Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3234203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32322d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          ogYWICQYjY8fTgpEnfuojPUQL/2Hn3lVuhRmK6wRdYU=
Subject key identifier:   3F:39:F0:6A:24:99:95:01:30:2B:65:BB:0B:7C:70:AB:E2:0E:CA:9C
Certificate issuer:       /CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
Certificate serial:       0A80DFBB9E520EB386E82AD62ADFF38C8E87B221
Authority key identifier: 37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3234203d3e20323636333735.roa
Signing time:             Thu 30 Jul 2026 15:03:05 +0000
ROA not before:           Thu 30 Jul 2026 14:58:05 +0000
ROA not after:            Thu 29 Jul 2027 15:03:05 +0000
asID:                     266375
IP address blocks:        170.80.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:80:df:bb:9e:52:0e:b3:86:e8:2a:d6:2a:df:f3:8c:8e:87:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
        Validity
            Not Before: Jul 30 14:58:05 2026 GMT
            Not After : Jul 29 15:03:05 2027 GMT
        Subject: CN=3F39F06A24999501302B65BB0B7C70ABE20ECA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:c3:ed:37:f1:aa:c7:e2:0d:78:27:c5:2c:
                    b0:53:ee:1f:24:32:2a:53:aa:8d:12:d9:dd:f8:40:
                    cf:22:04:f3:86:5e:be:b0:cb:b2:17:45:04:52:5f:
                    21:12:52:e3:2e:36:0a:ab:cf:5e:33:fc:10:a4:d6:
                    c3:aa:ed:db:d2:b0:f1:94:48:89:f7:70:1a:16:05:
                    ad:49:85:ed:79:50:2c:86:23:d7:a4:ab:53:77:fb:
                    4e:d2:ac:ac:71:ab:04:93:80:32:a4:fc:87:22:13:
                    71:c2:c4:ac:de:f3:e3:a8:b3:4f:bf:01:0f:af:4b:
                    ea:1e:97:36:51:28:f9:6b:1b:4d:bd:0b:b4:60:e5:
                    9d:f4:9e:dd:2d:04:ca:0b:aa:73:1d:14:94:e0:1c:
                    f1:a8:86:25:63:49:2a:1b:51:c7:48:34:83:5d:02:
                    0b:b8:ba:58:cd:1e:a8:d7:47:2c:6a:79:7c:4b:69:
                    74:39:e9:2d:09:ab:7a:c6:7d:8c:28:52:e0:0e:af:
                    53:1c:90:2c:62:4d:70:0b:a3:6a:98:ae:e0:0e:64:
                    a7:70:6a:b9:29:7b:78:07:d5:9f:d5:be:a7:4f:4c:
                    09:45:7d:55:25:8a:17:2d:2b:cb:91:cb:7f:a0:06:
                    f0:a3:45:22:f1:f9:6a:11:c4:2f:6e:fb:98:8d:d2:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:F0:6A:24:99:95:01:30:2B:65:BB:0B:7C:70:AB:E2:0E:CA:9C
            X509v3 Authority Key Identifier:
                keyid:37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:97:3b:7d:34:63:ab:bd:20:5a:64:99:a1:9d:c5:c8:ef:0d:
         d0:cd:39:44:1a:3a:fa:19:d5:99:83:14:85:83:13:18:ea:65:
         d1:9d:d3:69:9b:e3:9b:e0:8b:88:fe:be:08:46:80:ca:09:e8:
         e1:ff:93:7f:b1:cb:b9:a9:f4:19:75:5a:29:fa:cc:d5:c9:e3:
         0e:25:2b:80:19:ee:2c:f0:92:d8:b7:ed:49:72:ec:f7:ad:ac:
         2d:46:33:20:28:1b:25:33:3c:0b:8f:db:61:47:33:fb:b7:d8:
         a8:6b:31:8e:2d:20:9f:64:4b:1e:a2:2a:58:60:25:64:9d:d2:
         1d:82:79:52:c2:30:18:dd:ec:7d:10:ce:d2:b2:1e:35:2c:66:
         14:f7:38:6f:9a:43:38:ab:64:d2:99:c5:79:b5:33:1c:b4:8a:
         55:a7:af:26:28:96:91:29:de:06:bb:25:97:8d:2c:a3:10:6a:
         90:8a:2e:16:75:d8:35:54:3b:6b:a3:3d:ed:ae:c1:7d:82:44:
         80:eb:17:7f:97:22:28:8b:e4:dd:80:28:ed:1c:58:ab:59:22:
         9b:6d:9b:34:11:91:96:b4:c5:c7:4b:50:b7:47:db:6f:2a:4d:
         88:d0:47:0f:a9:1e:29:e6:cb:9d:d7:e9:72:e8:ef:59:05:3d:
         9e:f5:56:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:49:53 2026 by rpki-client