Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32332d3233203d3e20323636343334.roa
File:                     3137302e38322e35322e302f32332d3233203d3e20323636343334.roa (raw, json)
Hash identifier:          WxeN9NIq1sLUYyl8a06Ps8J+0hE4AuFsR5nhhKjMAv0=
Subject key identifier:   BD:9C:9E:1C:00:EB:0A:1E:10:B3:97:D7:2F:B3:CC:1C:BE:14:BE:1E
Certificate issuer:       /CN=224F89CF4DCD6D8502746106CEF010C054C45395
Certificate serial:       131AB7F5125324BA25EEB25F3F1501B6766BA84A
Authority key identifier: 22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32332d3233203d3e20323636343334.roa
Signing time:             Mon 23 Feb 2026 14:17:48 +0000
ROA not before:           Mon 23 Feb 2026 14:12:48 +0000
ROA not after:            Mon 22 Feb 2027 14:17:48 +0000
asID:                     266434
IP address blocks:        170.82.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.crl
                          rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1a:b7:f5:12:53:24:ba:25:ee:b2:5f:3f:15:01:b6:76:6b:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=224F89CF4DCD6D8502746106CEF010C054C45395
        Validity
            Not Before: Feb 23 14:12:48 2026 GMT
            Not After : Feb 22 14:17:48 2027 GMT
        Subject: CN=BD9C9E1C00EB0A1E10B397D72FB3CC1CBE14BE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:2c:54:e2:69:a6:e6:e7:ab:9f:4f:bc:ce:
                    c7:46:9f:35:d5:d5:1e:a4:3a:23:97:8a:88:05:05:
                    26:85:ce:69:aa:4f:b5:07:1e:d7:e5:ed:ec:5b:d5:
                    f4:59:2e:b7:b6:dd:17:c7:43:91:de:64:4c:dc:31:
                    d2:32:28:b8:2f:50:63:0d:a9:d6:20:d8:7d:41:d3:
                    ed:24:a8:5d:5c:71:39:1e:1b:ba:cf:2b:63:f3:0f:
                    12:d3:9f:70:36:db:50:54:e7:dd:0c:0c:50:3e:50:
                    9b:e4:d5:65:73:6b:55:eb:31:f7:68:a7:d3:b1:ec:
                    3c:52:08:fd:e7:66:2f:9b:e8:63:2a:88:e0:32:5c:
                    b8:23:40:df:f8:2b:2f:e6:57:2f:72:23:9a:f4:3f:
                    e8:eb:95:63:a5:30:58:5a:08:b6:15:14:80:18:dd:
                    42:8d:64:88:31:84:a0:df:5f:e3:8f:0c:f1:94:cb:
                    a3:c9:f1:e9:b8:e8:47:0a:40:e1:8d:e8:56:14:28:
                    d3:0c:c0:9e:49:8a:3b:88:b9:0d:25:9a:11:26:6d:
                    e5:0e:e0:df:52:0f:8c:01:c6:aa:84:89:49:a6:41:
                    ef:de:32:e0:46:76:21:db:61:92:16:40:1c:46:97:
                    1a:28:ba:5b:93:2d:12:af:78:4d:99:92:4f:f5:52:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:9E:1C:00:EB:0A:1E:10:B3:97:D7:2F:B3:CC:1C:BE:14:BE:1E
            X509v3 Authority Key Identifier:
                keyid:22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/3137302e38322e35322e302f32332d3233203d3e20323636343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:85:ad:0b:28:66:da:d6:0f:c3:7f:cd:12:73:e3:0f:b3:96:
         0b:c4:32:f9:6c:23:0b:8f:8b:9f:84:f0:8c:9f:9a:bf:11:d3:
         76:c2:5d:54:55:de:aa:7b:9a:dc:3f:89:16:07:06:33:90:6b:
         53:0b:4e:56:0b:44:72:e8:7e:52:89:2a:2a:b8:22:1a:a5:90:
         0d:b8:01:25:80:b5:7a:5a:24:8d:fb:70:42:e5:80:18:a1:1e:
         74:05:2f:7b:df:c4:29:8b:dd:86:49:d5:d2:04:67:59:f2:dd:
         10:31:86:1f:b5:e4:22:cb:1c:f3:eb:e7:2b:e6:d6:6b:47:c4:
         ac:7a:a6:76:ec:37:7e:17:45:c3:b6:5a:06:ef:79:7d:06:35:
         79:e5:db:41:8d:04:f5:3d:fb:3f:a2:13:34:02:bd:4b:76:b2:
         3e:9c:6d:7b:c8:11:58:a7:26:04:f8:db:6e:15:3b:8e:59:2b:
         5f:9e:de:99:93:ae:83:76:c1:8c:31:4a:78:27:2c:f1:d1:6c:
         97:cf:83:83:5f:bc:9e:7c:b3:69:50:5b:8a:75:44:f6:4a:28:
         de:82:7b:52:1e:e5:0f:b9:c3:a6:c8:35:a4:dc:dd:80:6d:0e:
         58:f0:d2:5a:23:a4:5f:1e:53:99:24:aa:ba:d1:5a:c0:a0:83:
         cc:da:2c:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUExq39RJTJLol7rJfPxUBtnZrqEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0Rjg5Q0Y0RENENkQ4NTAyNzQ2MTA2Q0VGMDEwQzA1
NEM0NTM5NTAeFw0yNjAyMjMxNDEyNDhaFw0yNzAyMjIxNDE3NDhaMDMxMTAvBgNV
BAMTKEJEOUM5RTFDMDBFQjBBMUUxMEIzOTdENzJGQjNDQzFDQkUxNEJFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUyxU4mmm5uern0+8zsdGnzXV
1R6kOiOXiogFBSaFzmmqT7UHHtfl7exb1fRZLre23RfHQ5HeZEzcMdIyKLgvUGMN
qdYg2H1B0+0kqF1ccTkeG7rPK2PzDxLTn3A221BU590MDFA+UJvk1WVza1XrMfdo
p9Ox7DxSCP3nZi+b6GMqiOAyXLgjQN/4Ky/mVy9yI5r0P+jrlWOlMFhaCLYVFIAY
3UKNZIgxhKDfX+OPDPGUy6PJ8em46EcKQOGN6FYUKNMMwJ5JijuIuQ0lmhEmbeUO
4N9SD4wBxqqEiUmmQe/eMuBGdiHbYZIWQBxGlxoouluTLRKveE2Zkk/1Um5JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvZyeHADrCh4Qs5fXL7PMHL4Uvh4wHwYDVR0j
BBgwFoAUIk+Jz03NbYUCdGEGzvAQwFTEU5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkREdm81QmtoYUNIa2VVVTcyd2ExbmtGTUFLdzZjaTJvRUdNUUVHVWVE
eGYvMC8yMjRGODlDRjREQ0Q2RDg1MDI3NDYxMDZDRUYwMTBDMDU0QzQ1Mzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNEY4OUNGNERDRDZEODUw
Mjc0NjEwNkNFRjAxMEMwNTRDNDUzOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JERHZvNUJraGFDSGtlVVU3MndhMW5rRk1BS3c2Y2kyb0VHTVFFR1VlRHhmLzAv
MzEzNzMwMmUzODMyMmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlI0MA0GCSqGSIb3DQEBCwUAA4IBAQA5ha0LKGba
1g/Df80Sc+MPs5YLxDL5bCMLj4ufhPCMn5q/EdN2wl1UVd6qe5rcP4kWBwYzkGtT
C05WC0Ry6H5SiSoquCIapZANuAElgLV6WiSN+3BC5YAYoR50BS9738Qpi92GSdXS
BGdZ8t0QMYYfteQiyxzz6+cr5tZrR8SseqZ27Dd+F0XDtloG73l9BjV55dtBjQT1
Pfs/ohM0Ar1LdrI+nG17yBFYpyYE+NtuFTuOWStfnt6Zk66DdsGMMUp4Jyzx0WyX
z4ODX7yefLNpUFuKdUT2SijegntSHuUPucOmyDWk3N2AbQ5Y8NJaI6RfHlOZJKq6
0VrAoIPM2izB
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:08:45 2026 by rpki-client