Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa
File:                     3137302e38302e36302e302f32322d3234203d3e20323732373330.roa (raw, json)
Hash identifier:          tQA3dQxPO5sfwzp/rBSQFXASAYvrtFRhOHlG9NK5mXY=
Subject key identifier:   06:AE:5C:14:36:1B:64:57:EF:11:45:4B:78:BB:18:D2:2E:33:62:15
Certificate issuer:       /CN=533982E027E42DAB1233BC2DAB3609585322CADC
Certificate serial:       7FBE826625D0C2BF8D3BABE4C04E7201D4570882
Authority key identifier: 53:39:82:E0:27:E4:2D:AB:12:33:BC:2D:AB:36:09:58:53:22:CA:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/533982E027E42DAB1233BC2DAB3609585322CADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa
Signing time:             Thu 27 Aug 2026 14:29:47 +0000
ROA not before:           Thu 27 Aug 2026 14:24:47 +0000
ROA not after:            Thu 26 Aug 2027 14:29:47 +0000
asID:                     272730
IP address blocks:        170.80.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/533982E027E42DAB1233BC2DAB3609585322CADC.crl
                          rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/533982E027E42DAB1233BC2DAB3609585322CADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/533982E027E42DAB1233BC2DAB3609585322CADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:82:66:25:d0:c2:bf:8d:3b:ab:e4:c0:4e:72:01:d4:57:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533982E027E42DAB1233BC2DAB3609585322CADC
        Validity
            Not Before: Aug 27 14:24:47 2026 GMT
            Not After : Aug 26 14:29:47 2027 GMT
        Subject: CN=06AE5C14361B6457EF11454B78BB18D22E336215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:ec:c2:d9:3b:54:4f:f8:e8:18:83:83:ee:
                    5f:95:22:a6:b1:21:02:78:d5:a1:19:11:4c:75:f0:
                    da:22:ee:82:41:17:36:7e:e3:cf:41:bb:41:0e:22:
                    62:14:05:55:a2:ef:4e:dd:0c:08:42:db:68:8e:28:
                    41:28:ee:4d:b3:f1:0c:f0:bb:60:10:bf:88:02:08:
                    57:f3:25:9d:a7:90:64:96:6d:cb:34:be:69:0a:20:
                    04:7b:d0:68:5c:e6:bb:2c:86:18:77:ee:3d:43:66:
                    8a:ad:3d:20:18:9f:61:45:fb:58:1c:76:2f:c0:cf:
                    4a:c3:21:8d:7f:54:cd:8e:7b:f0:13:a0:27:c7:1a:
                    a8:08:ed:1c:e0:42:74:c0:db:d8:6e:f9:5b:3a:b1:
                    c1:91:7f:ca:dc:7d:c4:03:50:bf:38:ab:f9:13:91:
                    09:a4:35:c9:97:db:b6:a7:e9:4b:0d:8b:4a:78:df:
                    f9:4f:d3:0f:17:93:95:06:d8:18:12:8e:34:2f:51:
                    83:94:6f:4e:e7:c5:fb:5f:35:bc:0f:40:19:ea:02:
                    f3:7c:41:ad:b0:06:c2:15:40:23:ee:f5:72:00:de:
                    6d:49:ef:82:17:14:7d:bb:11:c1:c8:a3:99:b4:7b:
                    2d:6b:2d:50:cc:d5:84:82:29:9a:f5:d8:92:01:00:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:5C:14:36:1B:64:57:EF:11:45:4B:78:BB:18:D2:2E:33:62:15
            X509v3 Authority Key Identifier:
                keyid:53:39:82:E0:27:E4:2D:AB:12:33:BC:2D:AB:36:09:58:53:22:CA:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/533982E027E42DAB1233BC2DAB3609585322CADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/533982E027E42DAB1233BC2DAB3609585322CADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:59:b4:46:17:d0:2b:aa:3e:a4:29:6f:60:b3:62:80:40:3f:
         df:3e:f9:9f:94:a1:fd:a2:b4:72:c0:fa:6c:b2:f0:1d:6e:5b:
         52:25:f4:e9:dc:ec:6a:b1:b6:99:77:8f:5f:78:c3:e0:8d:e2:
         08:fb:49:36:a7:89:b3:4c:9b:68:14:39:44:0f:82:18:87:5d:
         ad:6e:37:a7:7e:9c:4a:e9:4d:a7:18:10:bb:16:0d:9d:f8:ae:
         0d:8c:3a:a0:7a:38:8b:e4:47:4f:44:00:2e:04:34:df:c0:f2:
         eb:a5:ba:17:3a:dc:19:a0:83:09:74:47:89:7b:80:45:d1:d9:
         08:e5:33:8e:86:d1:b9:b2:cf:86:cd:19:03:8f:30:63:c2:a8:
         b6:e6:9c:b4:67:ea:eb:48:ed:71:42:9c:e4:6e:ce:46:8c:98:
         04:62:45:0c:1d:f1:e2:ce:d0:60:9e:13:23:4c:6b:b3:73:2e:
         41:ad:b7:c0:b6:92:c0:89:ce:83:75:df:bd:4d:89:4c:c3:34:
         50:5e:1f:35:af:6b:22:61:c4:07:84:76:6a:f0:73:04:db:c0:
         d3:14:16:f6:92:ec:d7:90:03:c4:7f:db:88:db:5f:45:05:66:
         c8:27:87:1c:74:c4:c8:13:23:60:36:be:47:f2:0a:0b:48:c4:
         56:50:2d:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf76CZiXQwr+NO6vkwE5yAdRXCIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzOTgyRTAyN0U0MkRBQjEyMzNCQzJEQUIzNjA5NTg1
MzIyQ0FEQzAeFw0yNjA4MjcxNDI0NDdaFw0yNzA4MjYxNDI5NDdaMDMxMTAvBgNV
BAMTKDA2QUU1QzE0MzYxQjY0NTdFRjExNDU0Qjc4QkIxOEQyMkUzMzYyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAk+zC2TtUT/joGIOD7l+VIqax
IQJ41aEZEUx18Noi7oJBFzZ+489Bu0EOImIUBVWi707dDAhC22iOKEEo7k2z8Qzw
u2AQv4gCCFfzJZ2nkGSWbcs0vmkKIAR70Ghc5rsshhh37j1DZoqtPSAYn2FF+1gc
di/Az0rDIY1/VM2Oe/AToCfHGqgI7RzgQnTA29hu+Vs6scGRf8rcfcQDUL84q/kT
kQmkNcmX27an6UsNi0p43/lP0w8Xk5UG2BgSjjQvUYOUb07nxftfNbwPQBnqAvN8
Qa2wBsIVQCPu9XIA3m1J74IXFH27EcHIo5m0ey1rLVDM1YSCKZr12JIBAMIbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBq5cFDYbZFfvEUVLeLsY0i4zYhUwHwYDVR0j
BBgwFoAUUzmC4CfkLasSM7wtqzYJWFMiytwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR5Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dv
dFYvMC81MzM5ODJFMDI3RTQyREFCMTIzM0JDMkRBQjM2MDk1ODUzMjJDQURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzMzk4MkUwMjdFNDJEQUIx
MjMzQkMyREFCMzYwOTU4NTMyMkNBREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0eWd6VTNkUnZDcDF5YnY3aFR4RlIyeUxjN2dOS1FxOVM0M0hLdENnb3RWLzAv
MzEzNzMwMmUzODMwMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlA8MA0GCSqGSIb3DQEBCwUAA4IBAQCQWbRGF9Ar
qj6kKW9gs2KAQD/fPvmflKH9orRywPpssvAdbltSJfTp3OxqsbaZd49feMPgjeII
+0k2p4mzTJtoFDlED4IYh12tbjenfpxK6U2nGBC7Fg2d+K4NjDqgejiL5EdPRAAu
BDTfwPLrpboXOtwZoIMJdEeJe4BF0dkI5TOOhtG5ss+GzRkDjzBjwqi25py0Z+rr
SO1xQpzkbs5GjJgEYkUMHfHiztBgnhMjTGuzcy5BrbfAtpLAic6Ddd+9TYlMwzRQ
Xh81r2siYcQHhHZq8HME28DTFBb2kuzXkAPEf9uI219FBWbIJ4ccdMTIEyNgNr5H
8goLSMRWUC3c
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:50:19 2026 by rpki-client