Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3137302e38302e3138302e302f32322d3234203d3e20323632373737.roa
File:                     3137302e38302e3138302e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          IVWeG/yqD59ufxtiBm3W7AqS/gOwqugF7LXsO2b1L0Q=
Subject key identifier:   CC:6E:69:70:7C:BD:78:B6:70:1E:12:48:95:35:CC:5E:C6:F9:BC:C7
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       1728A62580768CEB8581B9772FF319DD4CFE24B4
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3137302e38302e3138302e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 15 Oct 2026 16:58:18 +0000
ROA not before:           Thu 15 Oct 2026 16:53:18 +0000
ROA not after:            Thu 14 Oct 2027 16:58:18 +0000
asID:                     262777
IP address blocks:        170.80.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 16:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:28:a6:25:80:76:8c:eb:85:81:b9:77:2f:f3:19:dd:4c:fe:24:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Oct 15 16:53:18 2026 GMT
            Not After : Oct 14 16:58:18 2027 GMT
        Subject: CN=CC6E69707CBD78B6701E12489535CC5EC6F9BCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:59:cb:18:e0:bb:b9:99:3f:ff:ef:d6:a9:
                    b0:7a:f8:a7:74:14:a0:f1:68:a7:6c:eb:1b:0e:ca:
                    07:b3:8d:32:3f:3a:5d:4a:36:74:9d:45:a6:8e:aa:
                    b3:40:6d:ec:f1:75:52:33:41:5f:dc:4c:07:8a:ca:
                    29:45:68:79:37:dc:5f:a4:ee:7f:b3:50:bf:78:11:
                    79:54:a0:e3:9d:a8:c0:50:5f:0a:eb:a4:e1:68:49:
                    65:81:cf:f0:9f:d9:2a:0f:61:dc:7a:e7:7f:9c:a0:
                    ca:55:ad:80:b1:c2:f2:89:00:ee:64:6b:29:3c:ac:
                    6f:53:63:01:e0:1f:52:69:1b:af:23:ee:aa:db:8b:
                    c0:06:6b:e3:b3:8a:cc:0b:cf:fa:fb:8b:2f:f4:5c:
                    80:f7:cf:54:57:c2:8f:0b:db:9c:37:79:ef:2a:e5:
                    51:d1:95:eb:d3:4d:51:72:71:98:ec:b6:c9:86:c2:
                    68:84:8f:b5:f0:26:9e:93:17:94:8b:cc:b2:31:34:
                    1c:aa:d5:67:e7:85:60:cd:58:c7:ec:a2:93:6d:86:
                    f7:83:79:06:d1:cb:60:9a:8b:d3:e9:95:d0:74:f5:
                    d7:f4:99:db:36:e4:78:ce:27:aa:e7:01:a4:6f:53:
                    b9:92:e9:6a:22:c7:5e:4f:5b:b6:df:e2:27:c1:1c:
                    e9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:69:70:7C:BD:78:B6:70:1E:12:48:95:35:CC:5E:C6:F9:BC:C7
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3137302e38302e3138302e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:99:f4:dd:a9:57:1c:4b:5d:c3:e6:39:c8:6f:26:cc:7d:
         03:c6:d8:4a:59:86:45:18:dd:39:bc:fe:58:6f:27:3a:9a:b7:
         91:cc:51:46:41:3e:6d:59:01:91:36:5f:83:86:9e:8f:f7:4c:
         0f:77:68:ae:7e:50:c3:25:16:60:d3:98:36:ed:39:7e:75:fa:
         3d:92:a1:65:74:d3:93:4e:1b:44:44:1e:a7:7c:f3:c6:73:38:
         72:46:2b:6d:3f:ab:dd:48:bd:f2:5d:f7:a3:94:26:67:88:68:
         2a:73:3a:c1:c6:9f:07:3f:c2:7e:09:57:a9:1f:41:8b:02:dc:
         5c:fc:18:5d:fa:31:af:c0:0e:8e:2c:ba:53:52:8a:0d:e5:9b:
         19:02:28:80:5c:db:c0:c8:08:c4:23:a4:46:d1:ad:b6:b3:a2:
         02:68:c0:c6:d5:f2:6a:d9:ad:87:73:d2:dd:a9:a1:5d:b0:a8:
         a3:a6:62:68:9c:db:4e:55:4f:3b:c7:a5:b8:f9:a7:56:29:03:
         5e:77:46:51:62:47:92:35:6e:19:1f:e9:20:38:d4:fb:b9:39:
         c8:ba:1b:46:55:70:20:d5:15:d2:e8:ba:04:cc:ae:64:d0:7a:
         d6:5d:bf:0a:49:4c:66:c8:18:c0:b4:57:ca:92:04:4b:c6:5c:
         4f:a1:f6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:45:24 2026 by rpki-client