Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e3233382e3131342e302f32342d3234203d3e20323636333337.roa
File:                     3137302e3233382e3131342e302f32342d3234203d3e20323636333337.roa (raw, json)
Hash identifier:          WxyjFX6YqVc5xieuJev+zaLqVOsTu+9KRgZ4+5hYjSg=
Subject key identifier:   3A:AC:64:EC:8A:9F:FD:19:7F:F9:1A:B7:AA:90:96:EE:A6:87:9D:26
Certificate issuer:       /CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
Certificate serial:       45FA4280EA4F1336232D3EC6C5061AD798123E3B
Authority key identifier: 01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e3233382e3131342e302f32342d3234203d3e20323636333337.roa
Signing time:             Thu 17 Sep 2026 12:42:43 +0000
ROA not before:           Thu 17 Sep 2026 12:37:43 +0000
ROA not after:            Thu 16 Sep 2027 12:42:43 +0000
asID:                     266337
IP address blocks:        170.238.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl
                          rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fa:42:80:ea:4f:13:36:23:2d:3e:c6:c5:06:1a:d7:98:12:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
        Validity
            Not Before: Sep 17 12:37:43 2026 GMT
            Not After : Sep 16 12:42:43 2027 GMT
        Subject: CN=3AAC64EC8A9FFD197FF91AB7AA9096EEA6879D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:76:e0:90:87:36:be:6d:3c:bf:06:94:73:
                    ec:9e:6e:64:b1:d2:cc:49:3d:ff:f3:b2:32:ff:1b:
                    36:5d:f2:88:7f:7c:ae:cd:0e:05:a4:e7:f3:b3:d0:
                    24:07:f5:e0:0b:20:6b:71:c7:8e:be:12:08:3a:ed:
                    65:88:e3:bb:68:1e:57:74:8f:4f:a1:be:0d:fe:3e:
                    11:29:f6:88:4c:5d:6b:b1:77:d9:1c:29:7e:24:13:
                    96:1b:d3:f6:f0:5a:8d:cf:19:63:f9:78:a9:92:74:
                    9e:53:05:bc:72:47:4e:fe:af:74:82:7b:11:cd:d9:
                    d4:24:9e:57:d6:dd:72:0c:47:b5:2b:c6:d4:cb:98:
                    1b:6a:6e:ce:f0:b4:26:67:4b:bf:c2:7d:aa:28:77:
                    79:6d:43:8a:d4:ba:5b:8c:d2:12:1c:f3:cb:a2:ae:
                    9c:82:07:1b:49:5a:a3:53:ad:08:9e:f2:5f:6b:f0:
                    83:94:f6:9d:68:d6:53:b0:d4:06:9b:fb:7f:ef:cd:
                    60:e9:c3:3b:8a:80:34:1d:ca:cd:1c:57:b6:cd:46:
                    f8:8f:ba:7c:36:b1:4e:c9:fe:52:99:99:7e:fe:9d:
                    02:df:5a:01:c7:77:23:49:59:43:a0:39:d4:52:da:
                    86:94:b9:73:d3:c4:fb:68:99:5a:f9:91:ff:bc:e6:
                    6b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:64:EC:8A:9F:FD:19:7F:F9:1A:B7:AA:90:96:EE:A6:87:9D:26
            X509v3 Authority Key Identifier:
                keyid:01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/3137302e3233382e3131342e302f32342d3234203d3e20323636333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:92:1d:70:36:9f:98:71:0d:ef:16:a8:3a:76:1d:0b:8c:
         3a:a3:2f:4f:ea:31:d8:31:0c:83:ca:32:ce:3f:71:49:a2:7f:
         be:ee:ea:a3:08:8d:95:29:df:10:98:99:db:ca:80:03:96:30:
         7a:b3:c7:4c:89:a5:c7:87:a6:64:93:e0:c7:31:bd:dc:7f:29:
         dd:b5:0f:d9:87:2d:b4:1a:f9:2f:74:7e:35:07:c4:18:69:56:
         5e:3c:26:97:61:a8:45:74:6f:56:84:39:76:78:05:24:a5:49:
         db:17:32:92:38:80:3f:7e:8c:62:ee:e6:53:c4:6f:b0:b1:18:
         0f:f3:ef:6b:2b:30:68:98:f6:2b:81:a1:10:fe:d3:2b:8d:b3:
         b3:61:11:0d:f4:31:49:fb:3f:6f:c4:bf:54:7b:a3:d2:33:c8:
         19:fd:7f:52:07:e3:ab:cc:61:f4:8b:c7:cd:cb:80:c1:b1:71:
         46:c6:e4:90:b2:4a:11:c5:0b:b1:3b:69:f5:48:b8:55:46:b5:
         9b:41:f4:09:28:58:14:c9:4c:9c:11:4e:da:a0:7d:ca:0c:2e:
         1f:c7:e1:02:29:81:84:52:5a:8b:c2:17:95:14:eb:ef:01:68:
         d3:a5:d1:5a:e9:5c:03:77:7b:f3:4e:71:57:f6:08:c0:4f:54:
         10:db:94:72
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURfpCgOpPEzYjLT7GxQYa15gSPjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFENjFBREY5QzlFRDAxQjc5OTMzQjI2NUFBQTE3N0VB
MTIwOEU0NTAeFw0yNjA5MTcxMjM3NDNaFw0yNzA5MTYxMjQyNDNaMDMxMTAvBgNV
BAMTKDNBQUM2NEVDOEE5RkZEMTk3RkY5MUFCN0FBOTA5NkVFQTY4NzlEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspHbgkIc2vm08vwaUc+yebmSx
0sxJPf/zsjL/GzZd8oh/fK7NDgWk5/Oz0CQH9eALIGtxx46+Egg67WWI47toHld0
j0+hvg3+PhEp9ohMXWuxd9kcKX4kE5Yb0/bwWo3PGWP5eKmSdJ5TBbxyR07+r3SC
exHN2dQknlfW3XIMR7UrxtTLmBtqbs7wtCZnS7/Cfaood3ltQ4rUuluM0hIc88ui
rpyCBxtJWqNTrQie8l9r8IOU9p1o1lOw1Aab+3/vzWDpwzuKgDQdys0cV7bNRviP
unw2sU7J/lKZmX7+nQLfWgHHdyNJWUOgOdRS2oaUuXPTxPtomVr5kf+85mvnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOqxk7Iqf/Rl/+Rq3qpCW7qaHnSYwHwYDVR0j
BBgwFoAUAdYa35ye0Bt5kzsmWqoXfqEgjkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFVVHkydko4OVltd1BlTkNnYXhmOW5lRnFOMlRRMVJ4bTRmOTlpOUgx
WGcvMC8wMUQ2MUFERjlDOUVEMDFCNzk5MzNCMjY1QUFBMTc3RUExMjA4RTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxRDYxQURGOUM5RUQwMUI3
OTkzM0IyNjVBQUExNzdFQTEyMDhFNDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRVVR5MnZKODlZbXdQZU5DZ2F4ZjluZUZxTjJUUTFSeG00Zjk5aTlIMVhnLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrucjANBgkqhkiG9w0BAQsFAAOCAQEAlpqS
HXA2n5hxDe8WqDp2HQuMOqMvT+ox2DEMg8oyzj9xSaJ/vu7qowiNlSnfEJiZ28qA
A5YwerPHTImlx4emZJPgxzG93H8p3bUP2YcttBr5L3R+NQfEGGlWXjwml2GoRXRv
VoQ5dngFJKVJ2xcykjiAP36MYu7mU8RvsLEYD/PvayswaJj2K4GhEP7TK42zs2ER
DfQxSfs/b8S/VHuj0jPIGf1/Ugfjq8xh9IvHzcuAwbFxRsbkkLJKEcULsTtp9Ui4
VUa1m0H0CShYFMlMnBFO2qB9ygwuH8fhAimBhFJai8IXlRTr7wFo06XRWulcA3d7
805xV/YIwE9UENuUcg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:45:00 2026 by rpki-client