Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
File:                     3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (raw, json)
Hash identifier:          uCysVc1lML4BWmXNx9y7wZX5lR9FYwcoZzAp2MF74/A=
Subject key identifier:   18:A7:53:B1:42:8F:5B:91:6B:5C:63:B8:41:40:BA:8E:84:48:CF:BB
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       373F588B7B014FD920626DED48A8CDAD92607AFA
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa
Signing time:             Wed 25 Feb 2026 15:07:09 +0000
ROA not before:           Wed 25 Feb 2026 15:02:09 +0000
ROA not after:            Wed 24 Feb 2027 15:07:09 +0000
asID:                     266374
IP address blocks:        170.80.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:58:8b:7b:01:4f:d9:20:62:6d:ed:48:a8:cd:ad:92:60:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Feb 25 15:02:09 2026 GMT
            Not After : Feb 24 15:07:09 2027 GMT
        Subject: CN=18A753B1428F5B916B5C63B84140BA8E8448CFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:14:40:69:ec:f1:49:1a:27:57:cc:2f:0d:
                    52:49:b2:7a:9f:99:9e:9e:a8:c8:9f:ee:d1:9f:b2:
                    6a:d8:00:52:a7:a4:bc:e9:9f:da:87:93:dc:88:4c:
                    b4:5c:49:67:77:08:77:ec:3c:3d:29:5e:e7:14:b6:
                    ff:d3:a1:de:b4:3b:f5:62:9f:b3:4c:cc:ef:1f:40:
                    0a:19:d5:8a:6d:e8:58:19:33:1e:03:b9:59:a1:a2:
                    97:4e:e0:c2:d5:4d:f2:81:8a:9e:ed:61:94:a3:a1:
                    ad:c5:db:aa:f0:1c:d2:d4:2f:c9:fc:8d:1d:26:4a:
                    c9:83:58:df:2e:79:ea:38:24:17:50:43:f4:2a:8c:
                    d2:d8:0e:d0:da:a7:1a:f0:fa:6e:d2:dc:1d:31:27:
                    be:33:fb:cf:96:44:b0:96:83:f1:75:78:fb:52:59:
                    36:8a:93:50:92:3e:d3:88:01:a1:fe:be:b3:5d:dd:
                    76:6b:1c:aa:7d:1e:41:46:09:d3:68:ec:36:98:3f:
                    59:6e:a1:c6:1e:ab:8a:12:67:16:10:85:77:50:ce:
                    e1:6d:ab:9b:c8:6c:6d:c7:e5:f4:a1:34:9d:87:56:
                    a8:bd:d4:3c:1d:2e:48:5e:9a:d0:b6:b2:62:59:1a:
                    87:41:52:b7:03:47:b5:24:f4:c8:53:18:28:03:1b:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A7:53:B1:42:8F:5B:91:6B:5C:63:B8:41:40:BA:8E:84:48:CF:BB
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35312e302f32342d3234203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:2d:47:8e:a8:87:60:f7:ec:6d:b0:df:04:7e:c2:54:dc:
         14:8b:81:12:04:04:99:8f:05:f1:fe:03:6a:fb:79:0f:e9:02:
         6e:5c:9e:55:90:cd:9c:87:35:92:6e:48:43:69:81:b4:4d:a3:
         56:fe:c8:30:da:0b:22:df:ec:21:1e:02:a7:dc:ec:c7:31:94:
         c0:c4:54:01:3b:35:9c:d5:32:b8:df:8e:5b:15:c1:d6:be:63:
         0b:ca:85:2d:0d:56:0f:07:1d:7d:79:3f:5f:85:a9:c2:6c:0c:
         39:6c:d0:84:94:86:3c:74:36:b4:92:7f:6a:96:a6:49:0e:39:
         a0:a1:33:ee:04:61:b0:f6:97:50:9b:92:22:a0:4f:97:9a:4f:
         ab:ee:dd:ca:f7:c2:7f:a6:0a:a9:7b:c6:3e:0e:7b:7e:22:46:
         e0:bd:87:0f:af:6b:22:69:cc:17:b0:56:f8:9b:2c:0c:12:09:
         02:58:97:2a:29:28:35:f9:20:e7:fd:04:47:2a:47:91:61:73:
         60:11:a6:82:b0:1f:6a:e1:7a:09:98:e3:7b:7d:55:fa:06:50:
         06:40:78:a0:99:40:56:d3:6d:3c:ca:a4:3e:94:e3:65:1c:31:
         ed:47:e3:4a:46:5e:8f:63:f0:8a:10:cc:ed:e7:e3:b8:dc:30:
         c5:a1:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:01 2026 by rpki-client