Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa
File:                     3137302e302e3230322e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          lX5lcWGg6a8Ap7cgGMihDPd9oh3qfl8CjuJspjYiHo4=
Subject key identifier:   CB:03:CA:8D:6A:6F:1A:83:FB:F9:5E:98:30:68:71:E0:56:E8:57:36
Certificate issuer:       /CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
Certificate serial:       29F9C03DD20AD874D11048A331C5D75616FEDE87
Authority key identifier: 73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa
Signing time:             Mon 26 Oct 2026 17:16:09 +0000
ROA not before:           Mon 26 Oct 2026 17:11:09 +0000
ROA not after:            Mon 25 Oct 2027 17:16:09 +0000
asID:                     263427
IP address blocks:        170.0.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 11:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:c0:3d:d2:0a:d8:74:d1:10:48:a3:31:c5:d7:56:16:fe:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
        Validity
            Not Before: Oct 26 17:11:09 2026 GMT
            Not After : Oct 25 17:16:09 2027 GMT
        Subject: CN=CB03CA8D6A6F1A83FBF95E98306871E056E85736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:41:84:17:fb:fd:db:fa:dc:5d:70:e5:99:
                    fd:e1:82:94:b0:90:3d:15:fd:53:39:70:84:fd:f6:
                    28:6d:2e:f4:f0:0d:c0:8f:c4:5e:00:c0:b3:cb:c2:
                    7e:b1:5a:6d:eb:b4:9c:8b:4e:b5:e0:40:ec:2b:9c:
                    7b:c6:0c:63:e6:ab:76:cf:a3:fa:25:a4:b4:10:93:
                    3f:67:55:8d:f0:62:d6:0b:88:06:99:90:04:85:57:
                    75:a0:22:eb:d6:82:5e:4f:5b:54:ee:44:2e:95:84:
                    d3:e9:a6:ed:82:65:d2:ed:46:6a:46:da:b9:4f:c8:
                    cf:4b:06:72:6a:38:a4:af:87:4a:33:46:f2:30:02:
                    b9:f0:ef:8a:14:56:3a:f8:8d:1f:df:b7:49:9c:43:
                    4f:d3:4f:d9:f1:8f:fc:12:1b:47:76:ec:0f:6b:d4:
                    db:aa:25:6b:61:4d:a4:a8:5c:41:f3:61:e6:7b:3e:
                    30:02:05:4e:fa:d4:73:08:80:72:d0:96:0f:e1:f1:
                    40:48:00:61:cc:eb:54:3d:23:82:64:2b:81:9d:18:
                    82:15:9a:05:56:54:58:cd:48:df:38:d7:43:b3:4d:
                    da:72:be:bf:fb:27:27:ff:4b:a1:9d:91:c4:43:3b:
                    37:f7:74:79:55:2d:de:6d:97:d6:73:97:b2:4f:b5:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:CA:8D:6A:6F:1A:83:FB:F9:5E:98:30:68:71:E0:56:E8:57:36
            X509v3 Authority Key Identifier:
                keyid:73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:8f:25:01:18:fe:99:f4:b2:11:12:45:8c:32:e1:77:4b:
         4a:d8:a3:02:a1:8d:d5:ec:96:61:9f:03:ec:1c:b9:e7:13:53:
         34:50:7c:75:ea:2f:ec:52:dc:7f:bb:45:e4:67:a0:9e:ca:2b:
         9c:b3:48:08:34:50:73:9f:9e:7e:3c:c1:5a:83:01:c4:ab:7f:
         88:76:bd:17:41:85:cc:e4:49:d8:d0:eb:37:78:7f:b0:b4:b5:
         a1:b9:0c:e8:fd:d5:aa:59:f5:0d:ba:ab:9c:64:59:62:0d:b9:
         cd:b2:c4:7d:b1:86:0e:a4:cd:b0:40:13:ba:cf:15:14:83:1b:
         fb:e4:d2:b1:95:9e:16:35:f9:71:96:53:c4:a9:3e:1d:08:7c:
         b5:ea:97:b3:26:4a:14:31:8e:3e:66:59:b4:e3:42:23:a9:04:
         de:46:92:3e:3d:1e:b2:da:36:5c:88:32:51:89:8d:ce:a4:02:
         9b:58:f7:9b:67:32:9f:e8:77:c7:94:ae:64:d3:0b:c9:2f:c2:
         fd:db:6e:21:0e:f7:f4:c5:df:fe:67:6c:8a:12:cc:cd:25:d3:
         2e:2b:3c:54:ff:ab:47:cf:d2:dc:d4:9d:b4:a2:72:30:21:76:
         ed:00:df:fd:4e:ca:0a:4f:ca:8b:aa:2c:95:5f:6a:db:ef:f5:
         16:2b:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:38:29 2026 by rpki-client