Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa
File:                     3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa (raw, json)
Hash identifier:          kp80J7DEGk6pwXz9Gv0ggYAFCaEDEFeobUDL/uG2t+U=
Subject key identifier:   34:2D:45:72:56:B8:89:2D:2D:D8:1F:40:14:A8:53:EE:7D:D0:AF:09
Certificate issuer:       /CN=94282ECB8B77A71215D6F5486E8A90572769521A
Certificate serial:       367EAFD1E5A2B5E067101ADE8DAEBF54AEB40EF0
Authority key identifier: 94:28:2E:CB:8B:77:A7:12:15:D6:F5:48:6E:8A:90:57:27:69:52:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94282ECB8B77A71215D6F5486E8A90572769521A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa
Signing time:             Mon 16 Feb 2026 14:55:53 +0000
ROA not before:           Mon 16 Feb 2026 14:50:53 +0000
ROA not after:            Mon 15 Feb 2027 14:55:53 +0000
asID:                     265107
IP address blocks:        170.254.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/94282ECB8B77A71215D6F5486E8A90572769521A.crl
                          rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/94282ECB8B77A71215D6F5486E8A90572769521A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94282ECB8B77A71215D6F5486E8A90572769521A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:af:d1:e5:a2:b5:e0:67:10:1a:de:8d:ae:bf:54:ae:b4:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94282ECB8B77A71215D6F5486E8A90572769521A
        Validity
            Not Before: Feb 16 14:50:53 2026 GMT
            Not After : Feb 15 14:55:53 2027 GMT
        Subject: CN=342D457256B8892D2DD81F4014A853EE7DD0AF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:09:db:40:35:86:9c:04:59:96:e1:e3:32:
                    b0:bd:bd:3f:e7:7a:79:5f:fa:f9:fc:42:be:95:b3:
                    be:e2:f1:58:19:06:c4:26:43:5f:6a:f2:a2:3f:0a:
                    85:61:00:3c:d2:a8:45:f8:8f:6d:a2:62:57:2d:5f:
                    cf:3c:33:dd:1c:f6:34:52:1c:a4:ae:66:d3:f7:6d:
                    b5:9c:f2:7b:88:3a:05:9f:b7:09:b1:43:48:fd:5b:
                    b3:19:98:d8:86:16:13:b0:b6:34:53:76:04:eb:6d:
                    64:03:cf:d0:56:23:b5:5d:16:a1:bb:dc:24:bc:d0:
                    f9:7f:79:6f:71:f9:ed:eb:f6:20:b8:c5:a7:80:22:
                    6d:6e:d0:d1:c7:c6:b7:c5:af:39:82:e4:71:f3:d9:
                    f3:87:a0:ba:b7:79:f5:6d:bd:f7:a0:ff:db:ed:29:
                    1c:e7:d9:a2:6a:b3:86:18:9c:35:d4:b9:47:07:a2:
                    82:59:9b:d4:40:43:b2:eb:4f:ae:88:31:f7:d3:57:
                    20:e6:9d:2b:b3:8d:c0:10:b1:90:ca:db:b4:b0:2b:
                    f6:53:dd:f0:12:be:45:2c:4a:f7:57:b4:86:c5:eb:
                    84:a1:cd:85:73:82:35:85:ca:aa:36:cb:cb:1c:fc:
                    27:b8:6f:44:56:18:d2:69:91:a8:82:62:1f:92:ea:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:45:72:56:B8:89:2D:2D:D8:1F:40:14:A8:53:EE:7D:D0:AF:09
            X509v3 Authority Key Identifier:
                keyid:94:28:2E:CB:8B:77:A7:12:15:D6:F5:48:6E:8A:90:57:27:69:52:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/94282ECB8B77A71215D6F5486E8A90572769521A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94282ECB8B77A71215D6F5486E8A90572769521A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:07:65:f7:a9:dc:7e:f6:ba:5c:5b:d6:23:a6:84:98:e4:
         37:23:b6:bb:a5:6d:b3:38:71:a4:d9:90:65:22:75:2b:13:90:
         bf:24:82:bf:96:9f:90:d7:ad:a0:7f:09:b7:7d:48:19:6c:1f:
         29:11:7f:85:6b:d2:0e:ce:40:12:68:de:3a:53:8e:2b:f0:38:
         ff:1d:27:c3:fd:0a:32:15:94:37:5c:2c:92:2e:8e:fc:b7:cc:
         5e:2f:61:c8:d9:82:e7:20:e3:de:e9:71:98:57:ce:95:35:a0:
         47:0b:5f:90:38:6a:8c:07:4b:f5:d8:07:ac:df:68:12:ac:cb:
         70:e8:94:86:48:01:b6:c8:af:87:43:03:7a:74:ac:41:1c:4f:
         d1:df:b8:da:d9:f2:67:79:55:6a:b4:e4:82:9f:46:56:a1:1e:
         0a:ab:9a:94:f3:67:01:49:8a:71:73:b2:62:1f:d3:92:eb:3d:
         cb:c7:31:5a:cf:40:ca:4d:fc:c6:54:da:91:f7:8b:f4:cd:c2:
         c5:43:41:c3:be:02:9a:07:f2:81:e9:c7:f6:da:1e:c1:ef:26:
         d9:1c:6e:de:e6:9d:a2:a1:4b:54:4b:12:e2:61:a4:87:48:36:
         d1:b3:e0:2b:48:66:2b:82:26:ec:97:7d:a6:11:76:9d:4d:cf:
         a5:c0:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:43 2026 by rpki-client