Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa
File:                     3137302e38332e37302e302f32342d3234203d3e203631373534.roa (raw, json)
Hash identifier:          BLA+uVvhoOCAVnYnzCflvnMAqE2qctwUfgyAnnTrYyc=
Subject key identifier:   D3:BA:83:58:2C:89:E1:21:17:8C:2A:3B:FE:9F:BF:A3:6F:05:6F:B0
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       5A834F311394BA845DCFF1A709FAC54A2D750DB4
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:23 +0000
ROA not before:           Fri 11 Sep 2026 20:09:23 +0000
ROA not after:            Fri 10 Sep 2027 20:14:23 +0000
asID:                     61754
IP address blocks:        170.83.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:4f:31:13:94:ba:84:5d:cf:f1:a7:09:fa:c5:4a:2d:75:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:23 2026 GMT
            Not After : Sep 10 20:14:23 2027 GMT
        Subject: CN=D3BA83582C89E121178C2A3BFE9FBFA36F056FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:dd:30:8d:02:2a:9e:46:33:d0:b9:e6:8e:
                    ea:db:4b:50:ca:3c:e1:50:1f:94:29:a4:88:bb:68:
                    9b:7b:07:8d:1a:a4:59:f5:9f:72:34:74:99:d4:a7:
                    4f:81:a6:ea:31:16:9c:95:36:32:5f:0c:b0:7b:6f:
                    d6:dc:28:49:a9:ca:04:21:c9:13:15:4f:bf:df:7a:
                    a6:33:8b:fb:fa:f2:f9:7b:f0:83:19:78:b8:cc:45:
                    06:fa:ac:b6:72:c7:ea:80:36:30:95:b9:e1:6a:67:
                    4e:e1:b3:55:9b:c5:6a:e9:48:f7:c1:5c:01:df:1b:
                    1a:d9:f6:e3:5b:27:dc:78:5d:e0:85:7e:e3:fe:91:
                    50:fe:4e:34:fa:00:02:19:45:37:29:db:a5:69:18:
                    02:cf:f7:9a:7a:4a:c1:c0:83:1c:c2:0a:50:4f:88:
                    6b:45:56:ae:3e:ce:9c:17:62:6f:02:1f:87:5a:2c:
                    dc:37:03:e5:4e:d1:e5:f0:d0:ce:fe:5f:16:d4:df:
                    4a:07:31:f7:9a:c5:e0:56:22:ee:cb:b3:1e:a6:41:
                    bb:88:ad:53:2a:70:f3:06:e4:b2:37:3e:f6:63:d4:
                    32:eb:50:25:15:ef:15:eb:9b:ac:b0:f1:a8:e9:73:
                    10:b4:e3:dc:17:8e:82:d0:1b:e4:b0:b8:0c:54:19:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BA:83:58:2C:89:E1:21:17:8C:2A:3B:FE:9F:BF:A3:6F:05:6F:B0
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3137302e38332e37302e302f32342d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:3d:ba:34:22:68:a1:6b:20:4e:38:90:95:1b:63:77:37:
         d9:94:6c:56:43:7f:b3:30:ec:cd:89:b0:7a:4c:86:34:54:3c:
         01:18:06:22:28:b3:ea:44:a4:3b:9d:c2:cf:f2:6c:0f:2f:d6:
         de:d9:f6:1d:53:3f:65:29:70:32:90:4d:b9:2c:9c:2b:55:04:
         49:b0:6e:cc:a9:24:8b:ab:4f:c2:17:f2:0c:6a:c0:b1:3e:46:
         3a:61:59:7a:76:4f:be:23:0d:8b:75:3a:d7:0a:e1:29:9b:fc:
         10:1e:05:8f:fa:a8:22:0a:6d:aa:54:1c:ad:3d:db:b1:2e:09:
         13:37:19:a7:85:ec:e9:79:57:b6:83:df:5e:9a:e3:eb:28:e7:
         4b:39:85:b7:86:eb:93:b1:19:16:7a:d0:ce:ee:ae:7b:f0:de:
         10:96:e7:56:21:01:05:11:1e:ee:41:e1:d1:c9:9e:27:93:31:
         7f:5e:84:ac:52:ee:d0:ff:61:ea:12:23:02:7b:e0:87:6c:50:
         b9:6f:2c:d3:36:67:23:cf:a6:d4:b9:70:36:ac:c6:95:b6:71:
         8b:ac:d5:d4:88:81:c8:28:75:d1:29:51:ec:c1:b1:ed:5e:f7:
         57:37:28:30:31:eb:0d:f9:a9:1b:22:c4:05:02:b3:e0:0d:aa:
         78:47:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:48:29 2026 by rpki-client