Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa
File:                     3137302e3234362e39372e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          rkyUih65vaUtFARYB89XPpNEsEy6cqa8tZemat6o7bA=
Subject key identifier:   4A:03:23:F5:6D:71:A3:7B:36:66:B0:EB:7B:75:DD:3D:1C:6C:47:65
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       21B36FC349671E643490A0CD972C3E24B73946AD
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:11:56 +0000
ROA not before:           Tue 22 Sep 2026 17:06:56 +0000
ROA not after:            Tue 21 Sep 2027 17:11:56 +0000
asID:                     52721
IP address blocks:        170.246.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:6f:c3:49:67:1e:64:34:90:a0:cd:97:2c:3e:24:b7:39:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:06:56 2026 GMT
            Not After : Sep 21 17:11:56 2027 GMT
        Subject: CN=4A0323F56D71A37B3666B0EB7B75DD3D1C6C4765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:a7:6c:73:cf:ee:3f:bd:30:4c:fb:11:3d:
                    5e:e8:6b:e3:c6:79:42:20:59:67:31:0a:81:67:1c:
                    56:74:47:0c:19:bd:af:a4:44:82:23:09:b3:f7:e3:
                    47:b9:c7:ee:c7:03:c9:77:c6:97:ea:fb:79:a7:62:
                    fe:ac:ff:c4:ca:1a:18:23:f3:d4:91:64:e2:33:3c:
                    bf:af:9e:c6:fb:bc:b8:55:ff:c8:f7:f0:e0:43:8e:
                    a4:86:56:56:a1:37:3f:80:0e:70:d6:df:c3:be:cd:
                    4e:b9:80:13:73:49:4b:14:a7:87:fb:10:02:d1:0e:
                    2f:e4:11:fd:f3:67:05:91:54:aa:2c:20:76:55:ab:
                    df:95:74:24:cf:8c:5d:60:52:a4:22:0e:9d:71:70:
                    5d:ea:c9:b9:76:4e:a9:eb:27:48:04:ad:4e:50:68:
                    f7:21:b7:af:28:24:0b:da:53:8f:33:1f:f7:40:85:
                    e9:18:fa:e1:03:6f:67:4f:de:f4:2f:38:61:1a:7a:
                    b3:ba:b0:3e:e1:3e:1d:f7:24:4f:f4:2f:8b:95:6d:
                    2a:16:bb:65:71:0b:60:d5:d7:26:7a:fa:4b:72:99:
                    64:4b:53:b2:b3:21:75:19:08:2f:35:b2:dc:4d:ac:
                    b2:e0:a6:dc:db:59:73:99:9a:bd:65:23:60:ee:c0:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:23:F5:6D:71:A3:7B:36:66:B0:EB:7B:75:DD:3D:1C:6C:47:65
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:c9:b0:57:dd:eb:a4:26:19:32:93:ee:0f:e5:bc:76:ee:
         91:6d:5f:aa:bc:a2:54:91:9e:87:65:41:1a:30:77:48:d0:90:
         7c:cd:0b:f7:64:38:ce:3e:3b:66:30:61:7e:d4:44:de:aa:0f:
         7e:24:51:57:11:f9:4b:43:62:ea:39:87:1b:d7:25:34:16:12:
         5e:0b:f8:e9:3a:0c:0b:70:5a:0f:5f:1c:50:92:7d:c0:92:c3:
         6a:e9:cc:de:97:2c:69:b1:4c:06:4f:1d:48:7d:ad:ea:26:5d:
         34:30:c9:d7:1b:04:66:64:7a:5c:51:d6:f2:10:98:27:38:ae:
         35:f8:75:02:65:38:59:06:dc:08:fe:8c:03:5b:0d:37:b2:82:
         42:e6:f9:a0:83:9e:b5:19:08:ca:a5:db:43:a1:3c:e1:40:74:
         26:e6:66:df:46:80:2c:bf:c7:dd:b8:de:0b:8d:5c:84:42:df:
         4f:83:97:44:e3:85:20:74:bb:c2:7f:a8:82:71:05:73:2c:a0:
         48:fe:9f:b8:2b:e4:e9:7e:99:86:c2:a6:ee:f5:e7:b5:49:4d:
         0e:69:11:ff:be:34:f5:5e:05:58:ce:10:5b:06:f9:c5:94:de:
         00:04:47:a4:7a:8f:5a:7a:6d:b8:2e:6c:58:98:b5:cd:33:48:
         b2:70:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:20:01 2026 by rpki-client