Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133342e302f32332d3233203d3e203631383238.roa
File:                     3137302e3135302e3133342e302f32332d3233203d3e203631383238.roa (raw, json)
Hash identifier:          6ayOB2n2O86hruSRY/ZJYOmQKDvmywmuOX3CzlfhQs4=
Subject key identifier:   F8:63:CE:88:F2:08:74:C6:4A:11:EC:2C:1A:47:DA:FD:15:8C:A8:A8
Certificate issuer:       /CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
Certificate serial:       41ED6BBADCE052ACE5BEE95003402AD69B8420F8
Authority key identifier: 14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133342e302f32332d3233203d3e203631383238.roa
Signing time:             Tue 23 Jun 2026 22:43:56 +0000
ROA not before:           Tue 23 Jun 2026 22:38:56 +0000
ROA not after:            Tue 22 Jun 2027 22:43:56 +0000
asID:                     61828
IP address blocks:        170.150.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl
                          rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:6b:ba:dc:e0:52:ac:e5:be:e9:50:03:40:2a:d6:9b:84:20:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
        Validity
            Not Before: Jun 23 22:38:56 2026 GMT
            Not After : Jun 22 22:43:56 2027 GMT
        Subject: CN=F863CE88F20874C64A11EC2C1A47DAFD158CA8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:cc:4b:04:92:c1:64:0b:d1:d0:60:8c:fd:
                    1e:93:c8:09:d4:27:b5:50:15:62:bd:db:9f:7f:aa:
                    2b:80:e4:83:d7:1c:a5:c0:da:ab:2c:83:21:da:aa:
                    f9:b8:3d:67:84:40:a9:a7:06:45:af:34:dd:d3:63:
                    55:e3:b7:e5:7d:17:23:2d:bc:43:aa:78:68:92:44:
                    da:a3:44:49:12:cd:3d:9b:f6:be:39:4a:c2:43:8a:
                    bb:6e:52:42:f5:80:36:5c:33:65:aa:77:78:4f:a4:
                    d8:46:1d:44:ce:76:3f:21:d8:1a:ee:3f:66:29:3a:
                    41:79:33:f1:2c:a7:20:f8:0e:38:3c:cb:e2:66:64:
                    77:cc:61:4a:f9:f0:a7:81:89:8c:8b:54:75:82:ab:
                    ee:67:39:dd:2f:f1:63:54:02:23:f3:68:e4:92:eb:
                    94:16:f4:d7:e8:ef:22:64:99:62:ed:07:c7:0d:ea:
                    b6:a1:d5:cf:3a:8e:49:4b:4b:10:d7:24:61:ba:4e:
                    e9:80:04:0d:b6:f2:ca:f2:44:93:fe:47:6b:62:4a:
                    f8:09:0a:5a:ee:ba:00:29:28:f7:40:2c:9a:33:63:
                    54:ca:8f:8a:19:47:8b:e0:1e:34:13:f0:24:29:89:
                    77:17:04:a7:ee:77:67:25:82:ae:ec:6a:14:bb:e3:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:CE:88:F2:08:74:C6:4A:11:EC:2C:1A:47:DA:FD:15:8C:A8:A8
            X509v3 Authority Key Identifier:
                keyid:14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133342e302f32332d3233203d3e203631383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:57:31:0b:be:2c:cc:4f:46:0a:ec:f1:44:56:c2:c9:0b:96:
         40:83:56:db:b0:d4:e9:09:0a:6a:7f:fd:54:ab:a6:ab:70:13:
         82:2c:65:e3:23:53:f4:15:bf:af:57:e6:dd:18:2c:c0:80:83:
         35:0b:f4:f3:31:6d:7b:23:2e:6b:a0:e5:d5:41:3b:2c:d5:a8:
         01:d1:e0:e4:de:d9:a7:68:de:6e:06:8d:98:85:84:99:1a:bb:
         a1:a3:04:aa:66:1f:28:7c:c4:16:84:5f:71:6d:d5:bb:7a:e3:
         a2:00:78:c3:a5:15:25:e9:39:7d:ba:e9:43:24:09:41:46:94:
         10:ee:80:97:46:0d:ea:df:ec:d8:ac:8b:29:b0:bf:5a:d5:47:
         6c:48:f8:17:12:83:60:d7:3e:1c:81:d7:b7:25:7e:bd:3e:c6:
         e6:b6:a4:14:65:df:02:30:11:40:17:1f:e5:47:2b:ec:f4:0e:
         3c:54:62:7d:67:76:df:8f:87:25:9e:09:60:1f:b4:a6:09:0d:
         72:83:c0:db:d8:04:83:5b:9d:4c:4b:c1:f1:43:82:fa:86:c3:
         1f:5e:2b:21:d8:87:b0:a0:4f:1e:85:1e:b5:51:8c:12:95:e3:
         a9:2c:79:c7:0b:c9:88:9c:20:08:a2:6d:ed:60:01:ec:08:65:
         6e:e2:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:25 2026 by rpki-client