Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138382e302f32332d3233203d3e20323636333030.roa
File:                     3137302e37392e3138382e302f32332d3233203d3e20323636333030.roa (raw, json)
Hash identifier:          rtIDa3AycwFig5WGFDjNhHXYHJmirE2f8Jxdq2JjXFU=
Subject key identifier:   49:A1:E9:13:FF:14:8F:8E:F6:08:86:DD:A3:62:4E:44:CD:EA:8A:A8
Certificate issuer:       /CN=4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5
Certificate serial:       667F764872F69B4F86A01041310DFB0DEE901868
Authority key identifier: 4A:0A:14:4B:1F:E4:46:73:1C:B6:B1:B4:DA:48:F4:CA:99:8F:9F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138382e302f32332d3233203d3e20323636333030.roa
Signing time:             Mon 05 Oct 2026 12:55:10 +0000
ROA not before:           Mon 05 Oct 2026 12:50:10 +0000
ROA not after:            Mon 04 Oct 2027 12:55:10 +0000
asID:                     266300
IP address blocks:        170.79.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.crl
                          rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7f:76:48:72:f6:9b:4f:86:a0:10:41:31:0d:fb:0d:ee:90:18:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5
        Validity
            Not Before: Oct  5 12:50:10 2026 GMT
            Not After : Oct  4 12:55:10 2027 GMT
        Subject: CN=49A1E913FF148F8EF60886DDA3624E44CDEA8AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:8b:75:e4:05:a3:d8:e6:ba:2f:c2:23:58:
                    6d:6d:bf:84:9f:fb:27:fa:71:30:d4:5a:bc:5a:c1:
                    29:dd:6e:0a:80:30:45:22:05:f0:ed:f7:27:7c:8b:
                    d3:04:16:7d:42:49:1d:ae:4d:be:a8:97:8c:64:fb:
                    4c:f1:a9:f6:cb:2b:61:37:10:6f:99:f9:c5:7a:6d:
                    29:37:2c:22:58:b7:c3:3b:bc:32:91:27:15:af:74:
                    a2:f0:f9:ff:c8:0d:64:1b:4d:87:bd:41:17:0f:05:
                    22:50:da:16:11:0a:8d:c9:d9:d4:25:07:ea:01:77:
                    4b:ed:0a:02:52:d7:02:b7:9a:3c:72:14:aa:f3:b3:
                    94:d8:66:d2:e9:19:5e:88:62:29:1b:ab:5a:b0:f3:
                    82:06:f7:9d:be:57:79:34:6b:b2:f9:14:b5:8a:5f:
                    b3:65:18:9e:70:1b:79:1c:f8:3a:88:2c:a1:d6:18:
                    e3:c5:13:0f:31:b0:1f:94:30:12:cd:75:9a:ff:62:
                    e1:c3:6a:46:63:5a:c6:6e:72:0b:3b:68:3c:51:0c:
                    af:96:49:32:59:c2:e4:a0:4f:d6:c5:a6:ca:68:5a:
                    d0:f0:65:ee:02:0a:48:82:5b:92:57:b7:01:ee:5a:
                    d7:58:5e:4c:47:7a:36:d6:27:31:1b:97:bd:58:e4:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A1:E9:13:FF:14:8F:8E:F6:08:86:DD:A3:62:4E:44:CD:EA:8A:A8
            X509v3 Authority Key Identifier:
                keyid:4A:0A:14:4B:1F:E4:46:73:1C:B6:B1:B4:DA:48:F4:CA:99:8F:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A0A144B1FE446731CB6B1B4DA48F4CA998F9FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARR1Cg5S9bLMLouMDSL2hYMmbPR2ARs8UrjStA1kB2JR/0/3137302e37392e3138382e302f32332d3233203d3e20323636333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:86:46:40:3c:8d:ee:9b:c5:4e:2f:70:c7:a3:d1:2c:50:6f:
         d9:c5:f5:e6:12:0a:1e:e7:e6:2d:b5:f5:a2:70:9e:57:cf:06:
         d8:aa:5b:ee:47:51:2a:47:4f:54:ed:45:72:13:1c:93:ab:71:
         28:78:62:2d:48:3d:dd:b0:f0:6c:76:c6:92:24:93:ff:4a:f8:
         36:70:55:96:50:3f:db:80:73:28:e6:0c:ca:ba:6e:c5:9e:c9:
         27:c1:e4:26:2e:eb:b3:ab:12:c9:66:03:11:e6:e0:13:ba:fe:
         30:f5:a1:4b:b1:ba:e7:a2:80:eb:d3:c6:4a:97:a4:9e:69:20:
         1e:fd:54:d7:d0:3c:ac:1f:a2:bb:27:0a:72:05:ce:78:a5:13:
         e2:29:4e:01:77:ac:45:a5:68:b2:50:5b:53:2c:89:5d:6b:6c:
         5a:69:c7:5d:75:ac:e9:0e:41:ed:5d:12:7c:27:89:68:94:25:
         83:a7:a3:ff:fb:f9:99:0e:f6:54:a8:77:5f:b4:83:5f:47:47:
         21:d3:d9:5b:49:8b:e4:d4:aa:f2:c0:04:4a:f9:8e:9a:76:d9:
         90:38:aa:5e:49:6c:62:ce:62:8d:f2:c4:10:0e:a2:4c:80:8b:
         e2:65:fd:8b:d6:29:32:d5:7d:30:02:73:d6:40:3b:0c:96:36:
         a5:79:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:44:31 2026 by rpki-client