Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa
File:                     3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (raw, json)
Hash identifier:          GjGb12ek4c6Vw/rb+PWOFLz13vdyuAQDXxXF/A6wwzU=
Subject key identifier:   21:0C:71:E7:6C:7F:15:C9:24:EF:A7:A5:15:49:E9:4D:06:0E:78:EE
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       1E1C0127ED015FC61A20E57C24E7832C0E7D2027
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa
Signing time:             Fri 30 Oct 2026 14:05:29 +0000
ROA not before:           Fri 30 Oct 2026 14:00:29 +0000
ROA not after:            Fri 29 Oct 2027 14:05:29 +0000
asID:                     266446
IP address blocks:        170.82.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 14:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1c:01:27:ed:01:5f:c6:1a:20:e5:7c:24:e7:83:2c:0e:7d:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Oct 30 14:00:29 2026 GMT
            Not After : Oct 29 14:05:29 2027 GMT
        Subject: CN=210C71E76C7F15C924EFA7A51549E94D060E78EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:5a:e7:e2:65:71:d4:c4:22:46:4e:66:18:
                    cd:30:60:1d:e0:6b:b0:95:8b:bf:9e:25:c8:e0:f3:
                    af:ab:3f:df:f8:4f:2d:d9:2e:de:0a:fb:96:09:b2:
                    5a:46:e4:0b:08:82:f0:68:b4:78:79:7b:70:4e:e1:
                    b5:ee:0a:02:45:c1:1b:8c:56:0d:b8:bb:e8:a4:f3:
                    7c:48:43:68:72:d4:7c:70:83:79:74:49:66:70:f2:
                    3e:6c:29:b0:40:a7:09:51:ef:0d:55:06:7e:e5:7e:
                    c6:b9:bc:86:3a:0d:28:3d:fa:8d:1f:00:c6:e5:12:
                    41:81:72:3d:0e:0c:7f:cb:5d:bb:f7:f0:11:ae:9b:
                    ff:81:17:a1:79:72:f8:a9:79:3b:29:09:24:42:0e:
                    c3:ac:f0:58:f8:2a:8f:ce:73:be:76:50:50:86:24:
                    69:7e:37:57:86:40:3e:6d:1a:f0:df:1b:a6:f1:0b:
                    78:5c:27:df:80:05:7a:6a:9a:fc:d5:23:c4:09:c8:
                    72:a9:6d:0c:4f:94:e1:b9:ce:e8:d4:9e:19:aa:0d:
                    45:66:4b:89:e7:d9:e6:aa:0e:d7:77:57:f0:fd:4d:
                    58:fd:87:f7:d3:1a:46:f1:6a:3a:a4:49:87:e3:08:
                    a9:15:c8:8c:b1:91:20:b2:69:ae:58:92:91:55:32:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:71:E7:6C:7F:15:C9:24:EF:A7:A5:15:49:E9:4D:06:0E:78:EE
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:17:37:46:7f:8d:66:ee:d1:17:ca:09:81:7e:41:5e:6e:f5:
         0d:ae:53:38:6c:46:c9:95:f7:02:c4:83:31:ae:cf:39:5e:d1:
         71:1f:3e:31:fc:ac:cd:7d:b3:4a:4d:75:6f:be:67:c4:c5:d2:
         c1:b8:13:c0:0b:10:5b:a6:e5:61:64:18:a4:40:5b:16:79:4a:
         c5:63:5a:e7:00:ff:2c:09:c1:5a:8f:08:42:64:1a:bc:75:80:
         cc:8e:27:2c:35:2e:dd:37:22:ea:6c:a1:f4:a0:76:81:4d:b7:
         ed:33:fb:d2:cd:03:56:b4:57:11:9b:92:b3:c1:ac:02:b5:4c:
         9d:d7:74:7e:02:3c:fc:9b:24:63:cd:92:5c:42:c2:c8:67:ab:
         d1:30:27:69:e8:bf:dc:86:d6:a5:1b:44:3a:b7:da:ef:8a:15:
         cf:ac:39:43:fc:ea:25:13:ef:0d:e0:a3:0f:34:d4:eb:68:4f:
         42:6c:1c:d2:65:4d:ef:22:38:e4:7d:bc:0e:99:36:2c:0b:06:
         50:2f:37:d5:13:0b:cf:7d:9a:66:93:74:e8:2d:2e:d0:28:43:
         7e:2c:9f:0f:9b:03:89:b8:e1:cd:61:78:5e:c7:31:2a:e9:8f:
         be:4e:0a:f4:84:39:b3:ab:b5:d6:ee:68:db:2f:c8:b1:e8:c1:
         b8:53:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 22:12:37 2026 by rpki-client