Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32332d3233203d3e20323639303338.roa
File:                     3137302e3234352e3231322e302f32332d3233203d3e20323639303338.roa (raw, json)
Hash identifier:          ZbhJD9vou9yT0uJQxjLFymiGIbzyFn5e69sG6R5Dl0g=
Subject key identifier:   8F:F6:61:75:C8:30:5A:CD:A5:F6:5E:F3:8A:D0:13:05:91:62:C5:45
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       6A1F8183ECA46434A73BF2627CBAFFF02784901A
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32332d3233203d3e20323639303338.roa
Signing time:             Mon 06 Apr 2026 20:41:36 +0000
ROA not before:           Mon 06 Apr 2026 20:36:36 +0000
ROA not after:            Mon 05 Apr 2027 20:41:36 +0000
asID:                     269038
IP address blocks:        170.245.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:81:83:ec:a4:64:34:a7:3b:f2:62:7c:ba:ff:f0:27:84:90:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Apr  6 20:36:36 2026 GMT
            Not After : Apr  5 20:41:36 2027 GMT
        Subject: CN=8FF66175C8305ACDA5F65EF38AD013059162C545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:80:a2:69:ae:87:ab:7c:ed:6d:57:28:87:
                    5e:53:dc:05:dd:d3:63:ea:8e:dc:3f:01:a4:1d:a8:
                    67:20:f4:ad:85:ae:6c:66:cf:02:84:55:5f:b7:f0:
                    e2:e1:94:1f:a5:4e:ce:bd:dc:4f:a8:2b:56:51:f6:
                    77:00:a6:10:c4:57:63:87:71:80:de:54:65:17:7d:
                    d9:f0:fa:31:bd:d2:03:60:52:d6:2f:c5:b6:04:35:
                    d8:f8:3b:c5:01:19:00:ec:05:a5:fb:1e:58:92:fd:
                    17:e4:50:90:7c:71:01:74:53:1e:a1:c8:8c:d5:50:
                    d1:86:bc:30:b0:7f:a5:1e:ab:22:08:3d:0e:50:8b:
                    43:c8:97:66:cc:f1:7b:8a:58:ae:08:f4:5a:30:d9:
                    e3:e3:5d:68:49:3a:57:05:20:bb:8d:22:80:b2:6c:
                    f1:bf:7e:1a:97:22:f1:e4:2f:c6:40:31:c3:76:61:
                    c5:75:55:39:dd:81:da:f4:55:88:a1:18:f5:9a:28:
                    ac:a7:4d:33:26:90:df:ae:a3:43:ed:8f:7c:a4:43:
                    68:88:f0:9f:df:19:21:e7:01:c2:41:3b:f4:20:a1:
                    99:d2:09:8c:3b:c6:92:34:a4:3f:b6:c0:dd:5b:ae:
                    93:4b:d8:70:44:9b:20:5c:49:f3:e8:b2:1e:c8:19:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:61:75:C8:30:5A:CD:A5:F6:5E:F3:8A:D0:13:05:91:62:C5:45
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32332d3233203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:24:9b:6c:8c:e7:59:8d:77:dc:68:ae:29:54:96:0c:bb:b0:
         5e:b1:00:fc:fe:91:f9:76:46:b1:11:7f:1d:13:01:4a:00:8b:
         4c:b7:0c:1b:e1:a6:6f:6b:8e:78:36:89:3a:a7:34:e8:bc:5b:
         fd:db:b8:a9:be:a8:f8:4d:f5:46:98:30:99:b2:bc:56:b6:45:
         53:b1:46:06:f6:5f:2b:8a:e3:62:94:87:9d:89:0e:bc:33:13:
         cb:9c:09:ea:b1:50:59:18:3c:ad:81:b2:f7:64:37:02:65:00:
         01:9a:50:e8:80:94:7f:cc:b3:af:e7:e2:76:0e:50:6c:d5:3d:
         81:c0:1c:88:97:15:ef:f2:74:86:24:98:93:10:e2:83:9b:6e:
         de:ef:50:41:51:24:0c:6b:1b:c2:6b:62:33:22:f2:07:eb:2d:
         4c:48:85:6f:87:35:94:c7:d1:7c:f3:26:ac:12:6c:54:e6:f8:
         03:57:60:90:57:1b:cf:65:8f:79:58:33:91:cb:db:28:88:f8:
         1a:18:69:4f:6b:e2:c3:e9:42:b9:cf:dd:c5:d0:0c:f5:5d:ee:
         04:16:3a:b0:cf:61:6a:54:53:68:f6:d7:e4:41:c0:23:94:af:
         97:64:70:15:69:d8:46:fb:be:5b:6b:ea:29:da:98:15:62:9f:
         95:cb:f8:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUah+Bg+ykZDSnO/JifLr/8CeEkBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNjQwRDQwQTk4QkVERUIzRkFDOTU1MTEzODc2QzBC
MDRGRUU2MjAeFw0yNjA0MDYyMDM2MzZaFw0yNzA0MDUyMDQxMzZaMDMxMTAvBgNV
BAMTKDhGRjY2MTc1QzgzMDVBQ0RBNUY2NUVGMzhBRDAxMzA1OTE2MkM1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlICiaa6Hq3ztbVcoh15T3AXd
02Pqjtw/AaQdqGcg9K2FrmxmzwKEVV+38OLhlB+lTs693E+oK1ZR9ncAphDEV2OH
cYDeVGUXfdnw+jG90gNgUtYvxbYENdj4O8UBGQDsBaX7HliS/RfkUJB8cQF0Ux6h
yIzVUNGGvDCwf6UeqyIIPQ5Qi0PIl2bM8XuKWK4I9Fow2ePjXWhJOlcFILuNIoCy
bPG/fhqXIvHkL8ZAMcN2YcV1VTndgdr0VYihGPWaKKynTTMmkN+uo0Ptj3ykQ2iI
8J/fGSHnAcJBO/QgoZnSCYw7xpI0pD+2wN1brpNL2HBEmyBcSfPosh7IGZPRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUj/ZhdcgwWs2l9l7zitATBZFixUUwHwYDVR0j
BBgwFoAUfPZA1AqYvt6z+slVETh2wLBP7mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVKVDdqdW9VNldGN2s1TW9wTGFqNkczTHZSeUNWZDlGQ3R4RkE0TGFl
Q1YvMC83Q0Y2NDBENDBBOThCRURFQjNGQUM5NTUxMTM4NzZDMEIwNEZFRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjY0MEQ0MEE5OEJFREVC
M0ZBQzk1NTExMzg3NkMwQjA0RkVFNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVSlQ3anVvVTZXRjdrNU1vcExhajZHM0x2UnlDVmQ5RkN0eEZBNExhZUNWLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzOTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar11DANBgkqhkiG9w0BAQsFAAOCAQEASCSb
bIznWY133GiuKVSWDLuwXrEA/P6R+XZGsRF/HRMBSgCLTLcMG+Gmb2uOeDaJOqc0
6Lxb/du4qb6o+E31RpgwmbK8VrZFU7FGBvZfK4rjYpSHnYkOvDMTy5wJ6rFQWRg8
rYGy92Q3AmUAAZpQ6ICUf8yzr+fidg5QbNU9gcAciJcV7/J0hiSYkxDig5tu3u9Q
QVEkDGsbwmtiMyLyB+stTEiFb4c1lMfRfPMmrBJsVOb4A1dgkFcbz2WPeVgzkcvb
KIj4GhhpT2viw+lCuc/dxdAM9V3uBBY6sM9halRTaPbX5EHAI5Svl2RwFWnYRvu+
W2vqKdqYFWKflcv4sA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:55:53 2026 by rpki-client