Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32332d3233203d3e20323636323933.roa
File:                     3137302e37392e3133342e302f32332d3233203d3e20323636323933.roa (raw, json)
Hash identifier:          Uzgv7eL9nccJHS0wkBifPxy8W6pHya83bKlrLkn7vTE=
Subject key identifier:   2E:D5:9D:16:68:32:8E:2A:73:3B:6C:B2:AC:46:B2:D2:53:EA:CE:30
Certificate issuer:       /CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
Certificate serial:       0AE33C81142AA2F79BB6EE2ECAA3A39F00F68681
Authority key identifier: 0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32332d3233203d3e20323636323933.roa
Signing time:             Tue 28 Jul 2026 19:01:06 +0000
ROA not before:           Tue 28 Jul 2026 18:56:06 +0000
ROA not after:            Tue 27 Jul 2027 19:01:06 +0000
asID:                     266293
IP address blocks:        170.79.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl
                          rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e3:3c:81:14:2a:a2:f7:9b:b6:ee:2e:ca:a3:a3:9f:00:f6:86:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
        Validity
            Not Before: Jul 28 18:56:06 2026 GMT
            Not After : Jul 27 19:01:06 2027 GMT
        Subject: CN=2ED59D1668328E2A733B6CB2AC46B2D253EACE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:fd:22:45:b9:a1:3e:ab:61:d1:bf:7c:18:
                    d9:0b:ca:ef:13:20:7f:55:7b:69:83:2f:16:5e:f7:
                    9d:ac:68:2f:58:b7:56:73:75:72:e7:a1:40:5a:8b:
                    ef:44:58:75:f7:08:0f:03:39:71:a2:01:30:27:dc:
                    0d:65:f7:53:3e:9c:b1:4c:aa:6e:3d:cb:df:f6:0d:
                    96:70:ee:f3:b7:4c:21:0d:5b:4c:d8:1a:65:5c:2c:
                    67:c3:6a:c0:21:02:18:76:f2:29:5d:2a:09:f9:c4:
                    87:8a:2f:97:a2:87:1b:e7:a9:94:fa:a2:a1:cf:1e:
                    44:59:77:46:6d:1a:97:3e:90:17:eb:78:0a:99:d3:
                    98:99:f6:b1:d8:ab:f5:d7:9f:f5:83:05:de:c2:1a:
                    81:01:65:5a:fd:a0:d6:f1:21:66:77:86:09:ce:33:
                    af:82:1f:2d:dd:6d:83:f8:1f:2a:96:d1:5d:99:1d:
                    83:30:86:fa:a3:10:66:64:e7:fd:d9:52:5b:de:47:
                    8d:25:a7:98:74:69:92:f5:01:6f:11:da:72:01:20:
                    f4:91:5d:e3:a2:33:00:7b:09:5b:6d:71:a6:70:b0:
                    92:70:14:7e:02:7e:b2:16:14:dd:8d:9c:d5:fa:7c:
                    b8:87:dd:2a:28:2b:b7:e2:26:44:05:10:ba:1d:10:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:9D:16:68:32:8E:2A:73:3B:6C:B2:AC:46:B2:D2:53:EA:CE:30
            X509v3 Authority Key Identifier:
                keyid:0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32332d3233203d3e20323636323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:be:a9:91:8b:23:b5:a1:5d:ad:31:cf:f6:98:d7:71:37:10:
         34:cc:0c:a7:a0:01:bd:6b:28:69:a3:fa:ba:9e:6a:e8:45:d5:
         4a:a9:7b:8b:e7:b1:2d:d7:79:e9:47:11:0e:f2:7d:e0:9d:3b:
         a4:98:7d:bd:e2:47:66:37:e7:91:74:f6:f9:03:d1:c3:8d:c7:
         4f:dd:da:db:1c:7a:c1:3f:d2:68:f2:2d:c9:57:1c:aa:79:9e:
         7c:ed:d2:08:61:26:2b:af:a9:64:16:3c:e7:28:b5:a7:11:60:
         15:ac:40:27:31:d4:2c:b7:05:3c:2b:c5:51:08:5e:68:cb:87:
         64:31:7e:61:f2:c7:76:f1:23:77:8a:3f:39:e0:ca:32:af:da:
         90:ca:f1:41:ec:bd:1d:cd:17:16:07:f9:82:44:88:2f:31:9a:
         01:04:97:43:d4:81:28:cf:21:07:b4:0a:db:b6:2b:98:25:d0:
         ab:dc:b2:8d:c7:b9:3c:71:4e:0a:97:db:54:4d:3c:93:65:2e:
         b1:cb:a5:59:f0:fd:2f:b4:ee:43:74:68:6a:5f:69:ca:ad:55:
         e1:24:76:fb:be:e7:6f:01:42:31:44:0c:83:2b:e6:2e:aa:f3:
         1e:ca:a2:f3:e9:61:08:df:ab:36:4e:c3:30:3f:c4:2c:9d:a9:
         e4:a5:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:03:47 2026 by rpki-client