Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa
File:                     3137302e37382e33312e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          MWDMjiMUn4Kf6iPat91nt2NRzFgP5AyHabE7IhS62W8=
Subject key identifier:   E3:CF:03:7D:55:E0:37:5A:E8:70:78:A5:39:ED:28:EE:1C:DE:AD:8A
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       1552EBE42ABF777B5184A5A512489624F2FA2A5B
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa
Signing time:             Thu 16 Apr 2026 00:33:40 +0000
ROA not before:           Thu 16 Apr 2026 00:28:40 +0000
ROA not after:            Thu 15 Apr 2027 00:33:40 +0000
asID:                     52587
IP address blocks:        170.78.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:52:eb:e4:2a:bf:77:7b:51:84:a5:a5:12:48:96:24:f2:fa:2a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr 16 00:28:40 2026 GMT
            Not After : Apr 15 00:33:40 2027 GMT
        Subject: CN=E3CF037D55E0375AE87078A539ED28EE1CDEAD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:f3:ec:17:42:76:7b:87:4a:2d:e8:43:dd:
                    55:45:c7:8a:24:3e:8b:fa:c0:f4:f9:3b:8a:93:21:
                    fa:39:a9:6f:9b:f3:24:91:d7:3d:76:bc:37:1f:9b:
                    79:79:c8:ab:9d:d4:70:a7:c5:92:dd:56:b6:90:3d:
                    ea:b4:7d:83:35:0b:d0:4f:b5:fc:ae:03:a2:b7:d9:
                    e4:8d:bf:d7:24:e5:3b:46:f5:8f:d8:50:6a:c1:4d:
                    ae:23:19:df:cd:96:26:a8:ca:10:5f:e9:8a:c0:40:
                    7a:68:b5:ab:36:3d:1e:45:91:47:a9:2a:e9:c6:36:
                    90:69:10:85:28:4f:15:1a:f2:03:96:6d:fb:2f:ea:
                    ae:98:fa:43:b1:31:01:a1:02:a1:d9:e7:da:0f:20:
                    ab:9c:50:d6:67:b3:13:7e:f5:79:4c:63:6c:10:c7:
                    23:d7:73:7b:9b:ab:b6:68:ae:94:a2:16:ed:9f:3d:
                    c7:33:a9:90:d5:e0:9d:70:d4:dd:e7:20:a9:4e:c4:
                    f6:cb:52:71:77:d8:cb:27:be:02:67:97:87:0c:98:
                    a5:e4:f7:44:da:32:7b:20:e0:bb:95:2f:30:19:51:
                    12:f8:4d:16:43:93:9b:a0:40:ac:f7:5d:17:9b:62:
                    8c:2b:fa:e3:97:b0:1c:ad:9c:2f:e1:cd:da:b1:14:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:03:7D:55:E0:37:5A:E8:70:78:A5:39:ED:28:EE:1C:DE:AD:8A
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e33312e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:f1:2c:f1:e4:90:69:98:fe:46:3a:58:b9:f6:f4:ae:7f:
         07:02:ff:50:33:b7:51:a8:a2:78:2c:23:d8:27:26:78:9d:c3:
         95:96:73:05:e0:11:b1:10:ff:b2:e8:90:bc:81:9d:9d:b5:02:
         6c:f6:59:36:f2:68:af:78:45:2d:2a:ab:9f:02:d7:33:0f:9b:
         8a:9e:1a:2d:3d:9d:5d:5c:a5:dc:09:ef:9a:f5:a9:73:b1:5c:
         1a:90:54:80:65:85:0c:11:bd:99:02:80:7d:1a:08:31:a7:a5:
         06:2f:03:7e:32:19:3b:29:20:77:da:1b:99:e2:69:6f:8a:8a:
         e0:a5:32:79:23:a7:09:71:35:48:9f:80:06:96:a6:45:37:30:
         f5:36:66:14:65:5a:a9:d4:be:59:f1:eb:73:62:7f:f4:6c:77:
         5b:5f:56:07:de:ca:e0:bb:a8:ae:40:7b:21:2f:43:54:0a:cd:
         d9:de:9c:d4:c5:a5:70:98:f1:b2:56:4f:7b:fd:cc:27:3f:92:
         ae:12:c2:84:22:72:34:23:cc:d0:16:d4:d1:61:bc:a6:aa:47:
         2a:8c:d4:1f:1b:8f:5a:b5:1b:91:47:2a:ab:92:9a:7a:6f:f2:
         18:d9:7f:75:7e:73:0f:0e:89:7b:d1:6e:c3:b7:58:c1:68:87:
         31:e8:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:29:39 2026 by rpki-client