Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32342d3234203d3e20323636323933.roa
File:                     3137302e37392e3133342e302f32342d3234203d3e20323636323933.roa (raw, json)
Hash identifier:          J0fQ6kITkNpdow2dd+tJ09/zoIPzQQciyRL7sTfxsZc=
Subject key identifier:   80:CF:55:92:FC:76:99:48:CD:26:5F:8F:4D:CC:B4:8F:25:95:9C:D5
Certificate issuer:       /CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
Certificate serial:       24068D58B8A9A49032AA9B5977A3E783AC2A3204
Authority key identifier: 0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32342d3234203d3e20323636323933.roa
Signing time:             Tue 28 Jul 2026 19:01:06 +0000
ROA not before:           Tue 28 Jul 2026 18:56:06 +0000
ROA not after:            Tue 27 Jul 2027 19:01:06 +0000
asID:                     266293
IP address blocks:        170.79.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl
                          rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:06:8d:58:b8:a9:a4:90:32:aa:9b:59:77:a3:e7:83:ac:2a:32:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
        Validity
            Not Before: Jul 28 18:56:06 2026 GMT
            Not After : Jul 27 19:01:06 2027 GMT
        Subject: CN=80CF5592FC769948CD265F8F4DCCB48F25959CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:07:7c:38:ad:62:a8:29:44:82:64:53:82:
                    f6:17:69:53:8e:01:eb:3b:9c:c9:3b:d1:43:96:a1:
                    e4:33:ab:6c:ed:db:8a:7b:c2:93:84:0c:88:0a:17:
                    64:c3:83:fa:3d:09:5a:2b:21:13:3e:b4:01:64:3a:
                    6b:e5:c3:e3:18:ac:e4:c7:43:35:63:3e:37:5f:48:
                    6f:bc:96:47:c0:03:ab:89:9a:8a:ac:83:fa:cc:61:
                    7e:3f:b4:ca:ba:50:86:47:8b:dc:d7:7a:26:0a:13:
                    a2:77:cd:7a:9e:fd:ed:ec:57:65:29:63:1b:8e:3c:
                    e8:d9:d5:a9:d6:60:f5:ce:5e:db:3d:34:62:22:d1:
                    76:73:f1:9c:08:db:31:9a:a2:0f:00:57:1d:38:7e:
                    59:bd:d2:5f:c7:9d:d6:dd:38:f5:3e:df:1c:6c:c6:
                    20:c3:67:6f:2c:ab:58:39:4c:ea:18:b4:f9:ce:fb:
                    24:07:21:56:39:18:40:26:7c:f2:73:59:3f:1c:7b:
                    90:71:98:c3:96:1e:ca:22:cd:66:69:93:b6:47:ae:
                    cf:de:5f:91:d6:cb:a9:c5:b0:f0:29:2f:6a:d9:24:
                    8b:43:21:a3:c2:83:6a:c5:ec:b1:a3:e9:00:d8:f2:
                    a2:0b:fa:66:80:f9:09:3c:45:b5:b8:0a:94:44:b7:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:55:92:FC:76:99:48:CD:26:5F:8F:4D:CC:B4:8F:25:95:9C:D5
            X509v3 Authority Key Identifier:
                keyid:0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133342e302f32342d3234203d3e20323636323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:97:ea:87:5d:68:ff:a7:63:d5:e5:4c:00:64:77:1c:ac:d7:
         55:e7:cb:94:38:d1:42:76:bf:d1:4b:93:6d:10:e6:8e:d2:56:
         a2:79:13:23:68:e6:f4:b1:68:ea:a2:a5:53:17:94:6e:94:ad:
         32:d8:ed:69:aa:b7:32:09:00:4e:05:b5:75:16:e3:78:ab:b0:
         50:7a:6d:c6:31:6c:75:51:68:14:9e:a0:23:ac:4d:29:7d:53:
         e7:51:b7:9e:91:99:65:04:fa:2d:fc:a8:a1:ee:ce:b4:4e:41:
         ae:7e:4c:4a:90:d4:9f:a4:59:15:ff:f9:10:36:b0:f7:fa:cd:
         bd:92:01:aa:a8:8b:58:1f:a6:e4:21:6f:ec:3a:cb:f3:ec:c6:
         dd:22:90:9c:59:7d:df:2c:40:4d:80:56:f3:83:65:78:11:57:
         47:3f:ee:68:03:c9:3f:a1:ce:d1:2c:4d:e6:f1:39:af:12:0e:
         3b:74:54:df:4e:87:10:91:51:b7:63:98:ad:42:c7:9e:3f:05:
         3b:c9:8f:e3:50:f7:c5:58:93:64:db:21:9c:66:14:92:d8:9a:
         6d:50:1f:e8:82:50:ba:5b:70:ca:98:97:ff:2f:b8:a6:8c:30:
         54:71:5a:13:15:ef:65:f6:85:25:70:a5:a8:ad:1a:2e:38:e8:
         80:ca:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:20:59 2026 by rpki-client