Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
File:                     3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa (raw, json)
Hash identifier:          mzhav9t+c9/3Ar+PEmj6BRJagd3miAeA/5vACfMGM4M=
Subject key identifier:   91:CC:66:43:2F:6F:4B:E1:EE:3E:62:E9:FD:52:04:A1:C7:B8:28:86
Certificate issuer:       /CN=0EC4D6C5202261C49594744128176AC5B29A6A9C
Certificate serial:       29D2E7584F34198764D254A40246058C3B2E0C77
Authority key identifier: 0E:C4:D6:C5:20:22:61:C4:95:94:74:41:28:17:6A:C5:B2:9A:6A:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC4D6C5202261C49594744128176AC5B29A6A9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
Signing time:             Sat 28 Feb 2026 20:13:01 +0000
ROA not before:           Sat 28 Feb 2026 20:08:01 +0000
ROA not after:            Sat 27 Feb 2027 20:13:01 +0000
asID:                     271690
IP address blocks:        170.254.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0EC4D6C5202261C49594744128176AC5B29A6A9C.crl
                          rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0EC4D6C5202261C49594744128176AC5B29A6A9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC4D6C5202261C49594744128176AC5B29A6A9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 08:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:e7:58:4f:34:19:87:64:d2:54:a4:02:46:05:8c:3b:2e:0c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC4D6C5202261C49594744128176AC5B29A6A9C
        Validity
            Not Before: Feb 28 20:08:01 2026 GMT
            Not After : Feb 27 20:13:01 2027 GMT
        Subject: CN=91CC66432F6F4BE1EE3E62E9FD5204A1C7B82886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:3b:23:fa:ba:a4:4b:ed:f3:f2:52:19:74:
                    07:a9:55:2a:12:f3:b9:e1:a4:05:a8:1e:93:bb:76:
                    3e:90:0b:35:25:02:2f:0d:12:52:a5:da:47:2e:dd:
                    34:22:13:37:3e:23:83:43:d8:d4:63:a4:ba:fe:8e:
                    6c:19:76:90:6b:6c:23:f8:62:94:23:54:f8:58:0c:
                    08:d4:60:e8:c8:0e:eb:bd:24:0a:1b:d5:92:0f:52:
                    8b:c8:64:f4:42:1a:00:75:fa:3f:aa:62:82:b7:7b:
                    3c:83:1f:12:13:8f:58:98:19:2c:b2:5c:29:89:96:
                    ec:9e:35:a0:02:8c:df:0f:59:1f:c3:de:cf:16:1e:
                    4f:6e:0c:d7:a4:a9:67:eb:fc:0a:07:1f:51:b2:6d:
                    19:ce:b5:e5:ea:09:4d:f6:08:2b:0d:6d:fe:5a:b9:
                    a9:b4:f3:6c:1d:bc:27:e8:e2:4f:6c:cf:d2:3b:11:
                    e6:76:5d:bc:e6:b4:f6:f5:e3:5b:1a:f3:44:d6:b4:
                    d6:6f:5b:4a:d9:59:7b:f8:36:ae:4c:38:5b:f1:31:
                    d0:c7:e3:e4:8d:a3:fa:6f:ef:78:d7:e5:e4:09:8a:
                    9d:32:af:3b:0d:fc:bd:8f:dc:db:6e:d4:72:9f:b4:
                    65:40:96:13:96:47:0c:26:c6:03:34:f7:b1:52:de:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CC:66:43:2F:6F:4B:E1:EE:3E:62:E9:FD:52:04:A1:C7:B8:28:86
            X509v3 Authority Key Identifier:
                keyid:0E:C4:D6:C5:20:22:61:C4:95:94:74:41:28:17:6A:C5:B2:9A:6A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0EC4D6C5202261C49594744128176AC5B29A6A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC4D6C5202261C49594744128176AC5B29A6A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:56:36:92:57:e4:37:fb:d0:85:29:96:44:f8:8c:f0:3b:ad:
         70:12:3b:53:bf:5b:36:cd:79:d5:e7:81:b9:17:e3:4c:48:05:
         0d:59:45:f7:cd:d1:aa:c3:22:f8:5e:c1:72:0a:ab:18:0c:f1:
         ad:6c:d3:ca:4d:5e:54:3d:9d:9d:af:08:a8:be:92:a0:da:3d:
         a6:ce:af:b5:51:84:47:99:0b:9a:6e:c9:1a:8e:42:9e:b5:07:
         9f:60:2d:a9:4f:62:69:09:ce:5b:19:fe:8b:ef:d7:f8:ba:2a:
         12:e0:a8:fc:7a:73:f4:5d:7d:ca:af:c7:79:c8:07:c9:00:e7:
         73:57:97:40:8a:08:b7:f7:6a:e5:82:b1:e9:5a:e8:1b:ee:3c:
         b6:49:7f:a0:90:43:3d:21:53:d8:72:a1:f7:e9:95:e2:95:b2:
         26:6f:93:57:ea:07:a4:45:0f:24:a9:78:53:ef:8f:dd:f5:54:
         bd:b4:3b:a2:15:3c:73:01:aa:f1:ed:73:08:ef:e2:4d:35:e0:
         50:82:66:32:a4:26:a7:88:35:08:58:56:29:2b:aa:43:95:6a:
         71:0e:34:66:42:36:1c:a0:96:97:ff:ed:24:c6:c1:b3:9d:0e:
         60:ce:fb:03:77:a4:8d:33:bd:01:72:5b:1d:4a:d6:1d:47:0c:
         f3:f4:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:15 2026 by rpki-client