Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32342d3234203d3e20323636343537.roa
File:                     3137302e38322e3230302e302f32342d3234203d3e20323636343537.roa (raw, json)
Hash identifier:          Bn/W9X5HAsfvZMWc8H/Dqmdp+O5SUkvbGYz+GqQG6p8=
Subject key identifier:   9F:A9:32:63:9C:22:56:AA:59:B4:F9:A3:4A:1A:C2:90:9F:85:E0:92
Certificate issuer:       /CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
Certificate serial:       6E6F57847A21BC019673E40861A2F9909A303BA1
Authority key identifier: 41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32342d3234203d3e20323636343537.roa
Signing time:             Fri 11 Sep 2026 19:37:44 +0000
ROA not before:           Fri 11 Sep 2026 19:32:44 +0000
ROA not after:            Fri 10 Sep 2027 19:37:44 +0000
asID:                     266457
IP address blocks:        170.82.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 17:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6f:57:84:7a:21:bc:01:96:73:e4:08:61:a2:f9:90:9a:30:3b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
        Validity
            Not Before: Sep 11 19:32:44 2026 GMT
            Not After : Sep 10 19:37:44 2027 GMT
        Subject: CN=9FA932639C2256AA59B4F9A34A1AC2909F85E092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:9e:3e:5f:4c:96:c4:2a:c2:f6:a2:06:8d:
                    56:9f:06:77:3f:e3:34:53:cc:47:dd:e8:6b:89:b4:
                    94:98:0d:19:7d:8e:55:24:06:6b:6e:86:7e:cd:4d:
                    4e:b3:49:df:aa:3b:3a:8d:81:05:65:99:b8:85:45:
                    bd:d3:2c:21:49:25:08:94:21:4c:c9:ec:d2:86:72:
                    26:8e:c9:63:42:10:47:29:79:65:18:9b:39:51:66:
                    0f:41:4d:77:1e:32:27:60:31:d0:a8:66:c1:b3:8e:
                    ca:72:4f:82:06:e2:82:ba:2c:67:eb:cf:db:cf:fe:
                    bb:a7:08:8e:55:d6:42:a8:74:39:82:12:f5:53:b5:
                    07:2f:b4:35:7e:3c:98:ad:e4:db:0f:b0:2f:d8:44:
                    48:98:ef:71:5c:53:7c:2f:c8:42:15:9b:e5:6d:e1:
                    c5:a5:a5:f3:0c:7f:e6:30:7b:69:58:6a:e9:50:81:
                    a8:a9:b2:2f:92:14:f2:54:08:c9:6e:18:ed:fa:3a:
                    7a:01:cd:7a:a6:a7:26:95:74:16:a8:dc:84:4a:49:
                    16:f5:6e:94:e6:d4:3e:4a:33:de:5d:46:8c:90:48:
                    12:45:ff:5d:eb:fb:18:5b:50:e3:32:86:fe:3c:c9:
                    11:a2:e5:ae:c8:93:0e:97:e0:2e:0d:9e:01:bc:bb:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:32:63:9C:22:56:AA:59:B4:F9:A3:4A:1A:C2:90:9F:85:E0:92
            X509v3 Authority Key Identifier:
                keyid:41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32342d3234203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:d3:8f:59:ff:ef:dc:20:e2:c9:61:bf:33:ee:3a:ce:1c:
         46:17:70:f9:a7:b5:26:66:97:82:ca:05:23:b9:27:c7:5d:3a:
         f2:b6:83:64:44:f0:77:3e:1d:df:17:e0:b4:0a:53:b8:db:42:
         ae:b2:00:ae:ef:60:fc:1f:76:e3:b0:47:e0:2e:cc:16:af:e9:
         6c:fc:ab:f0:76:2e:d2:e0:ba:52:73:a9:e9:dc:fc:c1:b9:4a:
         ad:c4:07:2e:30:62:46:25:74:34:85:46:ce:b3:4f:7e:ee:90:
         12:96:fe:1c:a5:c2:3d:50:a4:cb:4a:53:5a:4e:8e:36:61:22:
         f7:c6:44:0c:c8:a3:2c:14:07:b6:e0:90:d8:8d:a1:67:5a:74:
         4f:5f:02:4b:26:2f:80:2d:27:02:08:ad:46:8a:70:79:85:59:
         99:ad:9c:70:2f:df:7e:da:98:6f:6c:d4:3f:5a:97:7a:a1:27:
         7c:0f:92:e1:0e:db:6b:ba:79:57:55:4a:01:23:bf:72:3e:d1:
         0f:fd:b7:1a:56:da:5d:65:d3:92:55:54:9f:ee:24:c8:15:0a:
         6f:77:ff:14:b1:22:27:17:e6:3c:74:d6:9e:93:1c:8e:f4:6b:
         98:ce:86:fb:63:c2:1e:09:48:3e:fa:7d:94:65:f2:63:d9:08:
         f0:46:a6:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbm9XhHohvAGWc+QIYaL5kJowO6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFBMTExQjExQzI1Q0Q4ODJFNzQ4QjBGMUFDM0U3QkJB
MDI5MDI0QTAeFw0yNjA5MTExOTMyNDRaFw0yNzA5MTAxOTM3NDRaMDMxMTAvBgNV
BAMTKDlGQTkzMjYzOUMyMjU2QUE1OUI0RjlBMzRBMUFDMjkwOUY4NUUwOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNJ4+X0yWxCrC9qIGjVafBnc/
4zRTzEfd6GuJtJSYDRl9jlUkBmtuhn7NTU6zSd+qOzqNgQVlmbiFRb3TLCFJJQiU
IUzJ7NKGciaOyWNCEEcpeWUYmzlRZg9BTXceMidgMdCoZsGzjspyT4IG4oK6LGfr
z9vP/runCI5V1kKodDmCEvVTtQcvtDV+PJit5NsPsC/YREiY73FcU3wvyEIVm+Vt
4cWlpfMMf+Ywe2lYaulQgaipsi+SFPJUCMluGO36OnoBzXqmpyaVdBao3IRKSRb1
bpTm1D5KM95dRoyQSBJF/13r+xhbUOMyhv48yRGi5a7Ikw6X4C4NngG8u3ntAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn6kyY5wiVqpZtPmjShrCkJ+F4JIwHwYDVR0j
BBgwFoAUQaERsRwlzYgudIsPGsPnu6ApAkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdoWFoxbmY2RTRHN3I5eHhQbkRlNWlSRUxyRXpKSGd5TkxSd1dQeE1T
VjkvMC80MUExMTFCMTFDMjVDRDg4MkU3NDhCMEYxQUMzRTdCQkEwMjkwMjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxQTExMUIxMUMyNUNEODgy
RTc0OEIwRjFBQzNFN0JCQTAyOTAyNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E3aFhaMW5mNkU0RzdyOXh4UG5EZTVpUkVMckV6SkhneU5MUndXUHhNU1Y5LzAv
MzEzNzMwMmUzODMyMmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUsgwDQYJKoZIhvcNAQELBQADggEBACTP049Z
/+/cIOLJYb8z7jrOHEYXcPmntSZml4LKBSO5J8ddOvK2g2RE8Hc+Hd8X4LQKU7jb
Qq6yAK7vYPwfduOwR+AuzBav6Wz8q/B2LtLgulJzqenc/MG5Sq3EBy4wYkYldDSF
Rs6zT37ukBKW/hylwj1QpMtKU1pOjjZhIvfGRAzIoywUB7bgkNiNoWdadE9fAksm
L4AtJwIIrUaKcHmFWZmtnHAv337amG9s1D9al3qhJ3wPkuEO22u6eVdVSgEjv3I+
0Q/9txpW2l1l05JVVJ/uJMgVCm93/xSxIicX5jx01p6THI70a5jOhvtjwh4JSD76
fZRl8mPZCPBGppk=
-----END CERTIFICATE-----
Generated at Sun Nov 1 20:08:36 2026 by rpki-client