0f:a8:24:75:05:81:c8:8f:c3:66:fd:23:8f:
                    d7:d8:e3:52:52:9e:22:63:61:66:50:ba:e6:3d:71:
                    ae:e7:38:74:dc:96:c5:64:56:cb:4a:8c:7d:ad:a2:
                    10:ba:ad:68:dc:e4:f8:f2:ed:b6:32:2f:f7:09:32:
                    5c:67:65:4d:d4:8d:8e:dc:6c:21:10:b2:0a:28:42:
                    73:0b:d1:c6:bf:f1:6c:97:08:c3:fa:0f:f5:ca:ec:
                    61:b1:05:7f:e0:f5:84:70:1b:12:2a:1b:8f:1a:9c:
                    ae:d6:a6:d4:23:32:0e:14:58:d9:f4:e6:92:3a:e0:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:95:29:DB:1A:1A:FC:E2:67:49:06:EE:18:D3:11:CA:18:DC:54
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:56:c8:74:8f:24:70:01:87:9c:c5:c7:0c:8c:65:0a:59:ca:
         2e:2c:58:3a:8a:5e:31:ef:e2:d5:aa:33:28:ff:82:e9:e0:43:
         ec:7a:b4:9a:66:7d:38:55:ef:cc:8b:cc:e0:61:a8:99:b4:bb:
         86:d7:23:85:63:44:be:42:55:1b:b9:fa:54:b6:66:b8:c5:40:
         ab:3c:de:55:b3:8b:cf:37:64:b0:41:7a:ab:9a:c7:9c:e3:6a:
         44:6c:b8:75:7e:58:df:c2:0a:f8:86:3e:20:56:55:e4:17:0c:
         6a:80:52:61:a3:e5:15:50:22:96:9a:ac:af:1f:46:24:65:38:
         fc:9a:a9:c7:d5:6c:d9:c5:c5:07:ba:8c:5e:ef:8d:77:e8:9e:
         f5:d6:60:64:95:81:b1:2f:2f:c7:f6:be:04:ce:88:70:d4:af:
         12:e2:15:62:b3:95:05:5d:f5:79:fa:88:e6:12:4d:8f:87:d7:
         54:90:f8:d7:68:f6:0a:1b:6e:f5:c9:68:07:cb:21:72:7e:ca:
         62:07:d9:b5:d6:fe:25:85:11:8a:9c:fb:03:bc:92:1f:f2:cb:
         73:2a:5a:c4:1e:e3:1f:29:2f:3f:53:d6:a1:82:b9:c4:9d:0a:
         41:08:b1:11:8d:1b:66:49:7c:41:06:4a:e1:61:63:a0:13:c5:
         7d:2d:59:41
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDJPd18aDe+5EtqaoCYWDZ4mYrsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNjAyMjQyMDMyMDBaFw0yNzAyMjMyMDM3MDBaMDMxMTAvBgNV
BAMTKDI2ODI5NTI5REIxQTFBRkNFMjY3NDkwNkVFMThEMzExQ0ExOERDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4wIR/SgBkWjwOTgMQ3ouTeVL
Ip2cCPv+/U9pGo0bEc0SNyXh70W9lliTy81FPUHfELdONsQHDzA7EB+5VIKPSIZC
v7U5quWcZ/OCXtzIcbOS2MdfaDAFb8VsavASkUK3bar6mOSu0ZqDhbTfDivem45c
NugcZfGNG2HgURRnqw6o1U4udsvUD6gkdQWByI/DZv0jj9fY41JSniJjYWZQuuY9
ca7nOHTclsVkVstKjH2tohC6rWjc5Pjy7bYyL/cJMlxnZU3UjY7cbCEQsgooQnML
0ca/8WyXCMP6D/XK7GGxBX/g9YRwGxIqG48anK7WptQjMg4UWNn05pI64MyDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJoKVKdsaGvziZ0kG7hjTEcoY3FQwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNzMwMmUzODMwMmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM2
MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKpQAzANBgkqhkiG9w0BAQsFAAOCAQEAwVbIdI8kcAGH
nMXHDIxlClnKLixYOopeMe/i1aozKP+C6eBD7Hq0mmZ9OFXvzIvM4GGombS7htcj
hWNEvkJVG7n6VLZmuMVAqzzeVbOLzzdksEF6q5rHnONqRGy4dX5Y38IK+IY+IFZV
5BcMaoBSYaPlFVAilpqsrx9GJGU4/Jqpx9Vs2cXFB7qMXu+Nd+ie9dZgZJWBsS8v
x/a+BM6IcNSvEuIVYrOVBV31efqI5hJNj4fXVJD412j2Chtu9cloB8shcn7KYgfZ
tdb+JYURipz7A7ySH/LLcypaxB7jHykvP1PWoYK5xJ0KQQixEY0bZkl8QQZK4WFj
oBPFfS1ZQQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 06:16:45 2026 by rpki-client