Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa
File:                     3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa (raw, json)
Hash identifier:          LzQ2oyfZ17omD2PfvsT2B55xut4yBlztpUSOdljl4ps=
Subject key identifier:   C8:4E:6E:A6:C0:39:F3:DB:3C:BD:6D:8B:FD:75:2F:F3:67:27:1C:A9
Certificate issuer:       /CN=797EA179F58872917F817056DDA50640D6141177
Certificate serial:       6DD0AA9606E102B1D052E84B81FF2F54937E8BD4
Authority key identifier: 79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa
Signing time:             Mon 10 Aug 2026 03:02:49 +0000
ROA not before:           Mon 10 Aug 2026 02:57:49 +0000
ROA not after:            Mon 09 Aug 2027 03:02:49 +0000
asID:                     270431
IP address blocks:        190.115.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl
                          rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:aa:96:06:e1:02:b1:d0:52:e8:4b:81:ff:2f:54:93:7e:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EA179F58872917F817056DDA50640D6141177
        Validity
            Not Before: Aug 10 02:57:49 2026 GMT
            Not After : Aug  9 03:02:49 2027 GMT
        Subject: CN=C84E6EA6C039F3DB3CBD6D8BFD752FF367271CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:db:70:c4:87:58:c0:71:0c:18:43:39:97:
                    68:ea:9d:68:6b:ec:ef:12:9e:1e:6b:16:0c:dd:e2:
                    44:82:c9:88:3a:1a:ab:89:a0:ec:3f:b0:7f:81:b9:
                    f5:ac:67:77:80:e8:f4:f4:88:67:d1:40:a5:08:79:
                    b6:be:ad:08:57:26:ea:bd:a4:7d:7e:b2:bd:b5:10:
                    62:0c:19:c6:59:5c:a0:ba:e3:03:5c:62:81:3b:8f:
                    fb:3b:70:93:a3:63:e1:ba:7c:5c:e8:01:f1:6e:12:
                    b7:01:dd:21:b8:f7:07:01:32:be:5a:d4:34:7c:0e:
                    85:59:4c:15:36:16:de:a7:d8:d9:e7:1d:20:fe:23:
                    82:71:de:fe:d8:03:2f:1f:f4:b3:8d:ff:60:40:91:
                    9b:33:d0:5c:c7:bb:69:f4:20:a1:da:03:24:4a:da:
                    a5:b9:b9:98:f2:2b:30:db:9e:31:f7:81:9a:52:ba:
                    15:0c:e4:75:38:48:7d:9b:84:3d:45:e6:e2:e4:12:
                    52:bb:33:2b:c1:09:d7:c3:56:10:83:63:7a:22:28:
                    5c:29:18:45:5c:1c:3e:99:7a:4b:ad:2d:53:1e:73:
                    2b:ae:8c:9b:0d:4b:b0:a4:a2:5b:80:78:23:5d:70:
                    b9:f5:bb:df:5e:33:1a:23:77:6e:6c:49:88:6f:df:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:6E:A6:C0:39:F3:DB:3C:BD:6D:8B:FD:75:2F:F3:67:27:1C:A9
            X509v3 Authority Key Identifier:
                keyid:79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:82:1e:ae:77:89:be:c3:13:68:a6:58:89:03:21:03:cd:ec:
         70:2b:e4:b9:6f:30:89:ce:e0:80:7c:2f:80:81:72:79:0d:73:
         f9:39:bf:c4:81:51:70:2d:09:e9:a9:e1:fb:4c:07:41:f3:42:
         64:0a:ef:b5:6e:cb:55:c5:a4:02:1b:98:a9:27:cf:bd:1c:01:
         a7:f2:d4:b7:5b:50:93:3f:62:65:cc:1b:d2:48:a6:c2:54:5a:
         13:ee:75:9f:92:53:be:66:44:9f:16:27:f3:59:07:42:1f:d4:
         78:e8:1a:f7:ec:d0:3a:d8:b8:e4:42:16:f9:e4:b0:ee:0f:b6:
         23:ac:bf:81:f4:06:41:fb:cc:b8:ea:10:50:17:ad:3a:00:26:
         ff:7d:6a:55:61:dc:b4:94:29:37:9e:68:25:48:41:ad:d1:57:
         f9:fa:9f:a4:3f:ce:8c:21:82:52:06:75:02:de:a5:d0:ee:e7:
         fd:82:f2:60:49:23:6c:a4:f1:35:18:30:bf:06:fa:2f:87:68:
         7b:ee:b9:39:ae:41:47:f8:ae:a4:c7:c4:58:8a:3a:a4:7e:05:
         5f:c4:d3:e2:b5:81:68:15:f5:ae:4a:ac:07:0f:35:c2:2c:5b:
         a8:fa:f7:13:e0:dc:30:bf:c1:ee:14:b2:85:e5:cd:ed:60:ed:
         7a:39:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:24:05 2026 by rpki-client