Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa
File:                     3137302e3233332e34302e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          megl38blZxmvC5zU7QGSwFAjs4bqOkF5+WqgCxaJQSA=
Subject key identifier:   F5:F9:EE:17:AB:F0:F0:1B:16:52:EE:F9:28:AC:D5:15:4A:63:C8:C8
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       02457C45E45BE670241D86B34B0546B588B2D69C
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:36 +0000
ROA not before:           Mon 13 Apr 2026 13:43:36 +0000
ROA not after:            Mon 12 Apr 2027 13:48:36 +0000
asID:                     28146
IP address blocks:        170.233.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:45:7c:45:e4:5b:e6:70:24:1d:86:b3:4b:05:46:b5:88:b2:d6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:36 2026 GMT
            Not After : Apr 12 13:48:36 2027 GMT
        Subject: CN=F5F9EE17ABF0F01B1652EEF928ACD5154A63C8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:95:c6:60:72:a3:f2:90:a9:45:ec:d7:1f:
                    67:3a:e8:fe:c5:de:5d:74:04:81:fb:dc:98:28:d9:
                    55:ed:70:4a:20:5e:4d:1d:0d:69:51:ed:4b:a1:cc:
                    9e:3b:a2:92:f3:d2:8b:4f:b6:1f:1e:5f:9d:38:f3:
                    a4:4d:82:d2:e2:4b:e1:fe:88:a4:ec:87:96:a8:12:
                    e7:a1:dd:4d:18:ca:f5:81:37:10:9f:fc:9e:31:25:
                    3c:3f:c5:ec:bc:fc:81:99:b7:6b:65:81:d9:2a:d4:
                    ec:fa:71:2f:8b:82:29:7f:e5:41:8b:f8:5f:4f:2c:
                    28:56:b5:82:05:7f:5e:b1:91:59:fc:5e:37:00:ee:
                    c8:fd:01:c2:5d:b2:42:7a:53:1d:fb:14:b0:af:55:
                    db:72:35:6f:ae:62:1b:c3:f5:5d:b6:c4:a5:55:92:
                    5c:a7:22:6c:6c:09:6b:31:5f:4b:04:28:03:e3:d4:
                    19:0e:0b:8e:4a:3a:d8:9d:fd:10:a4:5f:c6:c0:cc:
                    dc:57:fe:66:68:d1:33:d6:1a:ff:1b:9e:b4:d7:54:
                    42:3f:44:83:60:88:78:ad:2f:18:7a:96:5e:d2:49:
                    6a:88:41:9f:83:04:af:81:57:0c:e8:77:e7:69:8e:
                    10:71:80:72:9a:ae:ab:1b:f7:22:60:7b:e5:df:c1:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:EE:17:AB:F0:F0:1B:16:52:EE:F9:28:AC:D5:15:4A:63:C8:C8
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:26:7c:ae:12:1a:fe:16:15:f2:9d:60:e6:e5:72:4f:e5:16:
         eb:f3:5b:89:55:85:e8:d0:d0:cc:1e:88:24:6e:80:1a:67:f7:
         f0:00:f9:7b:46:e5:37:7d:31:60:a6:80:78:a4:ba:e5:3c:dc:
         41:2a:ab:56:86:a6:03:aa:d3:6f:c9:9d:0d:f9:ef:22:c1:7e:
         59:08:e1:08:23:e9:62:5e:ae:d3:bc:7a:62:7e:8f:2e:11:26:
         80:ec:9f:93:2f:f7:4a:19:3c:df:77:8b:34:ac:86:7f:9c:25:
         8a:05:5c:57:31:24:3e:5e:8e:4b:a4:65:d0:8f:63:d8:a9:36:
         d5:b4:ef:b2:0a:24:0d:18:20:20:6f:99:07:2f:09:fe:47:95:
         69:fa:3d:04:2a:a0:c9:00:f5:2d:e8:54:11:cb:48:04:d9:a6:
         3e:af:d2:48:b8:ca:65:9a:76:36:04:d7:8b:47:d4:c8:0d:8b:
         55:67:69:d3:74:1f:e8:0f:ec:74:6d:ae:a8:11:67:42:cf:36:
         1d:a8:40:1e:b4:22:9b:d6:35:51:50:1a:c0:4b:72:26:dd:8f:
         db:17:03:55:3c:76:28:34:e5:91:a1:57:f6:84:5b:05:2d:48:
         b8:18:3d:b5:b6:5c:75:c9:46:0f:c5:da:ad:8b:f3:6e:ae:a6:
         f0:2f:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:36:16 2026 by rpki-client