Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e32382e302f32322d3232203d3e20323634393834.roa
File:                     3137302e38342e32382e302f32322d3232203d3e20323634393834.roa (raw, json)
Hash identifier:          hgW6SBLkrT0V3ieg6h0Be1Yw/k3FNzEtlW4/c4HfT5c=
Subject key identifier:   10:69:D6:5E:3A:56:8B:A1:B2:FD:F7:24:A3:97:D4:28:58:B9:2B:D2
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       7B3A932F22CFAE0617EA8DF8945E1A65AFC8628B
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e32382e302f32322d3232203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        170.84.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3a:93:2f:22:cf:ae:06:17:ea:8d:f8:94:5e:1a:65:af:c8:62:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=1069D65E3A568BA1B2FDF724A397D42858B92BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:51:71:e5:8e:f4:1d:92:3e:0b:cb:b5:8e:
                    d3:9b:1f:3b:b7:07:1e:46:4b:d5:b3:96:38:83:1d:
                    2c:49:41:d4:ef:cc:25:52:da:15:64:4d:9b:8a:c6:
                    b8:1d:19:f2:1b:8e:87:6a:ea:b4:1c:d2:50:f9:b0:
                    33:24:ef:19:6e:6a:3d:23:23:b7:e5:2b:34:46:72:
                    ee:72:35:12:46:1a:73:c3:0e:c0:04:cc:dd:ad:ad:
                    6d:ba:1f:e9:11:73:c9:3c:0b:c2:f3:ff:07:e5:d4:
                    d3:cd:71:3d:19:2a:97:9c:59:49:b9:12:d1:19:7d:
                    2d:e7:b9:2f:7d:16:78:a9:fe:bb:1c:57:88:1b:b1:
                    65:d6:4d:76:4a:c4:a2:f8:87:29:ba:96:49:35:39:
                    93:a2:6a:f3:18:c7:76:e2:aa:d0:a2:19:fa:e3:79:
                    3d:32:13:56:a4:6a:4a:eb:17:fc:52:36:19:39:2c:
                    0a:1e:29:84:56:95:56:9e:c5:2d:03:47:da:90:c6:
                    1b:dc:f2:d4:14:7d:38:be:1a:be:c1:a7:9a:75:3e:
                    1f:0b:8d:38:c6:c7:49:02:51:f1:47:23:83:47:c9:
                    c9:a2:4c:1e:bb:1e:65:e4:6d:e8:63:d8:ab:75:34:
                    7b:fa:04:16:37:25:88:95:dc:22:1b:b1:51:9e:7a:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:69:D6:5E:3A:56:8B:A1:B2:FD:F7:24:A3:97:D4:28:58:B9:2B:D2
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137302e38342e32382e302f32322d3232203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:65:90:70:92:57:5b:6d:ac:ad:9e:2e:ef:9d:cf:1a:41:f4:
         8b:2e:96:a2:0d:77:d4:2d:bc:03:c2:2f:90:2e:3b:3f:32:93:
         2c:b4:c8:cb:44:80:e7:b2:98:43:fc:ca:f3:97:31:fb:95:6c:
         be:53:6c:89:a7:8a:27:bb:4c:f5:58:b8:fa:79:4c:c3:8b:ea:
         fb:c6:26:25:30:bc:42:a3:6e:3e:f0:64:9c:f0:49:7f:7e:af:
         0b:bc:26:e8:b2:cb:6b:ce:98:12:6a:05:5a:58:e7:0f:05:8e:
         0c:38:5f:0e:5b:7d:24:6d:4d:26:86:72:2b:ba:de:37:c0:58:
         75:5a:d5:71:a6:60:17:1f:07:bb:bb:2a:f5:af:57:0f:e5:3e:
         50:1a:e4:d2:ff:73:c2:db:bd:d4:e4:85:2b:7f:d8:d9:69:a2:
         ef:e8:70:71:91:ee:4a:9e:7e:f3:4c:62:e3:27:08:74:9a:8c:
         11:f4:c9:f1:e4:5e:93:c3:1c:fc:c0:22:44:25:43:18:ca:3f:
         81:48:8a:f8:ca:cb:12:d7:b0:f5:ca:94:05:73:db:3a:ff:13:
         95:79:84:5b:89:99:b2:ca:0a:3e:48:e1:27:1b:78:9a:60:03:
         7d:10:ac:e5:45:30:a3:23:f9:14:b1:33:12:52:28:39:a0:94:
         66:6f:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:05 2026 by rpki-client