Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233322e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          4nMjidNA88w27G+5JWk9xQ3ZWDnyfg4HXdKwn10osvE=
Subject key identifier:   1B:DB:A5:AE:A8:CB:99:B1:75:35:5E:68:61:33:23:4B:39:BC:90:6D
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       039BA0C686F4CAC6E3730279F13A0C2E33D007D9
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32342d3234203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:24 +0000
ROA not before:           Tue 01 Sep 2026 11:57:24 +0000
ROA not after:            Tue 31 Aug 2027 12:02:24 +0000
asID:                     266514
IP address blocks:        170.244.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9b:a0:c6:86:f4:ca:c6:e3:73:02:79:f1:3a:0c:2e:33:d0:07:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:24 2026 GMT
            Not After : Aug 31 12:02:24 2027 GMT
        Subject: CN=1BDBA5AEA8CB99B175355E686133234B39BC906D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:f5:9e:fd:fe:60:b6:4c:15:d9:e8:76:1c:
                    91:27:ff:0e:0b:30:e9:b5:c2:d4:b7:10:a0:a2:9b:
                    61:f7:55:b4:9d:06:bf:42:54:a4:b0:59:ba:fe:69:
                    6b:dc:4e:07:d0:5e:42:73:37:b7:9d:bb:8b:34:f1:
                    26:a5:f1:95:30:06:e6:99:ae:30:e1:ca:ad:e5:77:
                    42:47:dd:a6:3a:35:38:0e:e2:47:12:f6:69:be:a3:
                    ee:ed:49:da:47:48:4d:91:70:cd:96:78:8b:6d:a7:
                    d3:4f:7b:dd:31:d3:a9:e4:60:d6:c6:ff:87:4a:42:
                    24:97:d4:ba:58:41:a8:34:86:38:79:5a:eb:e3:10:
                    51:db:fa:5f:1b:96:38:c1:90:82:ed:35:f8:0b:fb:
                    75:cb:fe:c8:e0:cc:78:72:e3:1f:1a:a1:64:4f:8d:
                    c9:e7:e8:b6:83:fd:6c:e8:02:e9:55:01:a3:a1:c5:
                    df:b5:51:70:57:95:ba:17:67:85:61:a0:55:65:fb:
                    1d:20:f0:08:f9:3a:e9:89:25:50:1e:f6:fe:2b:21:
                    b7:4d:41:62:7f:c7:a4:9c:6d:b0:ac:b0:33:10:ed:
                    61:f1:ed:45:a5:d4:6d:0a:f4:bd:ef:5e:7b:78:55:
                    4d:fa:e1:4a:9d:3e:77:52:6a:be:99:5d:12:13:dd:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:A5:AE:A8:CB:99:B1:75:35:5E:68:61:33:23:4B:39:BC:90:6D
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233322e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6b:6a:2c:a1:26:e0:85:da:24:a0:bf:87:7e:e4:f2:a6:b9:
         eb:2c:15:55:de:ba:bc:fc:27:3d:0c:d1:04:ea:16:20:1a:cf:
         04:e0:b8:c8:c1:c7:ff:01:87:2b:d3:dd:a7:1d:f5:0e:fa:78:
         8c:da:be:52:b5:9a:e7:5c:d2:82:b3:80:a2:cf:73:f1:ef:f0:
         9f:31:a1:b8:22:24:98:47:75:3e:38:0c:14:a5:7f:6c:34:b2:
         6f:1e:68:6c:a0:e0:07:39:8d:d0:ec:2e:69:00:c8:5e:f6:ab:
         21:35:ba:1d:de:25:77:38:51:3f:e1:19:84:c8:4c:af:63:3e:
         67:bd:79:f9:47:30:e4:3d:03:e1:cd:ea:9a:f5:e5:10:0b:31:
         0f:c1:6a:f9:0f:fc:ca:0a:de:70:8c:1f:26:aa:3b:55:12:6e:
         2e:d5:80:04:62:3e:a4:e0:be:92:20:fa:46:85:f7:5e:4e:53:
         dd:0b:db:68:c2:59:81:b1:a9:4b:f0:aa:b5:22:ff:42:c4:d3:
         6c:1c:b0:40:92:0f:6e:45:39:cf:86:d6:3a:74:88:27:68:1c:
         c1:55:5c:6e:24:56:2f:31:f3:29:a5:84:3b:cf:1f:45:d0:06:
         fa:88:d9:42:32:25:cb:15:a1:19:52:69:52:40:8b:b7:4a:19:
         78:a1:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:03:16 2026 by rpki-client