Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa
File:                     3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa (raw, json)
Hash identifier:          5bdK9mvEgpgPr+LBiSki7WiIcsiY+TRwmfLIc/Mpq34=
Subject key identifier:   99:50:FA:D7:CE:B8:52:0B:FA:DD:42:E0:62:9B:60:00:59:BF:9A:F3
Certificate issuer:       /CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
Certificate serial:       07276989678CA6F35133159CD7B80F54CF553607
Authority key identifier: D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa
Signing time:             Wed 08 Jul 2026 14:19:42 +0000
ROA not before:           Wed 08 Jul 2026 14:14:42 +0000
ROA not after:            Wed 07 Jul 2027 14:19:42 +0000
asID:                     266360
IP address blocks:        170.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:27:69:89:67:8c:a6:f3:51:33:15:9c:d7:b8:0f:54:cf:55:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
        Validity
            Not Before: Jul  8 14:14:42 2026 GMT
            Not After : Jul  7 14:19:42 2027 GMT
        Subject: CN=9950FAD7CEB8520BFADD42E0629B600059BF9AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:49:f1:3d:7e:ec:5c:a1:bd:ba:42:06:76:
                    17:17:00:81:32:93:b8:0e:ed:0f:de:b2:e6:4c:25:
                    96:2a:69:32:10:b9:9b:c1:89:99:e1:32:e2:94:2e:
                    49:c3:44:92:39:db:66:b4:2b:f3:07:57:a5:32:a4:
                    be:61:8a:24:5b:bb:1f:91:87:69:f6:15:b8:1d:9b:
                    fa:b7:ca:92:5d:d8:de:49:4d:36:29:40:6a:3b:5a:
                    64:99:30:1e:87:33:eb:5c:43:cd:13:f4:1f:56:c4:
                    05:32:69:a3:ab:33:3f:46:bf:9a:81:4d:78:54:ce:
                    57:c5:74:27:30:40:7b:06:1e:00:e9:29:66:56:d8:
                    ce:4d:f8:19:a8:b6:17:2b:f7:d2:80:24:51:a0:05:
                    4d:53:65:06:10:5a:e9:f3:7f:72:19:81:41:69:3e:
                    2e:bf:57:91:49:d3:d4:c5:fc:b6:51:c9:e3:5c:a9:
                    c3:48:10:5b:68:0b:cf:6f:fc:4f:82:17:7b:80:38:
                    12:97:fb:e8:52:ed:d5:fb:5b:9d:1b:fd:a7:69:18:
                    6d:71:c3:04:ae:fb:32:07:d6:74:d9:33:c0:9f:82:
                    11:1a:3f:3f:f5:af:38:f1:ea:8b:5b:ec:20:d6:f6:
                    c6:c2:05:7e:ac:0e:2a:76:67:48:80:bc:00:12:e8:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:50:FA:D7:CE:B8:52:0B:FA:DD:42:E0:62:9B:60:00:59:BF:9A:F3
            X509v3 Authority Key Identifier:
                keyid:D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:a3:de:7c:83:59:1b:69:e6:7d:1c:29:a3:98:a3:ba:4a:
         fb:64:67:e4:20:3e:12:8f:4c:52:1e:53:af:eb:d4:af:c8:c1:
         fb:63:57:b3:b2:be:70:9e:5a:ee:6a:cd:2d:b6:4a:9b:8e:b9:
         41:d8:62:79:98:5a:6b:69:95:fa:01:08:60:12:1f:ac:ef:b8:
         23:6b:56:6a:3f:1e:e7:7f:53:a7:6c:df:ad:63:89:4e:11:c7:
         71:49:a4:80:af:5f:28:78:af:4b:b4:91:4e:f4:6a:6d:35:6b:
         9e:21:ef:2e:61:73:a2:af:d1:07:67:0c:02:d6:35:20:b2:23:
         d7:ef:39:e2:e6:97:18:53:76:0f:25:c3:01:78:2d:84:a0:da:
         c4:9c:b3:b2:5a:90:48:11:d3:7c:97:29:c5:02:1f:1f:aa:24:
         ef:44:d8:e5:9e:62:2f:1c:c7:8e:1f:d3:c9:55:cd:24:47:37:
         c9:65:c2:61:b3:fb:cb:9a:4f:51:f4:86:1b:e3:dd:fe:d8:4f:
         49:9e:4e:8f:0e:81:f3:a1:38:41:ab:29:83:09:98:38:ed:2e:
         d4:86:5d:c4:ab:78:cd:2c:34:34:3f:82:bc:d5:94:76:d0:20:
         6f:da:3e:65:f8:c9:23:38:43:a3:85:f8:a2:22:5e:c9:f4:f0:
         82:d5:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:09:42 2026 by rpki-client