Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37342e302f32342d3234203d3e203532373635.roa
File:                     3137302e3233392e37342e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          dE3EQRdWgiofUQp9SVS7XC385PGpNSj2V0i1iOHcJoQ=
Subject key identifier:   31:9A:F4:AC:A7:4E:89:28:69:C4:A0:6A:DE:7D:01:DA:58:C2:B9:62
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       18086AB45A86E92934DA3C9AF698C392E910B149
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37342e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:06 +0000
ROA not before:           Wed 26 Aug 2026 02:02:06 +0000
ROA not after:            Wed 25 Aug 2027 02:07:06 +0000
asID:                     52765
IP address blocks:        170.239.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:08:6a:b4:5a:86:e9:29:34:da:3c:9a:f6:98:c3:92:e9:10:b1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:06 2026 GMT
            Not After : Aug 25 02:07:06 2027 GMT
        Subject: CN=319AF4ACA74E892869C4A06ADE7D01DA58C2B962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:8c:b6:97:f4:02:f5:bb:30:17:0a:10:87:
                    de:6f:c7:39:2d:c3:70:0c:8b:25:8e:98:98:b8:7e:
                    1f:81:84:e8:c7:79:80:59:24:1e:4b:ab:48:d2:2b:
                    d2:97:e9:b9:5e:47:0a:1e:a5:18:c1:a7:8f:9b:25:
                    ad:fc:da:88:8c:c2:f6:64:de:fc:6f:f9:fe:ef:7e:
                    c6:f4:bc:7f:f7:32:fb:cd:37:e9:0e:0d:62:0a:ec:
                    35:d7:fd:6f:38:3d:24:cb:0e:c2:f3:96:f4:aa:f9:
                    54:ca:95:ad:b8:c0:74:c0:84:34:c0:31:fe:3c:bc:
                    45:06:52:20:e6:c8:f0:5e:fc:36:65:d1:d3:d2:09:
                    7d:4c:4a:5e:cc:93:18:9d:e5:a7:bd:17:99:a4:82:
                    6f:6d:9d:a4:06:e4:de:d5:bf:6a:41:59:cf:53:6d:
                    2b:aa:4e:31:12:ca:54:67:7e:26:e1:dd:a6:db:4c:
                    55:fa:7b:4e:4c:81:69:dc:c6:3a:fe:fe:40:31:3a:
                    90:eb:f3:38:17:72:0c:ba:9c:06:be:1e:fc:25:db:
                    0a:44:fe:f1:2b:d3:b3:37:98:8b:d2:de:07:fa:e1:
                    54:4f:ea:a0:6d:0b:e2:8c:a5:f5:77:05:8d:c6:b2:
                    af:b9:77:25:0a:c0:db:3c:23:79:2d:e2:b1:a8:44:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:F4:AC:A7:4E:89:28:69:C4:A0:6A:DE:7D:01:DA:58:C2:B9:62
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37342e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:53:ac:83:cd:d4:46:6e:c6:93:55:43:cd:e0:9f:f7:b4:1a:
         8d:3c:04:00:4f:7a:9c:c0:03:58:df:fd:cf:88:6e:5b:9d:1c:
         38:2a:82:dc:37:40:4b:f6:08:14:ad:c0:bd:7b:32:be:79:d6:
         17:eb:06:50:64:fb:e0:2a:52:ac:d9:4b:97:b4:7b:d0:a7:db:
         8b:c0:9b:d1:44:23:66:0f:c4:0e:f4:eb:41:e7:08:26:62:4e:
         a2:27:29:28:c4:f8:0c:2b:88:f8:31:2a:cc:96:76:50:79:ab:
         0e:00:1c:8a:2e:a5:18:28:50:17:40:26:c9:85:b8:95:ac:ef:
         b7:45:08:3f:08:9e:c6:b4:91:36:65:bf:30:44:8e:87:bd:4b:
         18:a6:48:e7:1a:37:41:9d:c1:ea:b2:92:f4:18:1b:94:1a:ae:
         b6:d7:a2:f2:d0:0d:f8:81:69:3b:30:f1:5a:1d:a6:a9:e3:e3:
         08:a2:6a:b5:b5:b2:63:35:60:60:d4:8f:4f:4b:48:ec:75:07:
         4e:18:6c:b1:5c:91:b7:3d:6e:0a:bd:82:c2:36:f0:77:ab:d6:
         6c:1a:8f:46:80:4e:16:57:21:49:81:c9:98:a1:68:54:be:d1:
         75:30:72:12:22:20:20:67:8f:d8:25:a6:7f:da:50:07:8a:2a:
         bf:83:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:05:58 2026 by rpki-client