Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          4SHb55z5RYKv3b9zt/DL+Avw47KfCE3hmg+wVfBxb2Q=
Subject key identifier:   A7:74:42:AA:B7:1E:64:FE:F9:15:15:78:81:BF:D9:CD:5B:F7:9E:8C
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       72A36D4D7A3DD2FF6E7626DA075170E38B35D523
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 25 Feb 2026 15:07:09 +0000
ROA not before:           Wed 25 Feb 2026 15:02:09 +0000
ROA not after:            Wed 24 Feb 2027 15:07:09 +0000
asID:                     266374
IP address blocks:        170.80.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a3:6d:4d:7a:3d:d2:ff:6e:76:26:da:07:51:70:e3:8b:35:d5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Feb 25 15:02:09 2026 GMT
            Not After : Feb 24 15:07:09 2027 GMT
        Subject: CN=A77442AAB71E64FEF915157881BFD9CD5BF79E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:1c:33:91:38:db:d4:5c:1f:34:04:44:79:
                    10:c1:9a:4d:a9:91:b3:4f:c1:df:7e:e8:41:0b:7a:
                    22:b8:7a:9a:d2:8d:15:4a:54:50:c7:41:b9:22:90:
                    5e:7d:29:4f:ff:8f:e5:9a:5e:97:cb:22:35:90:d1:
                    ec:09:60:4e:cc:97:3c:7a:50:28:27:0b:c4:8e:63:
                    33:9f:cd:d8:f2:6e:84:38:6d:48:da:a0:4a:ad:4f:
                    ac:5e:20:6a:72:86:9e:67:fd:7d:c5:54:ec:b6:04:
                    69:8a:83:f4:fc:b8:4f:17:4d:7b:66:06:2a:5c:18:
                    a8:63:a7:f7:3f:8f:eb:ea:d1:f2:a2:67:92:98:46:
                    57:ed:44:6e:8d:ad:a0:67:08:0f:01:9c:95:3d:91:
                    08:25:6f:b0:ee:7f:90:8d:30:db:21:90:89:5f:02:
                    6d:09:82:52:47:6c:16:9b:b8:99:b0:17:2f:71:7e:
                    1c:bf:89:01:83:7e:13:fc:77:5b:72:4d:9c:09:20:
                    07:c0:c3:5f:2c:31:6d:61:43:07:dd:43:5f:99:be:
                    c5:22:46:c9:bf:f7:9d:f7:06:7d:8b:e0:30:f5:74:
                    8d:e5:82:2b:72:0e:fc:32:c5:e9:75:1b:13:e9:b3:
                    d3:1a:88:db:8f:5b:00:73:2b:d9:51:56:ee:9b:6f:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:42:AA:B7:1E:64:FE:F9:15:15:78:81:BF:D9:CD:5B:F7:9E:8C
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:6c:6e:1a:37:6f:9c:d4:8f:52:e2:88:ca:01:c3:ea:39:
         c7:3c:21:59:55:f4:98:ed:da:d6:cd:3d:cd:80:90:26:32:de:
         8a:07:67:b3:42:f7:6e:2d:73:42:51:9e:09:9b:d7:f4:5e:ef:
         61:7e:b8:bc:06:f0:9d:68:b9:7b:b8:96:34:af:06:fe:e4:e4:
         90:3c:2a:1b:ee:3c:e1:51:04:5b:d6:ee:78:84:29:9d:63:3f:
         e1:20:78:67:43:2a:64:f1:f7:b5:d0:a9:96:4a:ef:b2:50:80:
         72:f0:3b:4f:44:5c:47:df:df:92:f0:f3:a4:b8:32:80:6f:16:
         89:ea:3d:c2:68:37:1d:2d:88:95:7b:7e:55:bc:4d:9b:43:bd:
         e1:55:5d:f6:9f:c9:bd:50:37:d8:c2:5e:fc:12:14:c9:92:ea:
         11:44:c3:93:86:99:4f:e4:d1:04:8c:38:af:7e:27:11:d5:3a:
         10:54:04:60:0f:97:e7:90:c1:68:71:b8:a9:d3:26:e8:b5:4e:
         51:9b:4b:28:fb:ec:3a:c7:c3:f0:e8:09:e8:ce:97:f1:67:62:
         24:da:a5:17:8d:c6:3c:5e:14:a7:82:21:c0:0c:96:db:fd:53:
         b2:7d:13:1d:49:ac:3b:cf:ab:23:ba:e5:52:b1:1f:6b:cf:45:
         df:42:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:26 2026 by rpki-client