Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/3137302e38342e3235352e302f32342d3234203d3e20323732343236.roa
File:                     3137302e38342e3235352e302f32342d3234203d3e20323732343236.roa (raw, json)
Hash identifier:          xwBABVFrhPw0cShHyXZE3HtRrSMrM+yB7qO51Ip+TrY=
Subject key identifier:   BE:C0:6B:CB:1B:8C:A9:5D:EA:A3:B3:F6:19:A4:20:B4:E1:D6:4E:AA
Certificate issuer:       /CN=B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4
Certificate serial:       3FDFD65CF60FB46D9F92756CECDECCBA94A9C5E3
Authority key identifier: B4:FB:6C:10:96:6A:C0:88:E2:5C:54:38:EC:7D:E3:F8:B9:4B:FD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/3137302e38342e3235352e302f32342d3234203d3e20323732343236.roa
Signing time:             Mon 22 Jun 2026 12:17:10 +0000
ROA not before:           Mon 22 Jun 2026 12:12:10 +0000
ROA not after:            Mon 21 Jun 2027 12:17:10 +0000
asID:                     272426
IP address blocks:        170.84.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.crl
                          rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:df:d6:5c:f6:0f:b4:6d:9f:92:75:6c:ec:de:cc:ba:94:a9:c5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4
        Validity
            Not Before: Jun 22 12:12:10 2026 GMT
            Not After : Jun 21 12:17:10 2027 GMT
        Subject: CN=BEC06BCB1B8CA95DEAA3B3F619A420B4E1D64EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:72:45:66:dc:18:ce:bf:ce:84:e0:fe:85:
                    e8:ec:77:03:fd:00:70:76:71:9d:27:80:69:e8:7c:
                    ba:f7:d4:4c:57:32:1b:46:3d:ed:83:ce:92:b0:2a:
                    1f:b8:23:ed:12:74:cd:7c:df:26:87:13:83:47:6f:
                    14:1e:07:95:a9:6e:f6:a3:db:39:d3:7a:4b:f8:89:
                    7c:3e:d0:18:12:0f:41:1f:41:0b:1f:9b:1d:cd:76:
                    d5:42:01:d4:ec:49:ac:66:09:ad:51:82:86:a4:09:
                    37:03:c3:07:7d:08:0c:ab:3b:dd:a2:43:5b:2b:aa:
                    ae:b3:5a:a8:0e:2d:1d:fc:f6:51:fe:a1:c9:c9:9b:
                    76:eb:93:7d:30:7a:29:3c:bc:9d:01:39:18:6a:ed:
                    cd:03:de:2e:0f:b5:da:bb:56:c4:a3:fe:3c:9d:af:
                    30:83:23:10:0a:a3:54:e0:47:c5:ad:b8:80:c7:8b:
                    81:1c:9a:8f:2b:6b:59:f1:e9:30:e3:26:ad:97:b5:
                    30:12:3d:24:9d:9d:cc:b6:bf:3c:ba:2f:94:1a:8c:
                    5a:0b:01:22:b3:34:43:0c:43:5e:0c:58:14:24:b6:
                    83:2d:a6:8a:dd:18:24:e1:ab:f8:72:e7:9e:6e:e8:
                    c1:66:9a:83:ba:54:e1:e0:c9:23:1b:31:dd:d3:48:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:6B:CB:1B:8C:A9:5D:EA:A3:B3:F6:19:A4:20:B4:E1:D6:4E:AA
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6C:10:96:6A:C0:88:E2:5C:54:38:EC:7D:E3:F8:B9:4B:FD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/3137302e38342e3235352e302f32342d3234203d3e20323732343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:29:23:03:13:61:f7:04:0f:12:46:4c:e3:61:0f:c2:29:9b:
         dc:1a:79:fb:ae:fe:d5:a2:82:00:45:0e:0b:da:36:9d:d9:71:
         48:da:a9:22:51:f3:f2:93:86:08:a9:3e:c7:4c:86:5d:1b:9b:
         92:a0:1f:9b:25:5a:0f:33:72:f3:e8:5a:52:4a:56:f7:ac:15:
         9d:85:9e:eb:34:36:e8:39:ba:a4:30:44:c8:d5:93:fb:b7:44:
         4e:d9:bd:57:04:76:0a:11:62:f1:b1:16:57:b1:d5:38:26:88:
         32:71:ef:35:c9:07:f0:56:93:2f:3e:4c:e2:37:c1:11:17:ea:
         68:ed:59:5e:7e:c7:06:9e:a1:15:58:c6:1d:29:1f:5c:06:f9:
         ad:e5:d6:0c:41:fc:96:6b:88:05:55:85:b0:9d:b0:fa:5f:1f:
         6c:3c:44:da:ba:81:13:ca:ec:8d:e4:ef:77:2e:ce:12:b1:5b:
         5e:96:8e:88:51:49:e6:16:d6:5b:76:23:94:3d:1c:b5:d1:13:
         6b:13:da:5b:6a:3d:e6:41:f9:06:4f:06:f0:84:09:7e:08:f2:
         90:d5:76:6a:5d:1c:3c:10:a2:d3:7d:b6:eb:87:c2:b3:e9:90:
         f2:da:80:48:bb:5f:73:55:50:2d:25:54:35:ca:9c:da:e2:35:
         7e:5d:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:38 2026 by rpki-client