Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131332e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          Bh0YjFEJXnWxgs0xxuTV2E7ubbLDdFBBYAuuOxVsIVc=
Subject key identifier:   BC:FD:26:18:BB:B5:E1:E9:0B:50:8D:49:87:70:F1:D1:C5:95:BE:0D
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       14045E3A71A22056A2A939E2394698F82FAEAFA5
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323635303738.roa
Signing time:             Mon 17 Aug 2026 11:03:19 +0000
ROA not before:           Mon 17 Aug 2026 10:58:19 +0000
ROA not after:            Mon 16 Aug 2027 11:03:19 +0000
asID:                     265078
IP address blocks:        170.233.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:04:5e:3a:71:a2:20:56:a2:a9:39:e2:39:46:98:f8:2f:ae:af:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Aug 17 10:58:19 2026 GMT
            Not After : Aug 16 11:03:19 2027 GMT
        Subject: CN=BCFD2618BBB5E1E90B508D498770F1D1C595BE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:7c:ab:42:93:66:ca:65:d7:92:db:56:d8:
                    be:f0:be:8f:0a:5c:ac:c1:ac:8e:7d:85:28:cf:1e:
                    65:70:19:3d:3c:9a:91:84:42:fd:ff:80:ad:c6:7a:
                    16:4d:6c:ad:f6:b4:ad:c6:07:6f:a8:8f:b4:81:9e:
                    a2:b8:e4:08:23:e4:be:94:c6:4d:7f:52:c1:1f:b4:
                    e5:90:db:da:e7:1f:cf:f2:cd:69:db:3a:3b:fa:63:
                    c6:0d:f0:e7:aa:b0:24:33:0f:65:18:3e:d1:23:98:
                    e9:d7:23:b9:e5:ca:30:11:38:c5:b6:21:00:1d:2c:
                    ca:67:b1:de:c3:d2:2e:d2:53:b1:f2:42:e2:28:4c:
                    73:30:b7:91:72:df:36:fd:96:69:13:78:b2:ac:ef:
                    6b:8f:5f:29:d7:c7:50:6d:c4:5d:55:2c:c1:7e:46:
                    d9:cd:27:a5:d7:1e:87:8e:62:75:77:4d:c0:9b:e7:
                    6f:56:48:e0:09:3a:90:42:a8:bd:15:6b:7c:9e:7b:
                    ff:1c:e5:3e:cc:7d:06:0a:38:e8:8b:fe:14:c0:c7:
                    63:5d:0c:1a:4c:0e:c6:5d:bb:b1:8a:3e:b4:f9:59:
                    87:e9:0f:be:cd:5d:00:5f:60:d4:03:02:20:f1:1f:
                    23:9b:15:1a:e8:63:04:80:7d:e7:d2:de:5e:43:6f:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:26:18:BB:B5:E1:E9:0B:50:8D:49:87:70:F1:D1:C5:95:BE:0D
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a2:1b:47:03:47:fe:57:89:25:b0:36:12:66:7c:05:9c:aa:
         88:58:62:cd:17:c5:ad:a0:6e:25:27:18:a5:a1:b0:8b:ba:80:
         10:5f:2d:a4:fc:0e:44:a7:37:13:4d:15:fe:8d:42:a0:fa:bb:
         40:a0:f6:00:48:0a:26:99:e5:b9:e2:03:04:d8:0a:46:f4:70:
         08:73:e8:95:ce:d8:77:65:96:b6:4c:81:fe:e3:8e:7a:d0:d3:
         05:05:14:f5:19:14:8f:3a:3f:2c:9f:1c:e4:2e:a8:75:aa:ac:
         5e:57:0b:27:52:74:d8:10:5a:ce:2f:0e:7a:d5:27:7a:06:46:
         c2:ff:4d:30:2a:5e:45:c5:e4:74:2b:57:52:34:11:07:7f:03:
         97:ee:a6:ae:3b:1d:10:52:c6:19:66:bf:b8:ad:f9:97:0e:b8:
         71:fd:08:dc:c9:b5:aa:ba:3f:8d:bd:65:c0:ce:85:b4:f7:f3:
         f1:4e:64:bb:cb:1c:ea:d4:80:07:fe:2b:b9:d8:8b:3e:48:f0:
         d2:44:14:43:fa:b3:73:54:ff:76:ae:74:d7:dc:59:26:8f:6b:
         41:ef:b0:df:b9:b2:6d:ed:65:15:15:eb:d5:6d:40:99:80:ff:
         30:2f:a0:ee:44:ea:c0:cb:6a:b1:9b:bf:4e:b2:cb:fa:62:4f:
         a4:cb:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:48:31 2026 by rpki-client