Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3232203d3e20323636343334.roa
File:                     3137302e38322e35322e302f32322d3232203d3e20323636343334.roa (raw, json)
Hash identifier:          wWeWU05MOOj6hMpby+AwEgMIu10o1tRd4+LBsSZDgFE=
Subject key identifier:   F5:ED:09:A0:E9:7A:CF:26:F3:41:81:4B:9B:C7:05:E3:88:7C:8E:B7
Certificate issuer:       /CN=224F89CF4DCD6D8502746106CEF010C054C45395
Certificate serial:       1FE59F52B3507A25729631C63275E01158EE9007
Authority key identifier: 22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3232203d3e20323636343334.roa
Signing time:             Mon 23 Feb 2026 14:17:45 +0000
ROA not before:           Mon 23 Feb 2026 14:12:45 +0000
ROA not after:            Mon 22 Feb 2027 14:17:45 +0000
asID:                     266434
IP address blocks:        170.82.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.crl
                          rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:9f:52:b3:50:7a:25:72:96:31:c6:32:75:e0:11:58:ee:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=224F89CF4DCD6D8502746106CEF010C054C45395
        Validity
            Not Before: Feb 23 14:12:45 2026 GMT
            Not After : Feb 22 14:17:45 2027 GMT
        Subject: CN=F5ED09A0E97ACF26F341814B9BC705E3887C8EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:37:1e:42:b9:55:ad:28:27:c6:f4:50:16:
                    eb:0a:23:61:8b:13:76:35:6b:d3:de:1a:81:50:d2:
                    29:5a:d7:22:21:a0:3f:cc:7b:15:e0:5f:de:01:27:
                    34:1b:e4:9b:81:a1:a4:4a:d8:55:76:3a:71:a3:63:
                    f0:73:2d:ba:6c:ef:b5:13:1d:94:a9:e4:4c:50:84:
                    f3:64:7b:59:d7:56:7b:e8:05:75:32:45:2a:fe:66:
                    5f:39:16:bf:c3:0b:18:d2:27:1b:22:7e:18:b2:a4:
                    24:58:8f:4a:4c:1b:57:9a:3d:92:14:1f:41:3b:f5:
                    fd:90:2b:8c:73:51:58:0f:1f:2c:1e:ba:73:e4:f8:
                    ce:63:50:7a:f8:25:22:65:fc:1c:11:a3:fb:85:02:
                    5c:6e:6b:e6:77:1b:d0:fc:48:e9:24:8b:76:ed:96:
                    1b:d0:23:82:14:bf:91:19:cc:81:52:11:f9:bb:9a:
                    ff:7f:a8:27:c0:57:7e:4d:d3:79:91:72:e8:53:44:
                    78:6a:7b:25:e6:7a:f3:b9:ab:db:53:66:8d:c5:6c:
                    47:88:2b:1f:f0:c3:f3:39:b6:8a:9a:4e:0c:9e:b8:
                    ca:36:a1:9a:1c:3a:cc:17:3b:d4:ae:42:d4:ad:03:
                    1d:c8:9e:6b:0a:b5:2a:80:59:da:31:04:9d:31:4f:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:09:A0:E9:7A:CF:26:F3:41:81:4B:9B:C7:05:E3:88:7C:8E:B7
            X509v3 Authority Key Identifier:
                keyid:22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32322d3232203d3e20323636343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:9f:5d:68:34:03:f5:16:12:5d:e9:67:b4:f8:f7:fc:5c:
         4a:8c:2d:55:fa:02:21:57:23:54:a4:29:3a:b0:6b:cf:21:82:
         98:a1:89:bc:e1:89:42:27:23:31:b1:e0:52:43:17:72:04:3f:
         9c:75:58:18:a1:80:67:a7:61:e3:3a:5b:3f:6e:60:a8:97:db:
         2b:2f:13:ca:e3:07:d5:b1:bc:93:ab:d9:de:a8:65:14:8d:f4:
         02:0d:76:6e:6d:1e:c1:47:3a:2a:28:a4:0b:dc:25:64:c9:41:
         0c:e7:4a:fb:aa:b1:aa:43:03:2c:b7:ea:85:28:e2:a6:cc:16:
         84:c7:e8:e2:ea:c0:99:46:b0:3e:75:ed:5a:af:97:fd:57:d5:
         9e:9e:59:c5:97:9b:c3:d6:ab:6f:9a:83:d4:33:dc:df:c1:8e:
         aa:cb:7c:fc:e2:b4:3d:c9:fa:03:cc:b0:33:d0:80:ed:5f:35:
         3a:26:ab:f0:42:27:36:3a:77:00:38:bc:fa:f2:0c:77:e6:bf:
         f4:0c:41:fe:38:27:e7:87:a6:5b:6b:25:ee:5b:b6:40:c8:f8:
         d8:ea:ca:ac:9e:56:0e:bd:7f:1b:4b:00:67:1c:df:62:ef:8a:
         e8:1b:cd:7d:c3:3b:a1:dc:57:9f:8d:0f:32:ee:85:76:c5:a4:
         f6:82:ff:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH+WfUrNQeiVyljHGMnXgEVjukAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0Rjg5Q0Y0RENENkQ4NTAyNzQ2MTA2Q0VGMDEwQzA1
NEM0NTM5NTAeFw0yNjAyMjMxNDEyNDVaFw0yNzAyMjIxNDE3NDVaMDMxMTAvBgNV
BAMTKEY1RUQwOUEwRTk3QUNGMjZGMzQxODE0QjlCQzcwNUUzODg3QzhFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2DceQrlVrSgnxvRQFusKI2GL
E3Y1a9PeGoFQ0ila1yIhoD/MexXgX94BJzQb5JuBoaRK2FV2OnGjY/BzLbps77UT
HZSp5ExQhPNke1nXVnvoBXUyRSr+Zl85Fr/DCxjSJxsifhiypCRYj0pMG1eaPZIU
H0E79f2QK4xzUVgPHyweunPk+M5jUHr4JSJl/BwRo/uFAlxua+Z3G9D8SOkki3bt
lhvQI4IUv5EZzIFSEfm7mv9/qCfAV35N03mRcuhTRHhqeyXmevO5q9tTZo3FbEeI
Kx/ww/M5toqaTgyeuMo2oZocOswXO9SuQtStAx3InmsKtSqAWdoxBJ0xTzTZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9e0JoOl6zybzQYFLm8cF44h8jrcwHwYDVR0j
BBgwFoAUIk+Jz03NbYUCdGEGzvAQwFTEU5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkREdm81QmtoYUNIa2VVVTcyd2ExbmtGTUFLdzZjaTJvRUdNUUVHVWVE
eGYvMC8yMjRGODlDRjREQ0Q2RDg1MDI3NDYxMDZDRUYwMTBDMDU0QzQ1Mzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNEY4OUNGNERDRDZEODUw
Mjc0NjEwNkNFRjAxMEMwNTRDNDUzOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JERHZvNUJraGFDSGtlVVU3MndhMW5rRk1BS3c2Y2kyb0VHTVFFR1VlRHhmLzAv
MzEzNzMwMmUzODMyMmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlI0MA0GCSqGSIb3DQEBCwUAA4IBAQBqOp9daDQD
9RYSXelntPj3/FxKjC1V+gIhVyNUpCk6sGvPIYKYoYm84YlCJyMxseBSQxdyBD+c
dVgYoYBnp2HjOls/bmCol9srLxPK4wfVsbyTq9neqGUUjfQCDXZubR7BRzoqKKQL
3CVkyUEM50r7qrGqQwMst+qFKOKmzBaEx+ji6sCZRrA+de1ar5f9V9WenlnFl5vD
1qtvmoPUM9zfwY6qy3z84rQ9yfoDzLAz0IDtXzU6JqvwQic2OncAOLz68gx35r/0
DEH+OCfnh6ZbayXuW7ZAyPjY6sqsnlYOvX8bSwBnHN9i74roG819wzuh3FefjQ8y
7oV2xaT2gv9y
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:05:16 2026 by rpki-client