Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa
File:                     3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa (raw, json)
Hash identifier:          WzIvs5qZadchOlY3gErU3xAU8pqs6k/mDtexxZXvAVo=
Subject key identifier:   EE:73:B8:09:5B:E8:23:1B:0D:BB:80:C4:06:4E:5B:BB:09:AA:39:91
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       6766E635CBB6D13CB2049D3EFEED47FFA6251D61
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa
Signing time:             Thu 24 Jul 2025 14:21:30 +0000
ROA not before:           Thu 24 Jul 2025 14:16:30 +0000
ROA not after:            Thu 23 Jul 2026 14:21:30 +0000
asID:                     266028
IP address blocks:        170.245.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:e6:35:cb:b6:d1:3c:b2:04:9d:3e:fe:ed:47:ff:a6:25:1d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Jul 24 14:16:30 2025 GMT
            Not After : Jul 23 14:21:30 2026 GMT
        Subject: CN=EE73B8095BE8231B0DBB80C4064E5BBB09AA3991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:e8:1b:be:d3:df:d0:89:4f:4b:e3:f0:0a:
                    54:dc:0d:5f:65:4c:6a:24:ad:a0:27:5c:59:31:92:
                    fd:02:de:e2:30:c1:c3:b3:cb:cd:36:a5:8e:2f:0f:
                    03:03:a2:96:59:86:93:de:3f:79:94:87:44:37:0f:
                    6a:08:ac:de:57:2e:95:c4:40:da:9d:21:d0:b5:79:
                    0e:2e:aa:87:77:55:3f:3f:7a:fa:29:03:4a:ae:f1:
                    bf:6c:a6:ed:b3:be:61:36:b7:af:31:be:c8:8b:34:
                    19:09:9a:26:65:60:a6:16:98:a8:4e:92:6f:9a:d3:
                    d7:f9:9f:25:38:49:e9:07:ad:6e:c2:e3:46:4b:8f:
                    6c:c8:3c:8d:58:a2:44:7e:eb:91:6c:9b:c6:b3:24:
                    b2:3f:d4:32:81:42:1f:a2:51:c5:6f:73:0a:c8:a7:
                    0f:e9:c0:8b:0d:83:28:25:84:dc:09:db:7e:e3:af:
                    d1:b5:22:bc:ed:09:76:c2:b0:9a:72:5c:2d:a8:79:
                    99:fa:15:c8:d9:96:73:b1:d6:d1:69:23:f4:40:11:
                    eb:08:7d:1a:1a:d4:32:c8:a0:38:bc:5d:55:e1:28:
                    c8:1a:9c:f0:cd:7c:04:6e:2f:c9:23:c3:b4:da:09:
                    90:47:d8:a1:5b:22:a5:d0:88:fa:04:50:bb:df:2e:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:B8:09:5B:E8:23:1B:0D:BB:80:C4:06:4E:5B:BB:09:AA:39:91
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32332d3233203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:36:12:29:20:ca:d3:25:ef:92:7c:38:15:a5:52:46:ed:76:
         fe:a4:c0:2b:87:1d:3e:d3:04:5b:7c:17:12:74:a5:92:2a:1a:
         33:f9:87:9e:00:7f:28:8f:1d:61:30:c5:fb:dc:37:69:14:7b:
         c1:3c:2f:8d:19:15:b6:7c:f5:e2:2a:ad:3f:de:39:0f:2e:e7:
         98:77:95:b2:ea:0a:49:52:e2:4d:3b:9e:e0:84:c8:84:60:90:
         cb:67:f1:34:fc:ee:f8:5a:fc:f2:24:c7:e0:df:c7:89:6c:42:
         a3:e0:b9:b8:1a:6b:99:51:10:20:49:ea:26:a0:44:1c:a3:aa:
         1d:8e:68:1a:b4:a3:32:f1:41:4b:b0:2b:29:b0:4e:34:17:f9:
         38:f3:60:9e:e3:00:4a:25:50:42:3e:81:c1:94:1e:d0:a4:ab:
         b9:12:9e:73:1e:66:a0:fa:46:6c:6d:e8:05:b1:39:76:a4:5f:
         5c:af:04:26:15:96:5a:0a:20:c1:fe:b0:c9:8d:45:44:ac:c6:
         0e:c4:4f:55:f8:4b:8d:e9:1f:28:8d:8f:d3:de:07:87:12:81:
         6f:90:77:95:4b:d6:ea:ef:d4:61:e1:42:5c:92:89:13:b5:90:
         84:74:2a:2b:4b:b9:55:f2:3e:72:fb:cf:1e:29:42:e6:17:38:
         4b:1e:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:05:30 2025 by rpki-client