Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230342e302f32322d3232203d3e20323636333337.roa
File:                     3137302e37392e3230342e302f32322d3232203d3e20323636333337.roa (raw, json)
Hash identifier:          /2E0BUMEsZQ1nnheCBq0L7aRQETwGioYSx8ZRsjyalI=
Subject key identifier:   23:5A:CE:BD:84:9E:7B:50:38:36:F5:A6:CB:09:86:60:77:87:1E:B4
Certificate issuer:       /CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
Certificate serial:       56E4467E0230E8DEFAC8D2F2B089354373666038
Authority key identifier: 01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230342e302f32322d3232203d3e20323636333337.roa
Signing time:             Thu 17 Sep 2026 12:38:11 +0000
ROA not before:           Thu 17 Sep 2026 12:33:11 +0000
ROA not after:            Thu 16 Sep 2027 12:38:11 +0000
asID:                     266337
IP address blocks:        170.79.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl
                          rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e4:46:7e:02:30:e8:de:fa:c8:d2:f2:b0:89:35:43:73:66:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
        Validity
            Not Before: Sep 17 12:33:11 2026 GMT
            Not After : Sep 16 12:38:11 2027 GMT
        Subject: CN=235ACEBD849E7B503836F5A6CB09866077871EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:c6:a2:d3:a4:79:eb:4f:58:be:ad:43:41:
                    f2:cd:af:c8:80:b1:02:e6:98:b1:52:7e:de:67:12:
                    3e:64:99:e9:79:88:d7:e8:4e:d5:56:63:65:09:b2:
                    66:c0:aa:0d:28:81:13:f8:e1:c4:9a:47:38:bd:67:
                    b0:ec:93:b3:fe:45:8a:b1:e4:d5:2f:ea:bc:fb:fa:
                    97:4f:e0:b7:be:4b:dd:ac:41:c1:d6:39:77:d1:54:
                    90:02:71:22:94:19:13:f6:da:7c:03:3c:e4:4d:68:
                    0b:89:ff:b5:c8:95:7f:4f:98:3e:d1:ec:c1:64:1e:
                    3a:e9:56:68:e5:5a:64:80:a5:8a:ef:8c:b8:d9:9b:
                    2c:7a:0d:d6:a5:13:53:d0:5d:2b:91:c7:da:fb:fc:
                    f6:c3:99:3a:a3:aa:98:eb:a0:85:7e:e5:49:6a:08:
                    fc:b4:74:94:e2:d2:21:73:7b:e6:20:dd:9a:3b:0a:
                    67:eb:ee:45:4d:c3:6a:bc:00:6f:bd:d6:7c:b1:84:
                    8d:af:78:07:79:71:4f:c7:b3:d7:b4:ef:04:4c:4a:
                    c0:42:d1:b8:ae:1c:0a:d9:28:13:41:ec:a1:84:ff:
                    44:81:32:93:6a:b0:cf:84:11:64:95:82:1d:98:26:
                    ba:53:57:99:7c:e6:3b:b2:64:af:54:87:83:d5:14:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:CE:BD:84:9E:7B:50:38:36:F5:A6:CB:09:86:60:77:87:1E:B4
            X509v3 Authority Key Identifier:
                keyid:01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e37392e3230342e302f32322d3232203d3e20323636333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:2c:5a:89:83:05:4a:dc:da:01:a3:28:ed:1b:3f:ab:3f:
         6c:ba:38:14:92:e0:62:1c:0d:1a:4e:53:3a:a1:e5:b1:e7:3e:
         2b:6a:88:2a:85:5e:4a:20:7f:d7:bd:1f:fc:8e:82:39:10:7d:
         21:73:7d:d0:de:e3:31:64:50:d6:0f:14:05:a5:40:e4:05:d8:
         1d:b4:46:a1:f8:0f:37:87:04:58:29:e9:82:bd:d9:96:82:4e:
         73:e0:71:79:12:21:6c:a0:34:5e:d5:db:14:28:28:5e:25:5f:
         78:41:38:cb:b9:f2:47:37:0c:46:2c:3b:bd:df:7a:1f:03:ea:
         af:01:d6:fb:3d:68:29:7d:a9:45:b0:c5:72:ba:d4:f5:24:89:
         bf:33:93:39:99:d8:22:62:ef:4b:7f:70:c2:18:ca:bc:9a:68:
         80:2e:8b:93:f0:be:e3:3e:74:59:66:09:40:2e:76:11:f0:a8:
         bd:14:7b:0e:41:7e:80:55:fc:c7:02:68:bd:0b:bb:1f:1b:eb:
         fc:9a:b7:42:61:cf:3f:91:a0:09:3d:1c:0d:22:54:0b:92:52:
         f9:e0:7a:56:95:66:54:f6:4d:8f:59:74:33:d0:41:db:c7:b7:
         8b:9c:72:1a:3f:63:71:d2:07:7f:db:7d:71:a6:c2:c1:f0:73:
         63:02:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:08:51 2026 by rpki-client