Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33382e302f32342d3234203d3e20323636343533.roa
File:                     3137302e38332e33382e302f32342d3234203d3e20323636343533.roa (raw, json)
Hash identifier:          turkxlumldjOSBhw5WFvsO0t4Gu1GeFJJD/FWPkD5xk=
Subject key identifier:   37:43:EC:63:3A:00:B6:40:01:6C:43:8E:51:21:08:6F:41:2F:E7:9E
Certificate issuer:       /CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Certificate serial:       564B504DB6B775E953D096438B48AC034382887B
Authority key identifier: DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33382e302f32342d3234203d3e20323636343533.roa
Signing time:             Tue 11 Aug 2026 14:49:23 +0000
ROA not before:           Tue 11 Aug 2026 14:44:23 +0000
ROA not after:            Tue 10 Aug 2027 14:49:23 +0000
asID:                     266453
IP address blocks:        170.83.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4b:50:4d:b6:b7:75:e9:53:d0:96:43:8b:48:ac:03:43:82:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
        Validity
            Not Before: Aug 11 14:44:23 2026 GMT
            Not After : Aug 10 14:49:23 2027 GMT
        Subject: CN=3743EC633A00B640016C438E5121086F412FE79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:71:cc:19:e1:42:a5:38:4d:74:f2:a3:75:
                    b2:20:a0:44:10:ed:01:db:f4:e2:79:86:5f:8e:57:
                    f3:c7:20:d4:48:d6:ca:fa:d7:46:eb:63:ef:5f:01:
                    a5:2f:40:a8:e3:88:b5:87:bf:38:07:c5:5a:cb:28:
                    0e:8f:f1:0b:87:30:44:64:c8:0f:51:c4:31:73:db:
                    ad:3a:91:85:33:7d:17:99:06:8b:d8:75:4d:46:2c:
                    71:14:f4:5a:ae:7a:32:d0:99:e9:27:50:df:8e:d7:
                    cb:c4:38:ed:be:d1:1a:39:2c:12:8c:03:be:c6:3f:
                    3f:71:c3:0e:dd:0c:50:cb:a2:24:fa:66:16:28:ba:
                    f2:a2:e5:08:20:bf:c9:b8:f2:fb:70:38:ae:5b:96:
                    69:f8:24:ae:5b:8c:07:f4:32:2e:b7:87:2c:f8:42:
                    ea:ab:10:61:4f:bf:ec:08:d9:21:fd:66:db:e0:42:
                    4b:79:93:44:8e:cb:57:2d:cc:15:7a:e1:d0:16:9d:
                    2e:9c:51:84:9e:1a:d7:9d:81:14:18:d6:a2:fe:a7:
                    44:cd:58:d4:85:af:0d:63:39:c4:0e:63:ab:b2:6e:
                    2d:4c:19:90:e2:6b:21:6c:20:4e:eb:dd:44:f1:9d:
                    ba:ad:32:32:60:d8:0e:38:5f:64:05:c6:7c:0d:00:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:43:EC:63:3A:00:B6:40:01:6C:43:8E:51:21:08:6F:41:2F:E7:9E
            X509v3 Authority Key Identifier:
                keyid:DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33382e302f32342d3234203d3e20323636343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e1:74:44:fc:1c:b7:e3:d2:e4:9c:28:22:50:30:3c:7b:29:
         5c:21:e3:e4:74:b9:67:cc:7a:b0:52:1c:22:cb:c0:e0:38:88:
         5f:37:40:c2:24:7e:74:29:ea:6d:8d:2f:6d:6e:cd:06:ec:dc:
         b7:7a:b3:f8:3f:bc:97:34:ce:a5:45:63:14:70:eb:2e:fa:d6:
         e8:75:11:ca:21:4a:6a:3a:19:09:f9:f2:fa:4b:64:37:79:c6:
         03:61:ea:e1:18:c4:98:98:d6:81:ea:75:ed:8e:a5:c8:e0:11:
         b1:bf:55:16:cf:09:49:5d:ec:1c:84:1a:92:4e:e2:db:b3:70:
         60:2d:1d:ae:9a:10:58:6c:1b:07:92:55:5d:02:d0:1e:f2:0a:
         a6:32:17:b4:c9:39:6d:10:c3:fb:32:4e:fe:8c:13:82:09:8b:
         53:10:69:19:af:1f:6d:a7:bb:43:d8:44:f0:07:07:66:93:5a:
         09:a9:8a:0d:5f:0d:ec:89:7c:fc:53:3f:c1:ee:67:b7:68:d0:
         a9:5d:e9:77:65:1f:da:d9:5d:2c:fa:bb:38:40:70:c0:ea:cd:
         7a:3d:60:05:27:a7:82:65:67:42:8e:f9:c6:6c:68:e1:1f:46:
         66:8a:d7:82:e9:ef:0d:41:c2:e2:e5:fa:3f:62:65:59:12:ec:
         85:50:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:55:03 2026 by rpki-client