Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130372e302f32342d3234203d3e20323636333535.roa
File:                     3137302e3233392e3130372e302f32342d3234203d3e20323636333535.roa (raw, json)
Hash identifier:          dHkJGdpEbTqzudMTiOI0poFAg7Td4e6XU7GZZlANoqY=
Subject key identifier:   9C:13:C9:52:81:89:51:F2:C9:6C:57:35:5E:8B:BB:0B:B0:03:13:47
Certificate issuer:       /CN=A594B4C7F78F1FE8A3BA855D39DD02A83730306B
Certificate serial:       6442330475CA5455680E719F87C29EC821FEB044
Authority key identifier: A5:94:B4:C7:F7:8F:1F:E8:A3:BA:85:5D:39:DD:02:A8:37:30:30:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130372e302f32342d3234203d3e20323636333535.roa
Signing time:             Mon 27 Jul 2026 22:58:36 +0000
ROA not before:           Mon 27 Jul 2026 22:53:36 +0000
ROA not after:            Mon 26 Jul 2027 22:58:36 +0000
asID:                     266355
IP address blocks:        170.239.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.crl
                          rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:42:33:04:75:ca:54:55:68:0e:71:9f:87:c2:9e:c8:21:fe:b0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A594B4C7F78F1FE8A3BA855D39DD02A83730306B
        Validity
            Not Before: Jul 27 22:53:36 2026 GMT
            Not After : Jul 26 22:58:36 2027 GMT
        Subject: CN=9C13C952818951F2C96C57355E8BBB0BB0031347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:c1:a4:b9:c8:67:48:72:a1:8c:3d:77:67:
                    06:58:6e:c1:9a:f2:55:29:69:2e:b3:0f:22:3b:e7:
                    5d:68:62:9e:97:7e:bf:78:64:95:79:07:75:2a:76:
                    b4:62:9c:e5:8a:e7:98:59:e7:de:f9:46:85:9a:3f:
                    28:d9:e7:58:6c:5b:c8:f5:e5:94:15:2b:55:f5:8a:
                    c8:3c:54:6c:30:b0:81:e9:4b:eb:0d:c5:ad:37:56:
                    d9:ee:4a:e4:7c:43:f6:2f:f3:5f:4d:4b:ce:14:64:
                    fa:0a:72:90:bd:07:7e:e4:e6:52:b7:33:e8:98:88:
                    09:13:d0:93:d5:58:f3:cb:52:a9:b3:7d:2a:85:ac:
                    a7:6b:98:54:6c:43:34:13:69:63:6f:b6:ba:ad:ba:
                    96:e2:17:73:0a:c7:44:7b:9e:52:78:90:26:cd:7b:
                    40:18:83:e7:85:45:46:0a:80:51:65:71:4d:d4:0c:
                    3a:c3:8e:82:f8:cb:5e:17:03:f2:9c:5a:41:85:b7:
                    6c:5d:79:0b:29:9e:06:6b:97:19:a4:f6:6d:b7:df:
                    63:c0:b3:c9:2b:8c:03:f3:52:1e:00:c3:10:7b:0f:
                    63:7a:6b:be:32:51:a7:85:c4:09:a5:a2:ef:dc:62:
                    d6:dc:23:d8:d1:c9:c4:2b:3f:54:0f:d5:44:5a:75:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:C9:52:81:89:51:F2:C9:6C:57:35:5E:8B:BB:0B:B0:03:13:47
            X509v3 Authority Key Identifier:
                keyid:A5:94:B4:C7:F7:8F:1F:E8:A3:BA:85:5D:39:DD:02:A8:37:30:30:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130372e302f32342d3234203d3e20323636333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:03:91:ea:02:5a:12:72:48:aa:a1:85:fd:e2:d6:f9:9b:a7:
         07:09:f8:32:e2:77:d1:f9:86:78:69:bb:7c:11:38:b8:f0:e1:
         1d:9b:0b:56:68:b8:10:e7:7d:d1:21:af:51:6d:8b:bd:38:9e:
         7f:cf:ca:dd:de:78:51:53:88:22:57:b4:fc:29:2e:7e:63:fa:
         a5:e9:79:6b:e1:4d:2e:26:f5:44:7c:88:c1:34:e9:76:00:b4:
         ba:85:0e:e4:3d:e1:88:15:bd:2d:f1:8e:8e:51:d3:cf:23:f1:
         71:21:f9:5c:41:01:f8:ca:b9:76:96:ab:82:83:be:d2:2b:af:
         f7:71:89:14:a2:c4:25:01:8f:ab:54:c1:c2:f7:3d:59:1a:c7:
         1c:73:fb:ee:9c:aa:41:91:ac:14:f8:2f:ca:bc:4b:02:fb:6f:
         3e:58:0d:3e:12:ad:77:c0:c6:70:49:95:15:d6:bc:84:1b:44:
         bf:da:ff:38:6d:a9:2e:4c:35:f8:39:37:1c:c3:38:e5:c1:1a:
         5a:e7:fe:1a:9f:3d:2d:56:a5:98:75:83:e0:2a:b3:dc:e4:16:
         db:f8:b4:04:28:d6:83:5e:3b:b0:cc:85:75:10:66:ce:86:bc:
         5c:7c:5f:ae:20:05:a4:8e:5b:a4:9b:94:8d:a7:18:13:3b:7f:
         bc:cf:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:17 2026 by rpki-client