Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
File:                     3137302e302e3138382e302f32322d3234203d3e20323634393735.roa (raw, json)
Hash identifier:          s1PGQsZUe2DLs5fifV9iFPBCd/+i2hjexrkfsnW9cJI=
Subject key identifier:   D7:A7:2D:D1:53:2A:07:17:6F:CB:B1:3F:02:76:8F:A5:45:52:27:62
Certificate issuer:       /CN=C1323DEB2953A923DE6753160D7A23F25E0CCB6C
Certificate serial:       40837FB16C5682CAE2EED7CF6D8258CBD25891DB
Authority key identifier: C1:32:3D:EB:29:53:A9:23:DE:67:53:16:0D:7A:23:F2:5E:0C:CB:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
Signing time:             Tue 27 Oct 2026 21:18:13 +0000
ROA not before:           Tue 27 Oct 2026 21:13:13 +0000
ROA not after:            Tue 26 Oct 2027 21:18:13 +0000
asID:                     264975
IP address blocks:        170.0.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.crl
                          rsync://rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:7f:b1:6c:56:82:ca:e2:ee:d7:cf:6d:82:58:cb:d2:58:91:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1323DEB2953A923DE6753160D7A23F25E0CCB6C
        Validity
            Not Before: Oct 27 21:13:13 2026 GMT
            Not After : Oct 26 21:18:13 2027 GMT
        Subject: CN=D7A72DD1532A07176FCBB13F02768FA545522762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:49:8d:29:c5:a8:a6:3c:77:1d:55:9d:ec:
                    09:35:63:a9:6f:5c:2c:76:ee:a8:72:66:e5:fc:89:
                    4c:3f:8c:19:25:3b:57:88:5b:8f:16:db:e9:c0:50:
                    34:61:ed:34:af:5d:f1:58:2a:7e:95:e2:c8:37:e0:
                    34:e3:3d:9f:b3:a4:8e:c3:c4:c1:3a:cd:98:fb:9c:
                    58:b4:8b:db:22:50:91:44:14:3d:06:af:aa:b4:71:
                    14:94:5e:90:0a:eb:a0:9e:05:16:31:b6:54:fd:50:
                    65:e8:13:d4:25:5a:9e:6b:d3:1b:91:73:57:86:8b:
                    8e:75:59:56:a5:32:a0:84:2f:b6:f3:b8:a2:63:8f:
                    78:61:6d:66:e4:e4:a4:69:c5:6b:bc:67:02:1a:f2:
                    95:eb:d0:8d:72:24:5d:c6:d6:96:da:50:30:6f:c0:
                    45:d7:7b:aa:ee:ec:7f:b7:13:93:24:97:85:3e:37:
                    ef:52:96:aa:4a:8f:15:2f:bd:71:73:2a:65:b2:c7:
                    97:de:a7:cb:9b:e3:08:70:ba:d5:c9:dc:6e:84:1d:
                    b9:65:32:ac:0e:5a:9b:44:3e:35:90:e5:55:42:01:
                    e8:3b:46:95:bb:4f:41:f0:30:21:0e:61:18:c3:87:
                    34:3f:0e:ba:fc:67:9b:03:83:ba:81:d9:c3:13:d3:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:2D:D1:53:2A:07:17:6F:CB:B1:3F:02:76:8F:A5:45:52:27:62
            X509v3 Authority Key Identifier:
                keyid:C1:32:3D:EB:29:53:A9:23:DE:67:53:16:0D:7A:23:F2:5E:0C:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1323DEB2953A923DE6753160D7A23F25E0CCB6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cLi35r8mGoCtvfBtZqHhXMpPiJq3nRisED3En6PJTJz/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:16:15:d3:01:76:3e:20:9f:ba:a5:eb:46:e9:75:22:b4:
         8d:41:30:36:30:24:9a:57:40:05:a3:68:e7:cc:68:bc:d1:09:
         b9:4d:e3:46:3c:84:53:7d:15:af:31:95:9f:6d:34:04:e1:8e:
         4f:be:b7:da:f3:eb:f7:d7:ef:39:49:7c:64:25:7e:44:3b:79:
         20:12:6d:99:cc:26:c8:71:e2:54:e6:8c:0e:a5:c2:a8:80:c6:
         73:a3:6d:27:64:10:34:9f:ed:ec:11:ba:47:d5:32:8f:bd:66:
         8f:e2:06:e6:4d:7e:34:93:cf:d7:44:d8:c4:f3:3f:a2:c8:97:
         ad:99:f4:a8:ce:89:e8:83:9a:ad:8e:16:96:7b:c1:74:ee:7f:
         36:35:07:f4:7c:ac:0a:96:99:24:05:1e:13:8e:b1:6b:2f:f5:
         f2:d7:a6:39:cf:fc:1c:62:0c:20:03:7b:6d:3e:e5:e5:de:87:
         49:83:4d:0b:39:9f:2a:8c:72:48:cd:3d:fe:92:53:81:5d:99:
         ad:8c:31:c1:a7:40:0f:db:cd:55:ea:d2:c9:e2:cf:28:be:5d:
         18:db:5e:d0:75:2e:3a:82:95:e4:ed:3e:95:65:45:ff:0b:fc:
         95:70:f0:5f:4f:0d:e6:3d:f7:9e:0b:e6:15:6d:ad:3b:00:c4:
         ea:c3:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----