Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e34342e302f32322d3332203d3e20323638393736.roa
File:                     3137302e37392e34342e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          tkTbsqzAPTjjaISjZi8yep8oW1VNw+iaRPpp5FeJInA=
Subject key identifier:   E2:63:89:7D:77:7A:DE:A4:81:64:CC:F3:13:16:18:AF:C5:CA:EF:92
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       0284B22793E4C669752D222B55F987719FD4E2B5
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e34342e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 18:00:04 +0000
ROA not before:           Mon 06 Apr 2026 17:55:04 +0000
ROA not after:            Mon 05 Apr 2027 18:00:04 +0000
asID:                     268976
IP address blocks:        170.79.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:b2:27:93:e4:c6:69:75:2d:22:2b:55:f9:87:71:9f:d4:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:55:04 2026 GMT
            Not After : Apr  5 18:00:04 2027 GMT
        Subject: CN=E263897D777ADEA48164CCF3131618AFC5CAEF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:da:21:62:44:f8:2c:a2:da:84:a7:58:a1:
                    c5:d0:22:5a:7b:b5:2f:b9:c8:30:ca:74:37:8d:39:
                    97:21:88:da:b4:1d:f9:4f:22:d4:30:3d:cc:23:c5:
                    8f:22:d6:c0:c5:6c:9d:d2:f1:75:33:85:22:39:ff:
                    72:1e:fc:4d:e7:aa:17:bc:52:6d:3d:98:2e:eb:84:
                    7b:f3:39:37:d8:3b:50:99:a0:34:24:45:e8:9f:f5:
                    79:a2:18:37:f7:8d:70:4f:c4:ed:eb:30:f8:f1:f4:
                    5e:cf:0f:04:9b:74:07:1b:a5:89:26:a3:66:5a:fb:
                    83:3b:dd:1d:ba:19:9c:4c:bd:98:94:ba:3f:89:5a:
                    6c:b8:9b:c3:f7:14:15:58:e5:e0:b5:e5:d7:2d:fe:
                    3c:41:d3:fc:51:31:70:54:43:28:f4:a2:b4:97:e0:
                    cc:22:15:71:68:ef:e3:c5:a3:f8:76:af:b0:e1:ef:
                    41:08:40:9c:35:eb:d0:66:9a:42:34:43:db:58:9f:
                    7e:35:00:a6:f6:19:16:fa:69:06:7d:f9:23:11:f0:
                    06:8c:b9:e8:22:e7:4d:c6:b2:cb:db:fc:28:a8:8f:
                    77:8f:a7:83:7a:da:18:e2:8b:3d:f6:f4:e7:fe:c4:
                    9b:63:5a:4e:38:90:97:06:6e:d4:dd:a2:b5:7d:25:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:89:7D:77:7A:DE:A4:81:64:CC:F3:13:16:18:AF:C5:CA:EF:92
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137302e37392e34342e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:7d:e9:1a:c9:fc:96:ef:1a:b0:4c:1a:f4:fa:15:0e:8f:
         b1:77:d6:64:97:08:97:9a:ad:3a:26:59:33:10:ff:13:0f:3b:
         f6:8c:f7:f4:4d:15:85:f2:15:ea:57:59:b7:20:7d:c3:51:a5:
         5b:9e:d2:a5:f3:3f:ca:a5:f8:b7:55:e6:65:63:d6:f2:82:f9:
         47:35:45:d6:39:8e:2c:65:f2:4b:bc:a7:e6:fe:38:1a:cc:a8:
         53:b5:41:c9:6e:8e:61:27:df:87:2e:1d:2f:a6:9c:fe:b3:56:
         eb:82:06:e3:5e:d2:fb:8b:a3:9e:86:d0:c6:01:f7:d3:0d:fb:
         01:0c:60:23:09:81:6c:cb:b2:4d:52:85:28:24:52:8d:0d:33:
         6a:c8:09:ad:43:90:e1:42:e0:dd:7b:09:bc:91:8c:3c:b3:1f:
         f7:24:89:87:9e:8e:ab:c7:79:e8:43:09:aa:78:58:a3:81:d7:
         74:8e:2b:b0:b0:e8:ea:bf:36:73:8b:5c:ba:f7:ea:2f:34:46:
         cb:9f:bd:a2:c5:43:66:ab:5a:f5:83:81:8f:b1:b7:12:4b:f3:
         cf:63:5d:d9:15:b0:f7:c0:dd:a0:84:c3:19:af:9f:38:83:db:
         4c:5e:07:c4:c2:61:ad:b5:34:8a:fe:50:40:ed:53:e1:8f:4a:
         21:d1:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:20:01 2026 by rpki-client