Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/3137302e38342e38382e302f32322d3234203d3e20323635303037.roa
File:                     3137302e38342e38382e302f32322d3234203d3e20323635303037.roa (raw, json)
Hash identifier:          MVfw7SBJbQYZjJVBx0uXEQ8URikvSRZfiuj4u81DNcU=
Subject key identifier:   70:77:09:1B:F5:7A:B9:8F:1E:09:04:D1:C3:5B:3A:EB:7B:D4:67:D7
Certificate issuer:       /CN=73FF5912337E1E9400FC687E491E4C05009DE96E
Certificate serial:       5E28AE254AEABA5643C851DAAA9FCADCAFE31F15
Authority key identifier: 73:FF:59:12:33:7E:1E:94:00:FC:68:7E:49:1E:4C:05:00:9D:E9:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/3137302e38342e38382e302f32322d3234203d3e20323635303037.roa
Signing time:             Tue 01 Sep 2026 13:19:55 +0000
ROA not before:           Tue 01 Sep 2026 13:14:55 +0000
ROA not after:            Tue 31 Aug 2027 13:19:55 +0000
asID:                     265007
IP address blocks:        170.84.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.crl
                          rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 12:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:28:ae:25:4a:ea:ba:56:43:c8:51:da:aa:9f:ca:dc:af:e3:1f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73FF5912337E1E9400FC687E491E4C05009DE96E
        Validity
            Not Before: Sep  1 13:14:55 2026 GMT
            Not After : Aug 31 13:19:55 2027 GMT
        Subject: CN=7077091BF57AB98F1E0904D1C35B3AEB7BD467D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:fb:36:0e:2f:d0:f1:72:23:a5:f4:b3:0f:
                    65:04:a8:e3:dc:d3:cd:8a:9e:cd:9e:fe:da:29:aa:
                    70:b1:81:c8:e6:25:d0:f2:2e:b1:2f:66:91:a4:fc:
                    05:24:22:dc:be:b0:93:50:d0:67:5a:8b:cc:80:17:
                    8d:83:21:1c:f9:a6:79:36:7b:0d:aa:60:2e:69:31:
                    ea:7d:8d:1f:8b:59:a0:b5:88:2c:9b:43:53:23:a9:
                    ec:70:10:82:6d:68:69:ee:1b:da:31:80:25:c4:d1:
                    fe:a7:07:3d:21:f5:a7:3a:51:be:3b:91:33:63:68:
                    f2:bd:b9:ac:73:39:41:ff:41:61:9c:e2:17:02:ab:
                    e8:95:58:d8:9c:6d:f0:f7:9c:cc:fc:1f:57:c8:14:
                    52:43:64:42:3c:b2:63:68:f9:30:d5:c1:8d:28:b2:
                    18:80:b5:8c:78:33:76:55:07:72:53:9f:b3:0e:39:
                    da:82:a5:f5:67:18:43:42:10:6e:74:b7:a9:15:39:
                    57:ec:8a:de:2e:00:3b:c3:50:0e:bb:f3:fc:07:6d:
                    33:8f:62:c3:13:a6:97:93:ab:75:9a:64:4d:04:52:
                    9f:09:dd:2a:5d:83:ce:d6:6a:3a:7c:20:70:71:c8:
                    76:2b:1a:ed:b9:9f:3c:89:d5:9f:fe:c2:28:ac:78:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:09:1B:F5:7A:B9:8F:1E:09:04:D1:C3:5B:3A:EB:7B:D4:67:D7
            X509v3 Authority Key Identifier:
                keyid:73:FF:59:12:33:7E:1E:94:00:FC:68:7E:49:1E:4C:05:00:9D:E9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/3137302e38342e38382e302f32322d3234203d3e20323635303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:ba:67:21:a2:20:e8:27:2e:dd:7b:da:e1:57:d6:26:5c:
         12:0e:2b:83:f2:7a:63:88:06:20:2a:6d:50:e1:4b:f8:51:ad:
         f0:ff:03:4f:e3:41:ca:c2:62:39:e5:88:65:3b:f2:25:4c:07:
         1a:6f:fe:4e:8d:73:0d:df:95:89:08:4f:06:b9:53:35:ce:fe:
         57:12:09:3e:5a:69:81:28:07:df:3c:92:ec:06:e9:57:57:37:
         7e:d9:81:cf:44:39:59:b6:a6:0c:be:43:6f:45:11:4e:c5:81:
         82:9e:e0:af:9f:ee:4d:8f:90:e7:04:fd:5c:63:54:77:23:68:
         de:78:f6:11:40:20:71:f1:9c:b7:a3:97:5d:09:e1:85:15:9c:
         64:ea:41:ad:21:5d:a0:88:77:b3:23:a8:2a:ad:ff:7a:e5:97:
         fe:ac:1e:d7:79:95:c4:7d:e6:b7:06:a8:a0:c9:1d:aa:6a:3f:
         7c:ff:2d:ea:7b:04:e8:ee:5a:0b:25:25:cd:f6:56:18:75:16:
         be:73:af:1c:af:e8:4f:3b:01:e7:6b:1b:cc:48:75:08:23:9b:
         ec:7a:84:b2:86:f0:0a:11:d1:ca:7e:0b:d0:0b:45:03:9a:16:
         a7:58:1d:01:82:ba:3a:65:da:c7:2f:0f:09:e3:65:46:ed:03:
         9a:fe:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:57:02 2026 by rpki-client