Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa
File:                     3137302e302e3230322e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          6oGmFn3p0egWdaU6mPHtVtRInKHNWlwV9uU1yuTB+9s=
Subject key identifier:   2A:44:2B:68:96:EE:D6:B5:93:3F:59:9A:CC:7F:C8:18:F6:1E:DE:35
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       7396ED2B9C8C1B2D91A9B618AC852A82F9F5BF4C
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa
Signing time:             Tue 23 Jun 2026 21:14:32 +0000
ROA not before:           Tue 23 Jun 2026 21:09:32 +0000
ROA not after:            Tue 22 Jun 2027 21:14:32 +0000
asID:                     263427
IP address blocks:        170.0.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:96:ed:2b:9c:8c:1b:2d:91:a9:b6:18:ac:85:2a:82:f9:f5:bf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:32 2026 GMT
            Not After : Jun 22 21:14:32 2027 GMT
        Subject: CN=2A442B6896EED6B5933F599ACC7FC818F61EDE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:0f:3d:da:df:35:e5:76:68:68:57:76:d1:
                    a3:b4:64:da:a7:1d:d5:fe:22:a0:6e:ac:67:de:fc:
                    49:38:8d:91:60:9b:70:53:f3:49:32:0b:5a:37:2c:
                    72:d8:0a:74:df:a9:89:e2:16:e9:d3:00:fe:df:24:
                    91:ca:3c:88:94:e2:68:8d:93:37:d7:5f:0e:60:7e:
                    db:48:49:14:aa:9b:f0:72:f3:c8:43:1a:66:4e:25:
                    17:a1:cd:d1:a2:fd:04:d7:fc:5d:75:35:e4:cd:3b:
                    65:97:0c:1d:95:97:2a:3c:98:45:20:76:e8:b4:e0:
                    4d:79:21:e8:0d:a3:60:f6:cb:66:61:3d:30:da:b9:
                    a7:06:df:c4:b1:ed:39:01:cd:7e:eb:5b:64:65:1a:
                    79:46:46:1e:ad:b2:ae:e5:ee:2d:1e:0f:ff:54:d6:
                    25:5d:c5:db:fd:69:d9:0f:d4:49:b9:3f:44:41:49:
                    3b:f6:6d:bd:08:d9:89:8a:a9:e1:74:31:e5:52:2a:
                    0f:ca:f8:32:66:65:15:c2:be:7a:c3:d6:87:8f:30:
                    47:a0:88:ab:f6:41:70:48:79:3a:85:21:c8:9c:77:
                    14:c6:06:35:8f:9e:cd:cb:52:71:2b:05:46:5c:4a:
                    5b:89:cf:0a:3f:f6:a0:81:e7:18:3d:89:3f:8f:81:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:2B:68:96:EE:D6:B5:93:3F:59:9A:CC:7F:C8:18:F6:1E:DE:35
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:32:97:d4:5a:83:6e:59:4b:a4:6b:fd:59:ba:ac:5a:4d:
         1c:9d:79:cf:f9:1f:ee:11:90:62:a3:94:85:28:e3:1b:2d:f7:
         a9:00:0c:a5:16:77:46:5a:94:fc:8c:a8:a5:ba:39:44:8c:6d:
         1d:93:46:26:63:4a:57:93:31:d3:cf:eb:74:23:18:da:01:44:
         78:d8:31:cc:ba:70:a4:0d:a7:13:22:c2:4e:61:d4:ab:c8:bd:
         b0:14:1e:4d:23:78:45:a5:fd:57:cc:61:a3:5c:fa:cf:42:a1:
         04:46:d6:27:b3:b8:43:2d:57:5a:78:9f:05:37:87:90:8b:82:
         78:eb:fe:a3:b1:c8:3b:60:dc:2f:4c:31:77:1d:3b:82:39:ee:
         ae:13:11:a9:69:88:ac:b7:b6:92:98:a2:30:5c:cd:5d:88:95:
         c0:84:a2:90:94:6e:64:89:0a:a7:a7:0f:e7:ec:e6:eb:a9:10:
         75:7a:83:96:f6:0f:f3:fa:dc:a3:39:3a:d3:95:6b:2c:5c:5d:
         36:ed:0c:67:91:e9:39:8d:49:e5:5b:c1:36:be:a9:d4:ca:16:
         96:e6:68:15:85:4b:c5:f0:d5:32:2a:75:48:95:65:b4:c8:ee:
         e2:62:8e:ea:91:0a:b8:b6:66:ec:a5:fb:74:9f:b0:04:0d:db:
         0e:3e:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:56 2026 by rpki-client