Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32332d3233203d3e20323634313132.roa
File:                     3137302e38332e3136302e302f32332d3233203d3e20323634313132.roa (raw, json)
Hash identifier:          WnnExpaPG1l+z3rGg5smWL5NeCRnIk3BwnBPGXUWqog=
Subject key identifier:   DC:42:9D:A1:93:8D:B5:D7:5E:7F:66:D6:64:CB:65:CB:6A:8D:7E:CE
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       2749198AB66AFF1CF9AB2BC0BC628BD3D0D98CB7
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32332d3233203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:00:58 +0000
ROA not before:           Fri 05 Jun 2026 01:55:58 +0000
ROA not after:            Fri 04 Jun 2027 02:00:58 +0000
asID:                     264112
IP address blocks:        170.83.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:19:8a:b6:6a:ff:1c:f9:ab:2b:c0:bc:62:8b:d3:d0:d9:8c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:55:58 2026 GMT
            Not After : Jun  4 02:00:58 2027 GMT
        Subject: CN=DC429DA1938DB5D75E7F66D664CB65CB6A8D7ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:24:01:33:e4:93:f9:5f:35:62:f9:b1:ed:
                    13:8f:8e:22:4f:34:2c:f9:da:3c:9d:08:5f:0e:ed:
                    38:1f:c1:dc:0a:8b:2f:db:4b:39:bb:2e:26:10:7a:
                    1d:21:99:1f:b5:cc:53:c3:7a:d1:da:30:42:57:9f:
                    48:bd:af:61:71:5e:6f:a6:c0:18:b9:9d:ae:a1:0c:
                    2e:8c:6f:f8:cf:28:8c:03:a1:15:73:0c:3d:e2:ef:
                    59:42:9c:8b:4a:f3:31:6f:c5:09:ef:2f:55:38:ec:
                    be:be:34:2c:61:37:c1:5e:91:4c:41:3e:d7:90:bf:
                    a5:89:77:fd:fa:6b:fa:aa:dd:54:c8:a8:f0:90:5d:
                    04:92:27:94:5f:4f:42:15:5b:7d:b7:74:4a:ff:c7:
                    d6:64:37:51:72:85:ee:51:df:f6:14:d1:7b:2d:12:
                    f3:c4:e7:5e:9f:c2:28:b0:e1:38:c2:02:79:53:e9:
                    4d:de:a1:da:b0:07:11:61:a6:25:e6:77:34:34:ba:
                    65:da:12:19:4d:ea:88:2e:fd:97:37:2a:f4:7b:27:
                    98:b6:c3:0e:07:a7:25:53:e4:1b:c8:5a:27:61:71:
                    f4:a1:c2:e1:2f:46:50:0d:f9:ef:8a:e3:05:e1:63:
                    c0:38:45:80:60:ba:b1:36:5a:3c:bb:a5:3b:f1:f4:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:9D:A1:93:8D:B5:D7:5E:7F:66:D6:64:CB:65:CB:6A:8D:7E:CE
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32332d3233203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:08:33:49:63:96:fa:80:c6:c3:0b:ea:93:75:ec:c9:6e:
         3c:5e:9a:8b:ff:fa:8f:80:7d:82:4f:b6:57:8d:e6:ba:be:35:
         68:35:9c:f4:11:6c:17:81:81:c4:ef:74:54:ac:82:90:2c:f7:
         1e:84:6f:fc:d5:0e:3d:87:1f:31:ee:46:c5:6d:8c:7f:fb:32:
         25:02:19:6f:8e:41:6e:1a:6e:83:2d:5b:b7:36:e4:b8:7f:7d:
         97:b5:a3:e5:ca:b6:8f:9c:fb:f4:02:03:f8:ff:7b:ba:68:59:
         1d:57:f6:4b:2d:20:95:57:d8:f9:42:f4:91:2d:aa:4e:79:4a:
         46:ea:81:9c:fc:90:0d:5a:35:70:05:14:75:72:bf:6d:86:9d:
         22:a6:65:aa:e9:5f:53:94:49:4e:51:33:54:25:e4:50:30:a0:
         2f:5d:d4:ab:70:2d:b7:09:d1:72:58:8a:5e:b5:12:4e:20:2e:
         16:d0:eb:18:b7:96:58:d7:98:9d:f3:c9:16:36:d9:28:e4:6e:
         12:7b:9d:20:e7:38:cf:f4:5d:e4:62:f7:83:1c:1c:f2:f4:a0:
         c5:08:e9:01:4c:c9:17:80:af:55:b6:39:f9:38:45:d3:c2:f2:
         61:f2:b6:7a:d7:77:4e:e9:d8:31:93:06:f7:a9:a9:5c:5a:64:
         fe:09:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:40 2026 by rpki-client