Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
File:                     3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa (raw, json)
Hash identifier:          6WHl2gpAiKtPZQz2EZqSG5lfDKWo+4O/Erua28jVM10=
Subject key identifier:   3A:59:95:60:75:08:27:B2:57:9F:CC:CD:E5:8B:48:8F:32:E9:8A:97
Certificate issuer:       /CN=33E54093EA95B8CA5B8492157E6A7A62F1D844C1
Certificate serial:       0D643513B335FFB1487BF911272B4A5D2877ABDA
Authority key identifier: 33:E5:40:93:EA:95:B8:CA:5B:84:92:15:7E:6A:7A:62:F1:D8:44:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa
Signing time:             Mon 01 Jun 2026 18:51:54 +0000
ROA not before:           Mon 01 Jun 2026 18:46:54 +0000
ROA not after:            Mon 31 May 2027 18:51:54 +0000
asID:                     265106
IP address blocks:        170.254.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:64:35:13:b3:35:ff:b1:48:7b:f9:11:27:2b:4a:5d:28:77:ab:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E54093EA95B8CA5B8492157E6A7A62F1D844C1
        Validity
            Not Before: Jun  1 18:46:54 2026 GMT
            Not After : May 31 18:51:54 2027 GMT
        Subject: CN=3A599560750827B2579FCCCDE58B488F32E98A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:ce:04:92:fa:44:55:8a:14:68:66:ce:af:
                    a3:0a:83:d4:9b:4a:31:71:8b:3c:87:53:81:12:af:
                    0c:0b:84:d6:70:1a:72:ed:fd:c1:9d:73:57:e1:6f:
                    64:66:cc:ac:a7:60:65:ae:5c:18:38:aa:4b:a9:dc:
                    12:d2:30:63:9c:ef:c6:8e:76:d0:35:b1:84:7f:3c:
                    ef:c4:41:20:16:f7:a9:f9:e5:a6:22:46:22:9a:a6:
                    a8:83:69:9f:a2:e4:c7:03:86:8a:34:e2:bd:f4:b1:
                    ea:61:64:54:eb:1b:75:44:6f:89:8f:84:41:cd:84:
                    23:9a:1e:4d:13:04:f1:ba:ef:dc:9f:96:85:3d:07:
                    fe:96:fb:d8:3b:72:2b:f6:3b:7e:6c:5e:97:aa:b4:
                    cf:55:0a:c3:2d:2e:db:72:d9:db:34:6e:08:97:cd:
                    c2:a9:7e:f1:7d:84:80:b4:01:75:95:80:33:cf:1c:
                    68:67:53:9e:dc:70:5a:c1:44:82:4a:2a:0a:77:e4:
                    92:a5:cc:8c:52:24:73:35:d9:d5:c6:d1:2e:ba:da:
                    47:56:5e:8e:90:61:f4:48:31:ad:12:cc:de:46:fd:
                    d7:36:31:6b:cf:58:5b:42:a8:5e:fd:ef:6e:da:72:
                    78:1c:ef:14:d4:be:5c:9e:17:13:52:78:cf:be:79:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:95:60:75:08:27:B2:57:9F:CC:CD:E5:8B:48:8F:32:E9:8A:97
            X509v3 Authority Key Identifier:
                keyid:33:E5:40:93:EA:95:B8:CA:5B:84:92:15:7E:6A:7A:62:F1:D8:44:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133332e302f32342d3234203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:75:b2:1f:22:fd:73:37:fb:16:64:d8:10:54:29:85:c9:37:
         65:d4:43:6c:e5:65:8d:08:86:a1:33:1b:db:8d:f1:da:7c:6d:
         cf:04:ba:fa:71:42:bc:1e:aa:3b:16:da:03:ff:5b:48:92:23:
         d6:7a:d6:32:f7:83:0b:e6:c6:cc:81:e2:ff:6b:ec:e4:91:3f:
         cb:14:ea:c8:90:60:2a:29:cd:db:4d:ab:6a:05:f1:84:dd:63:
         d1:7a:c1:23:cd:2e:49:92:f9:45:b1:cf:19:f1:5c:de:b1:31:
         c1:5c:a2:a0:66:c8:05:c9:01:b3:60:e4:65:2d:7f:0e:d8:a0:
         ef:b6:a7:89:93:d9:ba:f5:fa:ef:60:bf:4b:ea:bf:b5:0a:4d:
         f1:a5:83:2c:d6:03:23:20:5c:c9:51:88:57:fd:23:ae:ad:fc:
         2c:b1:c2:7c:61:e0:11:34:42:86:dc:83:9a:84:68:ec:b6:7d:
         65:da:bf:15:b3:14:d2:76:d6:bb:84:28:d6:b3:7a:90:03:7d:
         f4:82:2f:7e:d9:04:aa:08:90:05:41:de:dc:f3:16:be:1e:8c:
         2e:f2:ac:6d:55:ed:86:8e:9f:aa:e7:38:76:19:6c:c0:dc:1f:
         72:31:bf:73:a2:e8:a0:20:e1:eb:49:8f:07:ba:e1:2e:f8:25:
         ed:7c:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:16:58 2026 by rpki-client