Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32342d3234203d3e20323636333630.roa
File:                     3137302e3233392e3235342e302f32342d3234203d3e20323636333630.roa (raw, json)
Hash identifier:          vuS6jt3JaYrZd396NLHQ4p4u7EFu2+vaNi5L7E/gv2Q=
Subject key identifier:   CC:14:AD:1F:5B:62:B6:FC:6D:D5:13:8F:73:59:E7:77:D1:9E:60:32
Certificate issuer:       /CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
Certificate serial:       3FDA0F16DE168616112C986C7243D8EFD9D351D2
Authority key identifier: D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32342d3234203d3e20323636333630.roa
Signing time:             Wed 08 Jul 2026 14:19:42 +0000
ROA not before:           Wed 08 Jul 2026 14:14:42 +0000
ROA not after:            Wed 07 Jul 2027 14:19:42 +0000
asID:                     266360
IP address blocks:        170.239.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:da:0f:16:de:16:86:16:11:2c:98:6c:72:43:d8:ef:d9:d3:51:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
        Validity
            Not Before: Jul  8 14:14:42 2026 GMT
            Not After : Jul  7 14:19:42 2027 GMT
        Subject: CN=CC14AD1F5B62B6FC6DD5138F7359E777D19E6032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:9b:cb:b6:c7:b4:cd:ae:c8:4d:1a:81:a1:
                    ab:18:27:b3:5e:13:dc:90:4e:dc:61:86:6d:85:0e:
                    86:1b:de:1e:87:90:cc:9b:a5:89:13:2a:80:d7:c5:
                    c9:f6:48:69:0b:1b:f7:81:6c:9b:e4:87:db:71:25:
                    29:f7:50:d9:2b:af:e0:46:e5:3a:49:ca:23:9f:47:
                    07:61:91:52:29:d4:69:fb:78:a7:ce:c9:15:d3:14:
                    32:81:15:ff:e0:00:49:d5:92:25:15:b2:9e:43:10:
                    36:54:29:fd:3a:0f:0b:fb:57:b3:95:cc:1b:f5:67:
                    30:37:e5:68:72:9d:89:98:a3:70:79:85:8f:f9:b2:
                    26:93:da:ba:1c:3b:b7:20:ed:71:9b:cc:1c:4a:22:
                    fb:84:01:b8:a1:b5:41:5a:8e:2c:b3:92:e6:dd:2f:
                    e6:5a:6c:30:e6:6d:15:8d:97:05:36:72:a2:95:47:
                    67:a5:5f:da:2f:b2:de:e0:57:09:cb:e3:44:ad:b6:
                    c1:b4:2b:dd:ed:93:bc:c0:86:a4:4f:b0:43:64:bd:
                    97:cc:10:c2:7d:07:5e:61:44:1c:12:c7:e1:f0:15:
                    81:76:de:96:fd:5f:95:d0:0d:c3:2e:c8:f3:15:76:
                    32:8f:d8:c8:2a:e4:8c:54:f3:d4:27:12:0b:6d:93:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:14:AD:1F:5B:62:B6:FC:6D:D5:13:8F:73:59:E7:77:D1:9E:60:32
            X509v3 Authority Key Identifier:
                keyid:D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32342d3234203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:24:b6:03:00:43:01:3e:6a:84:7b:ec:c7:2b:34:f8:ce:
         23:99:bd:c8:d1:90:e2:ec:c5:78:67:76:11:a2:fb:b3:a4:b0:
         5b:1e:d7:e4:e9:0c:a8:c0:16:e6:c0:6c:11:7c:7e:bb:14:af:
         7a:83:bf:e3:bb:99:7e:ed:0a:c9:cb:06:ff:2d:25:45:bf:15:
         42:9e:2a:1d:fe:15:b3:57:57:7f:fb:27:97:c6:7d:49:4b:5b:
         94:a0:e3:86:4d:c9:90:0c:51:c4:7e:48:05:cc:d0:25:7e:ad:
         42:72:47:2a:25:6c:11:48:c9:c1:64:80:a2:37:8c:23:43:0b:
         27:40:60:12:68:5e:67:a6:41:16:5a:8c:e0:fb:ac:6f:86:09:
         94:8d:e5:6d:16:40:60:0b:b5:cb:13:1d:24:68:09:24:75:ac:
         d8:69:1e:96:9d:28:57:ed:d6:5e:e8:97:7d:a4:f8:22:ce:7d:
         34:f3:89:5b:13:ce:fd:14:12:c7:2a:a2:f2:da:ed:d8:fc:2a:
         b8:3f:f7:45:9a:74:a6:c0:d9:fa:75:79:65:13:2b:b8:ef:dc:
         0d:69:a5:28:74:e3:7c:cd:44:f9:f3:4f:cc:f1:e5:40:0f:c9:
         80:33:fb:21:8c:8d:c9:21:b4:2a:19:65:13:92:20:56:ac:10:
         fa:7d:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:09:41 2026 by rpki-client