Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
File:                     3137302e38342e32342e302f32322d3332203d3e20323635303239.roa (raw, json)
Hash identifier:          Yksd7q/6X7ELrJ+S0IzCaBPzETgUiKAW5Sr0eZ8PFNs=
Subject key identifier:   B0:A7:E3:F9:97:21:EF:F4:54:53:27:46:13:5F:8D:E8:3E:B0:53:A3
Certificate issuer:       /CN=7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5
Certificate serial:       1B156F9F76C934DA343099B2FF056FAAC7C1D595
Authority key identifier: 7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
Signing time:             Tue 28 Jul 2026 11:08:10 +0000
ROA not before:           Tue 28 Jul 2026 11:03:10 +0000
ROA not after:            Tue 27 Jul 2027 11:08:10 +0000
asID:                     265029
IP address blocks:        170.84.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:15:6f:9f:76:c9:34:da:34:30:99:b2:ff:05:6f:aa:c7:c1:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5
        Validity
            Not Before: Jul 28 11:03:10 2026 GMT
            Not After : Jul 27 11:08:10 2027 GMT
        Subject: CN=B0A7E3F99721EFF454532746135F8DE83EB053A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:12:dc:a0:5d:65:91:5d:0b:c8:61:af:57:
                    f4:1a:aa:c9:2d:8a:d7:de:69:27:f0:d1:c3:05:b1:
                    60:17:2f:6b:51:e7:fa:20:69:8a:ca:db:54:bc:87:
                    41:5b:5c:da:5c:08:c7:83:cf:28:3b:50:8d:97:93:
                    ec:ba:e4:1f:10:c6:5a:cf:89:f1:9d:ac:a8:e4:02:
                    eb:d6:95:b3:5e:48:ce:e7:70:11:73:3c:c9:d3:25:
                    a3:9d:16:de:70:12:69:51:cc:34:1d:bd:18:30:bc:
                    68:6e:f8:e8:be:0c:17:3d:7f:b2:d9:08:b6:79:54:
                    3d:7e:dd:d8:fc:78:d7:03:fd:09:23:aa:20:73:df:
                    c6:59:aa:7b:8c:49:77:7d:9d:93:c8:fa:da:8c:05:
                    70:4f:4a:aa:cc:9e:61:fe:5f:24:3f:f6:f9:36:0b:
                    3f:db:d7:f6:13:3b:cd:b7:dc:76:1e:40:07:7f:4c:
                    df:73:f4:4c:41:c4:3a:ff:62:6d:e7:48:22:9c:5a:
                    e7:04:13:23:74:cc:e6:5a:e1:00:18:56:dd:2e:b5:
                    50:65:6e:ee:d9:05:d0:08:74:8e:af:d5:6f:27:5e:
                    86:21:98:f5:c4:a4:03:a3:94:07:55:a0:f7:37:ad:
                    8c:3a:7c:16:e9:52:35:ad:2a:68:80:61:21:97:b1:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:E3:F9:97:21:EF:F4:54:53:27:46:13:5F:8D:E8:3E:B0:53:A3
            X509v3 Authority Key Identifier:
                keyid:7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:39:9f:46:61:c9:e6:0a:08:aa:76:07:88:d5:57:92:11:
         e9:17:01:b4:46:2d:ee:de:52:3d:0f:b1:37:58:ad:fa:33:d5:
         a0:18:ca:c9:b2:27:ac:73:50:64:94:97:f6:db:5b:93:07:14:
         95:5b:81:56:b8:38:0b:f2:96:89:49:67:36:43:af:98:47:68:
         7c:7b:9b:0a:3f:8c:73:8d:d1:90:b2:0c:c6:86:ed:6f:d1:28:
         bc:9d:9d:39:79:d7:97:c3:6b:4a:09:3f:36:4d:d0:97:4e:91:
         11:a8:ff:83:be:c9:ff:15:3d:19:99:ef:bd:f8:96:a4:42:5c:
         2e:1e:19:b6:eb:c5:01:ee:81:74:29:d0:e2:fe:ca:bd:78:c4:
         4e:83:d5:10:61:41:85:60:4e:21:aa:80:c6:ce:1e:f8:17:1c:
         b7:91:68:9a:de:b4:8e:8d:9e:19:4c:0d:d1:96:b4:4f:d8:99:
         5a:9f:08:67:25:9f:6b:30:2d:c1:68:c5:ca:be:a0:ac:4a:67:
         bb:8f:4a:49:6c:73:d0:37:fe:b4:d4:b2:c7:05:a4:e3:fb:ec:
         c4:94:0d:a4:23:82:51:6b:42:5e:69:12:e5:aa:35:2c:82:21:
         cf:6a:54:87:76:e6:ad:51:eb:55:0a:eb:ca:f7:1a:fa:28:4f:
         2d:d5:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:26:21 2026 by rpki-client