Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39342e302f32332d3233203d3e20323731333634.roa
File:                     3137392e302e39342e302f32332d3233203d3e20323731333634.roa (raw, json)
Hash identifier:          Om1KxTYlYwztarCPslQgGcPuq6pvT3g3n2Xuiu4MpxQ=
Subject key identifier:   87:C9:FC:2E:64:5C:8C:D5:DF:0B:C0:75:A8:F7:4E:17:0B:9E:E4:13
Certificate issuer:       /CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
Certificate serial:       3B4D940F93CFC2FD80F55358E35A3A30EAE79D2C
Authority key identifier: F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39342e302f32332d3233203d3e20323731333634.roa
Signing time:             Thu 30 Jul 2026 15:53:49 +0000
ROA not before:           Thu 30 Jul 2026 15:48:49 +0000
ROA not after:            Thu 29 Jul 2027 15:53:49 +0000
asID:                     271364
IP address blocks:        179.0.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl
                          rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:94:0f:93:cf:c2:fd:80:f5:53:58:e3:5a:3a:30:ea:e7:9d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
        Validity
            Not Before: Jul 30 15:48:49 2026 GMT
            Not After : Jul 29 15:53:49 2027 GMT
        Subject: CN=87C9FC2E645C8CD5DF0BC075A8F74E170B9EE413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:72:92:9b:7d:0c:27:d2:96:18:87:5f:e2:
                    c8:66:7f:a4:d5:00:07:aa:70:bc:38:cc:92:c7:2d:
                    b0:da:5e:d5:bc:c2:06:4c:3a:7f:64:fa:6b:bc:f3:
                    7f:bf:9f:3d:9f:ce:e1:75:cf:87:2e:a0:26:59:1c:
                    31:a4:18:ee:48:b4:52:90:5d:73:72:01:03:37:02:
                    a4:09:75:90:61:7e:f7:14:a8:b2:1e:66:78:dc:96:
                    b6:03:d2:42:a5:f4:d5:4d:c3:a6:8f:2d:e4:5d:0f:
                    e3:33:2a:6d:e8:3b:37:1b:45:e3:59:50:21:d8:ad:
                    f1:d0:0b:f4:a6:5d:3a:7e:bc:4a:7a:79:91:34:86:
                    46:ec:50:be:25:26:fe:17:77:0c:e0:dc:ef:cb:c3:
                    6e:6b:10:fe:b1:e7:92:7c:84:25:0b:bf:c2:d6:3a:
                    1b:71:58:39:e1:bb:0a:28:cd:43:53:a4:74:8b:9a:
                    d8:50:47:21:0e:8a:fa:ff:0b:5a:59:01:28:39:81:
                    10:08:80:ce:46:cd:03:a6:21:ec:76:45:33:21:5a:
                    eb:59:38:3e:30:e9:23:51:ec:44:73:28:3c:b0:f4:
                    a0:92:8f:66:ba:30:6d:c6:ec:c4:13:f9:32:ff:4a:
                    f2:58:46:05:39:88:3d:35:24:06:3f:2f:16:cb:0d:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:FC:2E:64:5C:8C:D5:DF:0B:C0:75:A8:F7:4E:17:0B:9E:E4:13
            X509v3 Authority Key Identifier:
                keyid:F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39342e302f32332d3233203d3e20323731333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:cd:02:d4:47:50:21:c7:a9:45:39:41:b2:fb:fb:5a:8e:
         0b:75:13:50:84:34:b2:cd:80:eb:74:57:31:6f:88:e7:42:18:
         3a:45:93:6c:c3:03:91:de:c1:08:40:1c:43:c1:18:e1:93:38:
         79:14:33:0d:1c:0f:b7:82:b4:6d:7f:87:8f:cc:eb:61:c3:d5:
         36:ca:b7:cb:d6:84:c8:bc:87:51:ed:11:57:62:cb:7b:31:64:
         c7:42:34:6d:b7:0c:58:b4:9f:40:05:8c:b6:76:25:b8:b9:20:
         ac:b9:e8:58:88:f0:32:2a:21:4c:bf:4d:00:d5:56:7b:91:45:
         5a:b4:ca:90:79:e0:33:51:32:af:3f:76:1e:ac:dc:24:54:79:
         59:36:e5:d9:b0:5b:0d:2a:c9:46:2d:53:96:ea:ce:16:53:81:
         2e:73:5e:9f:f4:41:51:a9:e4:da:56:76:08:e0:d7:e2:ca:92:
         c7:dd:e7:f4:8f:c7:53:92:8e:b7:af:7d:fe:c1:d4:34:31:85:
         2d:3f:34:32:d1:29:7a:37:9b:a0:ad:72:20:29:32:e9:37:95:
         ee:bc:f8:0d:e0:ab:6b:4a:2c:9d:22:fe:a0:7e:2c:82:85:9e:
         47:37:c4:06:f0:e9:01:0c:74:fa:8d:73:a0:ec:1d:a5:14:11:
         37:5b:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:16:11 2026 by rpki-client