Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37392e302f32342d3234203d3e20323636303135.roa
File:                     3137302e3234352e37392e302f32342d3234203d3e20323636303135.roa (raw, json)
Hash identifier:          BaFOSbNCFzEsYZ8N+BMm8KvQdPW47vK8c4+75tHreQA=
Subject key identifier:   0A:36:9E:6E:54:38:84:43:C8:F0:06:F7:6E:EF:A5:3F:C8:F3:CA:1D
Certificate issuer:       /CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
Certificate serial:       5A47DBF2A3E1B10544EF72C9253E45C5B1231438
Authority key identifier: F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37392e302f32342d3234203d3e20323636303135.roa
Signing time:             Wed 15 Apr 2026 14:47:46 +0000
ROA not before:           Wed 15 Apr 2026 14:42:46 +0000
ROA not after:            Wed 14 Apr 2027 14:47:46 +0000
asID:                     266015
IP address blocks:        170.245.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 04:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:47:db:f2:a3:e1:b1:05:44:ef:72:c9:25:3e:45:c5:b1:23:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
        Validity
            Not Before: Apr 15 14:42:46 2026 GMT
            Not After : Apr 14 14:47:46 2027 GMT
        Subject: CN=0A369E6E54388443C8F006F76EEFA53FC8F3CA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:54:52:33:44:36:49:73:cf:97:e9:5f:5c:
                    4f:9d:30:61:8e:ae:b7:da:65:b4:12:cb:ab:6e:61:
                    6e:8c:93:89:49:50:50:ce:7e:43:cc:30:34:f1:ea:
                    c1:a0:11:22:41:2e:88:18:15:d2:da:5d:c0:5b:9a:
                    90:a2:77:ff:2e:84:d9:8f:c2:b2:7f:5a:74:d0:31:
                    10:9f:01:5f:28:b3:6e:06:bd:5c:ed:61:fa:f6:9c:
                    9d:9b:6f:3b:2f:66:d4:f9:81:1e:ce:f6:2d:ef:a3:
                    b0:48:70:29:2d:ed:1e:ff:ed:8e:e7:dc:42:25:84:
                    33:1d:6c:16:99:9e:c2:95:58:1c:49:77:d3:6e:88:
                    d2:ff:75:33:3c:e2:3a:05:3e:82:79:d6:10:52:9b:
                    05:61:1b:17:d5:77:26:0e:8b:57:ef:3d:c6:44:9a:
                    15:89:ac:ef:01:1f:19:44:fd:fb:08:ed:d5:15:99:
                    a4:9e:90:02:cf:e9:3f:2a:11:6b:56:f3:88:63:28:
                    82:14:a7:a2:2c:f5:e4:9a:58:bd:a5:c4:66:98:25:
                    6c:04:8c:dc:5b:98:f3:19:2b:7c:85:ab:ac:7c:ea:
                    5d:28:4a:2b:86:88:a8:6e:e1:66:c9:11:ea:04:79:
                    3b:eb:0c:e4:37:79:92:52:a6:9b:76:29:2c:85:e3:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:36:9E:6E:54:38:84:43:C8:F0:06:F7:6E:EF:A5:3F:C8:F3:CA:1D
            X509v3 Authority Key Identifier:
                keyid:F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37392e302f32342d3234203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:28:14:13:1d:6d:d5:46:b1:bb:88:f3:0e:28:a6:9f:11:
         09:92:96:cd:20:94:ce:be:f6:40:cb:0d:04:d5:fc:1c:99:84:
         4e:2f:f1:0a:f5:c4:d4:39:c1:a7:0e:6b:70:05:c1:a7:2e:c1:
         3e:38:8d:52:5f:5b:9a:14:05:7f:47:bb:d9:82:62:eb:64:96:
         99:be:81:83:30:e8:90:8e:65:93:cc:ac:f8:34:70:ea:3a:a4:
         5a:7c:40:2b:87:db:40:fc:c7:8f:8f:07:09:05:de:fc:e5:de:
         02:e2:e9:49:4f:07:dd:4d:a6:e0:0f:8c:8a:74:ad:fa:38:8b:
         4d:77:30:25:00:cd:9b:e2:97:29:4d:9d:ae:d8:01:1e:69:dc:
         c2:00:27:de:4d:1c:72:fe:5f:ff:fa:08:10:3c:8a:cf:6e:e1:
         95:27:53:da:c1:cd:0c:dc:a2:38:63:a1:dc:b8:ab:c1:f7:bd:
         42:a2:12:48:24:83:dd:ec:e2:b7:ac:45:cd:29:6a:94:6b:30:
         65:c1:38:db:b5:15:7c:eb:a6:37:40:68:aa:99:88:63:8c:2b:
         9c:78:ca:bb:c6:37:49:a0:06:21:d2:83:bd:40:32:c8:02:1a:
         85:99:8e:c7:9a:f1:7a:f9:6b:87:2f:03:55:d6:68:39:17:5e:
         45:17:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:17 2026 by rpki-client