Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37382e302f32342d3234203d3e20323636303135.roa
File:                     3137302e3234352e37382e302f32342d3234203d3e20323636303135.roa (raw, json)
Hash identifier:          OZ3W7YipeG13+AcqUm4BWwJuw/HbWVz44OZQMXWL9Ro=
Subject key identifier:   4A:04:49:94:5E:5D:5B:D8:2F:14:E0:06:56:9B:AB:53:F6:15:6E:8F
Certificate issuer:       /CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
Certificate serial:       09B7EC7CA445FD2591D4DD2D37405F7F1043ABED
Authority key identifier: F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37382e302f32342d3234203d3e20323636303135.roa
Signing time:             Wed 15 Apr 2026 14:47:51 +0000
ROA not before:           Wed 15 Apr 2026 14:42:51 +0000
ROA not after:            Wed 14 Apr 2027 14:47:51 +0000
asID:                     266015
IP address blocks:        170.245.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 04:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:ec:7c:a4:45:fd:25:91:d4:dd:2d:37:40:5f:7f:10:43:ab:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
        Validity
            Not Before: Apr 15 14:42:51 2026 GMT
            Not After : Apr 14 14:47:51 2027 GMT
        Subject: CN=4A0449945E5D5BD82F14E006569BAB53F6156E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:ca:50:50:c5:e2:a2:cd:e2:5e:88:d7:e1:
                    8e:49:b3:f7:5f:e7:da:c7:23:82:3b:5d:df:96:2c:
                    66:e6:28:d3:7e:ef:6d:63:81:71:47:42:ec:7f:0e:
                    9a:6d:68:f8:51:ac:64:11:e0:5d:6b:35:79:69:ff:
                    8b:ec:96:52:a8:b2:23:20:04:39:53:2e:57:be:7f:
                    6f:15:ed:60:f4:b4:85:6b:b6:bc:e2:b1:fc:d2:0b:
                    36:01:b7:2b:d0:d0:eb:08:d5:99:c0:c9:b5:4d:8e:
                    6c:c8:e4:ed:5f:cd:52:a4:2d:26:4c:63:36:12:69:
                    2c:0d:c0:30:4b:96:da:fe:e9:85:55:2b:fe:ef:54:
                    f3:dc:72:67:7a:34:38:64:b6:9a:00:81:5c:4a:76:
                    3f:37:18:ea:b7:5e:4c:75:d7:47:bb:36:f4:46:e8:
                    43:c3:06:4f:33:49:fe:de:28:73:f5:ec:6f:82:05:
                    10:64:01:ac:5b:46:dd:51:22:0a:46:8d:71:2b:34:
                    c5:88:28:ca:57:b8:48:10:e1:37:fe:0b:4f:91:77:
                    e4:a3:22:75:d3:9e:5b:84:f7:30:d3:1e:58:fb:ab:
                    d7:44:06:50:2a:53:aa:16:12:ef:c8:90:36:ff:a5:
                    7a:ac:2a:c9:5b:ce:7a:56:31:c4:27:d2:55:d2:19:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:49:94:5E:5D:5B:D8:2F:14:E0:06:56:9B:AB:53:F6:15:6E:8F
            X509v3 Authority Key Identifier:
                keyid:F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37382e302f32342d3234203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:81:0d:af:a5:e8:6d:e5:3e:aa:ae:14:7c:8b:c2:c4:84:aa:
         87:b0:a5:36:d1:5a:a7:54:8e:42:92:01:31:3b:96:62:9a:1e:
         2f:7f:33:d1:a6:54:4f:cb:3d:af:d3:f1:d2:a9:39:3a:07:54:
         0a:2d:7e:f0:ff:2a:49:ed:0b:e5:b2:42:5e:a3:97:80:d2:c8:
         3b:68:39:82:1a:ab:7a:66:2e:ff:3f:42:0f:c8:21:3e:29:c0:
         cf:1f:cf:66:bc:c4:4c:c7:e5:85:2d:55:23:1f:db:ff:f1:c0:
         cb:a3:73:1a:6f:a3:d3:3f:d5:f7:1a:92:92:de:5f:21:7e:2c:
         df:8b:53:f5:a6:b2:64:1a:b7:3b:43:be:58:d7:1c:1b:15:5e:
         48:25:3e:95:2a:f9:28:f9:ac:ab:0b:af:11:2b:96:72:db:da:
         42:b7:1b:18:97:39:df:49:4c:ca:ad:80:f4:70:79:44:2f:c6:
         dd:d0:30:85:38:85:90:ad:99:f8:57:72:71:14:09:ef:04:fa:
         6b:57:d8:f6:c5:d2:e4:4a:36:56:23:92:a5:6c:1d:23:f0:b8:
         ff:e7:b2:ad:b5:05:6d:be:6e:05:cb:9d:0f:ba:a9:5a:67:46:
         3c:d3:14:d8:a9:4b:6f:29:3b:bf:c2:2f:ca:b5:99:1a:02:89:
         bd:3a:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:18 2026 by rpki-client