Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
File:                     3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          hTnKSZWbyml/Fde+rXXDeoyo0g+b/tankdc8JJoad14=
Subject key identifier:   04:B5:83:17:EA:FF:1C:4C:F1:23:A9:22:A7:49:55:60:53:85:89:3D
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       23B4ACE875A46D9FA6B119CF83A9B6CE72C99529
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:29 +0000
ROA not before:           Wed 12 Aug 2026 16:13:29 +0000
ROA not after:            Wed 11 Aug 2027 16:18:29 +0000
asID:                     61901
IP address blocks:        170.254.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b4:ac:e8:75:a4:6d:9f:a6:b1:19:cf:83:a9:b6:ce:72:c9:95:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:29 2026 GMT
            Not After : Aug 11 16:18:29 2027 GMT
        Subject: CN=04B58317EAFF1C4CF123A922A74955605385893D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:66:7e:30:28:0c:19:a5:9f:2f:60:6c:51:
                    5f:40:55:2d:70:a2:6e:b8:48:ac:0a:02:37:6e:3e:
                    f7:09:96:8e:8a:d9:bb:a1:c3:01:bb:fa:32:08:58:
                    5d:da:2e:ae:0d:8f:51:9c:3f:02:a3:4f:0a:4b:65:
                    a5:ab:96:32:47:45:6f:27:07:f3:d1:e9:81:bc:5b:
                    3f:64:88:85:28:50:d8:66:ec:8c:62:6f:8c:fc:f8:
                    14:6e:3c:41:81:e9:c5:e5:36:81:1f:d7:77:f9:d6:
                    84:08:93:b3:b3:59:cf:27:48:5c:a9:c5:b1:c1:5a:
                    50:3e:04:c7:6e:76:19:f6:df:1a:ab:3e:43:2e:87:
                    ee:a5:ec:7c:9d:d2:26:81:dc:40:59:a5:48:c8:70:
                    46:34:2f:55:a8:1c:9e:73:56:9f:34:a0:37:89:99:
                    0a:60:6f:50:cb:9f:0d:83:dd:2a:4b:26:91:9c:01:
                    cf:52:1b:fc:37:09:19:b8:e2:25:24:d0:87:23:11:
                    d1:61:95:cf:3a:73:9d:a4:17:a6:02:fc:7d:2d:b8:
                    ca:4a:e4:a0:d1:24:10:f0:39:ca:c2:47:fd:51:92:
                    de:d2:c8:3c:ae:bb:68:51:0b:a5:de:d5:47:5d:a4:
                    23:b8:5e:cb:54:82:f9:55:01:89:c1:7b:82:c4:eb:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:83:17:EA:FF:1C:4C:F1:23:A9:22:A7:49:55:60:53:85:89:3D
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:c3:e1:04:3a:f5:b8:24:17:33:19:42:f7:00:d7:40:c4:
         43:46:61:29:ec:82:cb:78:68:d2:e8:3a:c4:db:ec:71:be:e8:
         61:d2:b2:54:0a:1c:5f:61:20:bd:3c:77:b1:d9:44:c3:e4:20:
         6f:b4:70:87:85:84:93:e6:60:b0:a7:3d:e3:af:23:a8:3c:ee:
         dd:b5:f6:38:8f:90:58:57:ee:cc:54:41:4a:15:10:d8:af:c2:
         05:a7:55:77:d4:ad:7e:22:f7:9d:95:b0:43:a9:10:06:f5:ef:
         e7:d1:83:d9:67:f4:86:72:ef:52:57:a4:c4:f4:09:87:58:44:
         84:d7:e2:27:0f:7c:d3:16:18:22:65:b3:0d:c9:f3:ed:50:86:
         64:2f:40:c6:eb:99:25:26:f5:f0:fb:85:07:88:2c:75:b6:11:
         e5:86:cf:b9:13:1e:ce:c6:22:b2:80:eb:80:f3:43:15:59:31:
         fc:d0:9f:a6:9a:db:7f:51:8a:fa:bd:57:d7:cd:e8:97:22:84:
         d7:5f:dc:01:13:8d:95:77:34:e2:23:91:3e:f7:bd:e3:95:36:
         95:b6:13:3a:50:5d:4a:31:c2:1d:89:16:18:a9:e1:79:24:54:
         e6:84:19:34:9a:9a:b9:8c:f1:7a:ec:68:fa:8a:2f:cc:dc:ba:
         87:1d:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:29:17 2026 by rpki-client