Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          PM9yRVASvBlRLhS21NFLl11UwmAvCJcrI/2XhBtMjPQ=
Subject key identifier:   FC:65:07:94:05:81:C0:E4:EA:2A:46:F2:71:6E:75:DF:1C:B0:2B:CC
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       59620376520A6C07B0886BF0024FA5F7D100955C
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:22 +0000
ROA not before:           Tue 01 Sep 2026 11:57:22 +0000
ROA not after:            Tue 31 Aug 2027 12:02:22 +0000
asID:                     266514
IP address blocks:        170.244.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 20:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:03:76:52:0a:6c:07:b0:88:6b:f0:02:4f:a5:f7:d1:00:95:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:22 2026 GMT
            Not After : Aug 31 12:02:22 2027 GMT
        Subject: CN=FC6507940581C0E4EA2A46F2716E75DF1CB02BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:fd:10:88:37:2e:a1:a7:83:30:ff:57:b5:
                    66:88:e1:5c:e1:c5:29:e4:db:ea:9d:f7:15:4d:c4:
                    5d:58:e2:bb:02:16:5d:22:0d:89:b3:8d:7c:3a:b1:
                    9a:6e:40:01:e1:11:9e:ca:94:a8:4e:d7:b0:df:4a:
                    90:f1:57:d2:9a:ea:b3:57:57:d7:20:09:f5:de:39:
                    7a:20:6a:20:a9:93:dd:32:d3:5a:1f:ae:3d:2a:37:
                    4d:58:0d:15:c8:06:2c:fc:02:8f:0a:7d:2e:58:cd:
                    07:aa:33:c8:c7:01:8a:43:8e:7e:d1:c1:d5:79:d5:
                    fb:7f:2d:3f:64:df:71:f7:fb:ab:76:41:7b:d9:60:
                    28:12:38:be:90:f5:21:b6:e2:99:b0:50:c8:17:6d:
                    a0:aa:1e:39:2e:60:bb:91:af:8a:a7:2a:ac:2b:9f:
                    0b:49:3e:53:c4:fd:e9:6c:22:d7:68:d5:c4:bb:59:
                    9a:57:f2:4a:b8:fe:37:32:a8:8e:57:37:bf:fe:33:
                    6e:8a:11:06:b5:e2:86:aa:62:d2:2a:da:01:eb:3e:
                    a3:46:84:c3:17:8e:2c:c4:4f:77:95:29:ec:ae:12:
                    49:a5:56:7e:e4:18:b4:a5:89:de:08:5a:6d:4a:f8:
                    6d:04:b3:18:4d:0b:6f:3e:d7:de:e1:03:fc:08:01:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:07:94:05:81:C0:E4:EA:2A:46:F2:71:6E:75:DF:1C:B0:2B:CC
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:78:0c:c1:a8:eb:9e:5a:a8:bc:4c:49:6c:0c:09:a5:93:
         9c:7b:1b:59:d3:f1:b5:37:2e:d5:a8:06:1e:e5:e9:a9:af:d9:
         9a:3d:8a:ed:f9:03:0b:38:ba:3f:4f:57:9e:ee:58:e0:58:7f:
         28:2f:25:cc:a2:dd:1c:f2:52:b8:8d:11:dd:3f:32:b1:5f:ca:
         16:da:11:2e:18:5f:b0:0f:39:51:57:ce:37:0c:45:6e:42:03:
         06:92:a0:16:ca:4a:23:73:72:5c:05:4a:04:0a:b2:bf:a0:24:
         29:06:99:fc:0c:cc:13:f1:01:6d:b4:5b:2d:50:23:c6:87:55:
         94:7d:62:f1:b9:44:02:68:ff:0e:40:f2:0c:26:7a:eb:71:e1:
         17:4e:74:ee:1e:91:f3:27:0a:0a:3b:cc:43:7b:ab:10:63:17:
         fa:a0:72:13:f2:68:6f:a1:01:36:b0:1d:fe:97:bf:2e:ab:f7:
         32:1e:c1:d5:e3:81:8f:b5:77:4d:af:20:84:6d:0d:dc:3b:32:
         be:ba:00:a0:19:0c:df:77:5d:39:9b:0a:7c:55:46:2c:cd:d1:
         5a:80:42:ed:fe:e4:3b:ea:be:b2:f0:b0:cd:ae:67:ae:9d:63:
         2a:6a:28:84:f8:0e:0e:f5:ea:4e:0c:c6:cf:91:81:03:0a:9e:
         77:53:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:10:03 2026 by rpki-client