Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa
File:                     3137302e302e3230302e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          6KLFvwxNwi91HX8GoSmnsgX9WsKYz7mTfnxmnHsLN0c=
Subject key identifier:   DC:83:5E:9D:29:2F:66:AD:CC:0D:2F:45:7F:58:8B:20:7A:E2:20:57
Certificate issuer:       /CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
Certificate serial:       38877164481063AEF1D76196FA0A0604BBC90BB5
Authority key identifier: 73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa
Signing time:             Mon 26 Oct 2026 17:16:08 +0000
ROA not before:           Mon 26 Oct 2026 17:11:08 +0000
ROA not after:            Mon 25 Oct 2027 17:16:08 +0000
asID:                     263427
IP address blocks:        170.0.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:71:64:48:10:63:ae:f1:d7:61:96:fa:0a:06:04:bb:c9:0b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
        Validity
            Not Before: Oct 26 17:11:08 2026 GMT
            Not After : Oct 25 17:16:08 2027 GMT
        Subject: CN=DC835E9D292F66ADCC0D2F457F588B207AE22057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f9:ff:43:ae:f7:6a:31:c9:69:d9:bc:26:20:
                    43:4b:27:0a:08:e5:22:3e:6a:54:42:06:9c:80:c8:
                    25:72:28:7d:86:17:44:52:b3:5b:77:94:16:05:0d:
                    c0:ea:c0:3b:fa:1d:4b:19:fb:9d:a4:66:c4:ec:19:
                    cb:20:7a:db:c5:c4:b7:b9:da:f5:56:36:02:4f:eb:
                    93:8f:5c:a7:78:e9:1d:f6:22:c9:6a:56:ef:c8:1d:
                    f4:4e:9d:5c:ee:fc:d6:87:cc:0e:ab:f8:81:9b:7f:
                    be:65:77:b5:13:24:df:88:a2:de:ca:40:85:c4:8c:
                    34:97:78:52:f4:cc:2a:b4:bc:24:7d:6a:ed:eb:e0:
                    36:1d:27:77:14:72:21:29:d7:50:80:1c:5c:4f:9a:
                    ad:59:99:68:72:c6:c8:62:e3:82:6f:63:98:48:3e:
                    2f:8a:c2:e6:87:42:16:4b:e9:ba:cf:c1:37:cb:e8:
                    d9:8e:bc:a3:86:70:f7:eb:6c:2a:55:b1:4d:d3:3a:
                    da:82:16:80:ec:f7:e0:a4:f4:56:f9:7d:02:97:6a:
                    5d:38:a3:e5:aa:d7:dc:c6:fb:ee:45:54:65:99:71:
                    57:8a:2c:45:a3:16:28:39:8a:05:e4:c2:67:f6:20:
                    7c:60:d1:c7:91:09:b6:36:20:ba:ee:16:8f:05:e5:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:5E:9D:29:2F:66:AD:CC:0D:2F:45:7F:58:8B:20:7A:E2:20:57
            X509v3 Authority Key Identifier:
                keyid:73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:f6:da:f5:33:4d:bc:05:67:cc:54:03:3d:e3:2b:4c:c0:32:
         d4:2d:b6:73:1b:db:6b:16:09:5d:44:6d:42:ae:60:96:14:c7:
         6f:db:3e:85:7d:a1:48:29:2c:dc:44:c0:72:5b:c9:18:bb:3f:
         73:19:06:4d:d9:fe:9c:16:8a:ed:33:a1:6a:f9:86:03:f7:a4:
         20:1e:f0:64:ab:2e:c7:b4:ef:d4:87:62:2f:b0:18:c8:bd:cd:
         a5:81:a5:f7:72:f1:9b:f3:16:d7:de:3f:fb:e3:19:00:71:5d:
         7f:1b:89:a5:03:f9:ea:11:7c:68:51:c1:a6:18:ff:80:bc:d0:
         df:46:57:e6:23:e9:c1:f2:cd:a9:e0:4f:5a:fb:fc:1d:a3:5b:
         57:35:77:76:76:de:6d:2c:9c:ee:fd:1d:36:4c:bd:54:26:9a:
         36:7b:d4:63:25:02:d4:49:f3:33:a3:0d:53:22:8d:54:67:6b:
         84:de:f4:53:1a:7e:ee:63:43:61:bb:86:da:76:82:22:c1:a8:
         51:84:aa:36:af:a2:fb:9d:36:be:59:f1:6a:6b:cd:24:ea:e9:
         dc:7f:96:d3:ab:cb:c7:67:d8:16:af:0c:a1:99:89:85:ca:1c:
         2d:32:67:6f:19:26:8f:7d:22:6f:38:31:b2:f2:00:18:fb:12:
         26:4a:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:21:28 2026 by rpki-client