Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3137302e37382e3134372e302f32342d3234203d3e20323633303032.roa
File:                     3137302e37382e3134372e302f32342d3234203d3e20323633303032.roa (raw, json)
Hash identifier:          BzIuSw+BeRUvqCBYPOBpw+lc9UfQld/e4CcsK2CiJGw=
Subject key identifier:   6C:47:8E:4B:04:C2:D7:3F:44:F1:86:66:03:45:67:A3:E7:A4:7C:33
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       732CC633C8D234712507612C7E7D2ACC27B73881
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3137302e37382e3134372e302f32342d3234203d3e20323633303032.roa
Signing time:             Mon 03 Aug 2026 14:22:06 +0000
ROA not before:           Mon 03 Aug 2026 14:17:06 +0000
ROA not after:            Mon 02 Aug 2027 14:22:06 +0000
asID:                     263002
IP address blocks:        170.78.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:c6:33:c8:d2:34:71:25:07:61:2c:7e:7d:2a:cc:27:b7:38:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  3 14:17:06 2026 GMT
            Not After : Aug  2 14:22:06 2027 GMT
        Subject: CN=6C478E4B04C2D73F44F18666034567A3E7A47C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:52:9a:9b:1e:46:5d:7b:f7:fc:8a:98:42:
                    33:94:52:5a:6d:bd:76:cc:de:48:37:fc:53:ae:00:
                    df:26:22:f9:4a:6c:23:d0:9a:98:47:72:0a:43:48:
                    05:75:77:c1:0e:7a:dc:04:e2:4c:fb:fa:1b:4d:91:
                    35:e1:b0:dc:7a:84:4f:53:bb:21:bd:72:bd:f1:ed:
                    48:65:bc:c6:ed:84:8e:bf:dc:04:6e:94:b6:8b:11:
                    10:5d:d6:cb:bf:34:0f:39:57:09:bf:62:fc:5f:90:
                    4d:63:44:bb:98:82:b9:f8:58:8a:08:77:65:92:89:
                    4b:32:f6:8b:1c:62:85:60:e9:f0:46:5f:03:f0:2d:
                    d0:34:28:97:a9:58:ae:4b:01:b5:e8:24:fc:22:50:
                    d6:4d:99:1e:11:63:6c:c4:c8:a9:63:3f:65:6e:9a:
                    e6:df:d9:64:5c:d2:02:65:f2:5e:f7:ef:24:55:39:
                    0a:4a:9d:99:97:0b:a3:aa:4c:70:c5:db:7d:f0:ff:
                    50:bd:4e:48:9a:e1:95:88:ab:4f:c1:0a:17:89:84:
                    b4:18:ee:99:53:30:09:c1:98:23:43:98:4d:ef:4d:
                    fd:d2:94:fa:61:74:8b:01:a8:f5:39:36:e6:53:9f:
                    55:2f:02:6f:ad:0b:38:6d:4d:2f:c0:9e:a8:e1:8d:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:8E:4B:04:C2:D7:3F:44:F1:86:66:03:45:67:A3:E7:A4:7C:33
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3137302e37382e3134372e302f32342d3234203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:17:b3:f6:4a:3e:d2:2e:59:64:a5:04:1f:b7:cf:ea:b1:
         c2:2a:5f:b6:66:73:7a:c8:57:b2:18:38:0e:c7:8e:28:db:ef:
         2b:b7:22:5a:4c:d7:a7:54:97:9b:20:b9:09:b2:5f:0d:4f:4d:
         29:25:04:38:3e:0b:0e:93:eb:6a:49:45:8a:29:1c:8c:f6:f9:
         81:51:39:50:42:ca:75:68:ef:f0:5a:97:81:3f:1a:0a:29:2a:
         3c:7b:62:19:c1:c6:a2:db:b6:29:0c:f6:39:9f:b6:af:ab:7e:
         1a:24:ea:f9:60:92:8e:ca:88:12:df:c3:84:79:a9:1d:66:e2:
         ca:bc:11:34:3d:e2:1b:88:a3:66:2c:db:45:cc:16:b9:ae:a8:
         16:4c:2f:5a:da:30:9f:a3:cd:89:9b:d0:d5:e7:d9:7b:b2:a1:
         34:5c:e9:42:61:94:26:9f:42:b5:ca:8e:70:07:8b:cb:44:e5:
         49:10:0d:bd:40:89:83:f9:6c:89:75:ee:a5:19:51:8b:00:c6:
         a2:64:7b:b6:2a:40:95:00:38:86:e8:85:5a:55:0a:2d:4c:f9:
         7b:58:ca:5a:11:2d:31:63:52:ed:6c:a3:d0:2a:24:39:c5:91:
         93:d1:73:c9:25:6f:d6:fe:fe:4f:de:f6:b0:1e:1f:f8:c0:39:
         5d:1b:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:51 2026 by rpki-client