Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
File:                     3137302e38342e31322e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          l2oGgXTzIy4OWY2Tmc3fSYvpOH8nOH+RWs8C7wnc6ZA=
Subject key identifier:   2E:6D:C0:55:CC:9B:BB:D0:56:B3:49:F6:F0:53:2F:A8:40:E2:4D:9C
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       3777ABA010C197E06EBF175782D64F148D15BD0B
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
Signing time:             Mon 18 May 2026 21:01:43 +0000
ROA not before:           Mon 18 May 2026 20:56:43 +0000
ROA not after:            Mon 17 May 2027 21:01:43 +0000
asID:                     264987
IP address blocks:        170.84.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:ab:a0:10:c1:97:e0:6e:bf:17:57:82:d6:4f:14:8d:15:bd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: May 18 20:56:43 2026 GMT
            Not After : May 17 21:01:43 2027 GMT
        Subject: CN=2E6DC055CC9BBBD056B349F6F0532FA840E24D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:87:8b:9f:30:23:17:62:1a:73:ed:bd:98:
                    44:5b:3f:5a:6f:2f:2a:1c:01:95:22:a1:80:62:55:
                    0b:ec:ae:d6:fe:e1:05:ce:61:fc:ef:73:6c:13:51:
                    66:7f:a7:66:85:f0:94:11:08:b2:36:bb:f6:02:ad:
                    a1:0e:49:22:cf:43:b0:c2:74:ab:75:d4:7e:7c:09:
                    aa:72:ac:ed:9c:62:ef:e4:89:0b:39:f9:0a:ef:f8:
                    c7:c5:f9:6b:79:2c:a5:91:65:3d:08:32:5a:af:b6:
                    91:7f:fd:a7:4a:db:bd:f7:04:81:ed:db:f2:22:65:
                    d9:ea:11:c4:28:14:b3:40:28:a9:89:0b:f4:4e:61:
                    8e:f7:3f:9e:e0:29:6d:f0:41:89:4e:fe:13:34:52:
                    8d:79:5a:28:11:9a:02:88:46:aa:07:94:93:76:dc:
                    52:ed:e0:68:26:19:c3:73:71:77:d0:b9:99:fc:13:
                    13:20:f9:29:13:14:96:97:ad:e7:a6:0a:d3:5d:e7:
                    9a:2b:99:fc:3f:6b:b4:a1:b6:17:8e:8d:8c:46:60:
                    67:cc:bc:c4:dc:67:50:f0:79:cc:5c:6c:4f:3c:23:
                    22:c7:e1:33:09:b9:cc:2f:8c:db:4a:7d:81:42:61:
                    ae:51:1c:ed:bf:b3:cd:be:6f:76:f7:ad:13:b4:2f:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:C0:55:CC:9B:BB:D0:56:B3:49:F6:F0:53:2F:A8:40:E2:4D:9C
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:46:fa:78:f7:a8:ae:78:78:65:a5:ec:9b:90:a0:6d:ab:7f:
         e7:cb:55:53:fa:81:48:e4:b4:f5:66:be:fb:86:12:b4:eb:82:
         cc:4b:37:10:5c:06:e0:cd:53:5c:d0:45:55:c9:6f:2b:bf:4e:
         cd:65:5c:5d:bb:bb:08:b0:b4:5e:d8:38:7a:d1:b3:5b:05:68:
         8a:cb:a9:61:be:89:d4:6d:df:d0:1d:a7:3a:28:23:d1:53:0c:
         a4:99:ad:d0:f5:ef:56:f4:e4:2d:a2:c5:04:ec:fa:9f:ad:35:
         70:85:80:72:1d:0f:59:6a:0c:81:d7:a9:62:c1:75:7f:d9:0d:
         3a:d3:02:b8:28:a7:a9:3d:12:a7:25:9c:d8:dd:75:07:72:32:
         4b:d7:a0:9d:5d:39:6f:05:45:9b:6c:b9:11:2e:9d:2d:31:e3:
         2e:cb:0d:6c:72:a7:6f:18:da:a0:4a:03:fc:80:09:bf:d3:3c:
         b1:1c:62:1e:3a:30:ff:ab:d0:d8:4d:97:7c:f2:cd:49:e2:5f:
         eb:73:81:17:cf:d7:72:ed:ce:48:27:bc:93:a8:3a:18:ef:47:
         3c:6c:17:1a:44:7b:29:b8:98:4c:31:2f:b7:2b:63:0a:c0:f5:
         03:1e:af:82:b5:42:78:80:05:c2:28:e6:3d:99:6b:ec:e6:16:
         de:b4:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:19:37 2026 by rpki-client