Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3232203d3e20323636343731.roa (raw, json)
Hash identifier:          NWl3NWB/o/qMybGqZEtXxICwb6hsZ08Tv9UtjlXn2xk=
Subject key identifier:   6D:E5:C3:81:DD:C8:ED:10:78:A5:6D:1F:AB:7A:46:9F:1F:BB:30:55
Certificate issuer:       /CN=D1513638404A484545681236A6B4FFB90E8BE7D2
Certificate serial:       20BBB3BA712C36D062590DDFC86F0AAEF9C78F14
Authority key identifier: D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa
Signing time:             Fri 18 Sep 2026 21:00:32 +0000
ROA not before:           Fri 18 Sep 2026 20:55:32 +0000
ROA not after:            Fri 17 Sep 2027 21:00:32 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 00:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bb:b3:ba:71:2c:36:d0:62:59:0d:df:c8:6f:0a:ae:f9:c7:8f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1513638404A484545681236A6B4FFB90E8BE7D2
        Validity
            Not Before: Sep 18 20:55:32 2026 GMT
            Not After : Sep 17 21:00:32 2027 GMT
        Subject: CN=6DE5C381DDC8ED1078A56D1FAB7A469F1FBB3055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:4b:0e:a9:91:eb:f1:a5:51:9a:a5:97:d0:
                    e9:4f:70:27:29:87:aa:ef:8e:fa:0e:37:28:a7:55:
                    07:c8:40:55:70:b9:c1:63:b4:df:f0:a7:6a:1f:01:
                    ef:71:d5:ec:b0:92:b6:eb:77:a1:fa:ad:82:fa:3f:
                    04:64:64:e0:cc:2b:ae:06:8b:f9:26:a1:34:9e:16:
                    35:0d:dd:32:7d:9f:10:76:e4:1a:9d:8d:34:bb:3e:
                    f4:b4:08:02:e1:02:fb:58:ef:9a:d0:e1:df:2d:c3:
                    22:54:25:9e:4e:ba:7b:29:64:c7:4e:a0:d2:ef:cf:
                    9a:f8:e2:bf:7b:cf:dd:18:13:86:97:7d:e0:4d:80:
                    bd:6e:81:8a:dd:78:a1:29:3f:cd:77:38:4e:27:a6:
                    2c:d7:7f:ee:6a:04:15:61:90:b6:00:06:ad:5c:e7:
                    f2:f3:d6:c3:a9:c7:b0:18:1d:0d:37:60:67:ad:87:
                    7b:dc:1e:81:b6:f3:9e:93:dd:da:52:16:97:35:ea:
                    04:c7:52:4a:c8:17:c5:30:6c:ad:bf:6a:ea:a4:e0:
                    80:7c:35:36:66:66:61:d7:54:82:d6:4c:31:3a:2d:
                    41:75:84:e4:35:be:2c:cb:3c:89:1d:9d:c5:86:31:
                    91:35:7b:0b:3e:ef:44:5c:5d:e8:48:d8:6c:37:2f:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:C3:81:DD:C8:ED:10:78:A5:6D:1F:AB:7A:46:9F:1F:BB:30:55
            X509v3 Authority Key Identifier:
                keyid:D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3232203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:86:b2:0e:ed:0b:88:33:c4:f3:97:03:f1:8f:c0:69:f8:73:
         f1:f8:ef:f4:65:aa:99:6b:c8:d6:13:95:d8:5a:0b:bb:85:fd:
         b6:df:9c:70:77:dc:28:22:ab:94:f7:50:2e:1f:15:e2:48:f1:
         64:5b:47:e5:23:4a:f1:3e:44:09:29:6e:8f:46:4f:49:14:e1:
         28:f2:c9:08:d4:50:44:3f:7e:da:dd:4d:a6:35:57:24:1b:d2:
         02:87:c3:6f:10:1f:c3:44:df:2e:75:45:89:53:66:a7:8c:b0:
         bc:f6:fa:d7:91:c7:97:bb:7d:44:e5:b2:b1:e2:01:53:df:27:
         1f:05:b1:28:e3:77:a9:33:b8:26:f9:50:a0:fa:a9:fc:f6:d0:
         7b:2d:8f:0b:01:f2:63:d1:13:3d:48:59:c3:06:11:03:eb:42:
         39:56:00:b9:4f:cc:80:d2:2a:c4:29:76:3d:1a:f7:ea:fe:d2:
         92:42:ff:b4:1b:94:47:c6:a7:af:1b:8c:bd:3b:d9:27:05:1c:
         cd:7e:cd:5d:66:48:63:df:bc:07:43:40:ef:99:8f:18:42:7d:
         7e:25:18:e7:54:5d:00:6e:13:79:08:29:2b:d6:48:55:2c:5c:
         4f:66:67:db:9c:c5:b0:e0:43:e8:be:b4:48:e6:52:1b:aa:3c:
         38:b4:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:00:26 2026 by rpki-client