Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134372e302f32342d3234203d3e20323636333631.roa
File:                     3137302e3233392e3134372e302f32342d3234203d3e20323636333631.roa (raw, json)
Hash identifier:          uNXEiziGXAgj+CVAeUhPPtqUmtgCHCQdAJBB3WbVQ44=
Subject key identifier:   42:2D:CD:13:A8:B7:D5:03:33:F5:00:3C:D0:85:AA:C7:00:BA:28:83
Certificate issuer:       /CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
Certificate serial:       72294A2F9FFF624F409E29B2953EFA298917E4FE
Authority key identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134372e302f32342d3234203d3e20323636333631.roa
Signing time:             Fri 11 Sep 2026 18:22:26 +0000
ROA not before:           Fri 11 Sep 2026 18:17:26 +0000
ROA not after:            Fri 10 Sep 2027 18:22:26 +0000
asID:                     266361
IP address blocks:        170.239.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl
                          rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 16:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:29:4a:2f:9f:ff:62:4f:40:9e:29:b2:95:3e:fa:29:89:17:e4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
        Validity
            Not Before: Sep 11 18:17:26 2026 GMT
            Not After : Sep 10 18:22:26 2027 GMT
        Subject: CN=422DCD13A8B7D50333F5003CD085AAC700BA2883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:3f:39:97:6c:66:bc:70:e6:83:bb:d0:21:
                    d5:2b:d3:02:b3:a4:94:a7:84:9f:85:da:9d:12:a3:
                    94:e2:54:7c:a2:70:5d:ff:1f:5b:89:38:79:93:bf:
                    c1:7b:ad:77:bc:b7:f1:ec:3a:61:ed:f9:79:ee:48:
                    c0:5e:ff:33:f9:c8:cb:f0:04:e3:95:d3:95:f2:c1:
                    d5:7b:e9:55:ef:03:b6:5f:c4:4d:3b:0d:e6:be:e4:
                    ae:e4:d3:ec:25:c7:a3:d5:6b:34:f0:51:54:67:14:
                    98:9b:dd:f1:58:25:9d:2b:2c:fd:fc:d7:8d:4f:e2:
                    2a:26:2b:76:df:66:a2:e5:e2:e6:71:4f:b0:8b:7a:
                    15:85:df:22:2f:7f:4d:c5:a3:b5:45:24:9d:88:69:
                    75:0d:fa:61:62:9f:6d:a2:d5:7c:e6:bd:8b:05:da:
                    46:83:df:d1:1c:c0:1d:aa:c7:f6:c7:3f:56:80:ac:
                    56:99:e4:7d:86:8d:bf:96:3d:66:90:3c:9d:55:ba:
                    cf:4f:f1:5e:41:a5:09:38:5d:b4:47:b4:c7:da:9f:
                    83:1c:a0:58:42:f5:ac:16:bd:9e:1a:20:f9:50:5f:
                    d5:3a:20:ec:72:1b:85:35:20:5a:05:5f:f9:81:63:
                    cb:d0:da:2b:b3:1c:1a:65:b5:c4:d0:e7:70:a1:f7:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2D:CD:13:A8:B7:D5:03:33:F5:00:3C:D0:85:AA:C7:00:BA:28:83
            X509v3 Authority Key Identifier:
                keyid:97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134372e302f32342d3234203d3e20323636333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:8b:d9:b0:45:7f:27:26:4a:d6:95:a0:c2:5f:56:36:b0:
         61:69:67:f7:6a:d8:6a:f0:e2:93:f3:45:b9:74:d7:fd:e4:0d:
         0b:f3:83:cc:6a:73:57:c2:0a:24:de:29:4c:9a:84:e5:c6:05:
         a1:7b:99:b2:27:29:36:9b:83:57:9a:48:0e:ba:2c:1f:f3:6b:
         33:4d:36:f0:c8:82:ec:65:59:5b:6f:ba:28:52:69:85:df:fd:
         b7:e0:76:33:f6:bc:5e:dc:92:b4:44:55:8d:fe:96:2d:88:ed:
         0f:6b:d0:b2:1f:b2:66:f0:85:5f:07:68:43:58:08:24:a2:f0:
         94:3c:38:18:ff:1b:b4:12:af:e4:98:8b:28:f7:dc:36:70:ea:
         e6:d4:50:cc:0d:cb:96:76:13:f2:25:ef:fd:5d:c4:7c:e5:9c:
         15:67:b4:a0:27:81:08:be:7f:62:66:9b:32:96:48:a4:0c:d1:
         d0:e4:15:13:58:d5:c5:00:28:4b:de:9d:dc:a3:24:d8:0c:19:
         bd:fc:cc:b7:2d:01:55:c2:35:88:94:34:91:28:50:10:9c:97:
         7f:ad:bf:85:30:4c:68:db:b5:92:15:e0:e2:d6:bb:56:14:f0:
         7f:18:12:a0:6d:2d:35:39:d2:1d:54:3e:69:30:35:ad:be:9a:
         7f:e3:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:42:15 2026 by rpki-client