Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138302e302f32332d3233203d3e20323633343738.roa
File:                     3137302e38332e3138302e302f32332d3233203d3e20323633343738.roa (raw, json)
Hash identifier:          WqQ5wIPQrJJOFYZ6HCUDi1e9zCBJmFUM2xvSN5Tj92A=
Subject key identifier:   A9:4D:F4:F3:D3:ED:5B:89:F6:DB:E9:72:B4:1E:40:29:4E:2F:8E:D6
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       04E291D399940AE679FD5EC8F10CBA57506D77FB
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138302e302f32332d3233203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:43 +0000
ROA not before:           Fri 14 Aug 2026 18:46:43 +0000
ROA not after:            Fri 13 Aug 2027 18:51:43 +0000
asID:                     263478
IP address blocks:        170.83.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:91:d3:99:94:0a:e6:79:fd:5e:c8:f1:0c:ba:57:50:6d:77:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:43 2026 GMT
            Not After : Aug 13 18:51:43 2027 GMT
        Subject: CN=A94DF4F3D3ED5B89F6DBE972B41E40294E2F8ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:1b:98:03:a4:dc:b9:05:6a:8d:c1:61:94:
                    06:2a:6e:7d:0d:f7:d1:07:bf:3e:97:3c:7e:ac:18:
                    75:38:6a:e1:2f:f9:b4:4d:31:e9:6c:ea:7e:83:fd:
                    52:01:2b:23:29:fc:db:f1:82:8b:33:63:34:c0:55:
                    cb:a2:53:0d:9c:20:71:8e:b2:f7:3e:c2:16:f0:1e:
                    99:d1:9e:8e:6e:7e:50:ac:18:c0:a5:f6:ff:ad:79:
                    d7:74:4a:30:f3:d3:11:38:5c:85:c7:8d:01:86:7d:
                    2e:1d:f1:08:c7:9a:7c:b1:68:1b:5d:68:00:8f:0b:
                    fa:ee:82:df:ee:6c:fd:97:ff:7d:e5:b1:7e:e3:f1:
                    0e:53:2b:8f:e1:f5:bb:ac:3a:d6:c6:f0:9b:3d:20:
                    13:50:b3:34:03:5a:6c:d2:53:86:87:f3:9c:8b:d2:
                    16:0b:28:64:d9:dc:08:85:33:f5:d0:51:ca:d7:3f:
                    a7:08:42:7e:27:a1:f8:82:12:f0:a0:ed:e5:40:e9:
                    0e:ad:e5:78:1e:03:29:a8:5f:88:c2:2d:73:09:68:
                    2f:2e:eb:62:9a:09:00:98:2b:91:aa:ee:83:1f:11:
                    79:6b:92:80:90:41:99:69:06:d5:5c:ba:44:3f:5f:
                    9c:be:4e:ba:49:42:f9:45:40:e5:24:d4:53:d8:03:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:F4:F3:D3:ED:5B:89:F6:DB:E9:72:B4:1E:40:29:4E:2F:8E:D6
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138302e302f32332d3233203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:ae:b0:a9:6f:2e:28:c5:9b:bf:be:4a:dc:75:67:4f:45:
         92:8a:69:a6:60:c4:3e:af:87:b8:d3:ef:db:57:e7:99:4d:ad:
         85:5b:1d:77:84:2c:65:44:a0:0b:b9:e4:25:4e:9e:82:35:f7:
         c7:3c:10:44:e1:86:36:fb:2b:06:2c:21:06:4d:02:90:a5:ce:
         c6:a7:21:2a:97:02:19:85:0d:4e:ca:a3:3f:68:0f:8f:c9:ff:
         8d:00:4d:5d:a5:ea:b7:2c:51:d8:3f:bd:02:bd:bd:9a:53:a1:
         79:59:7d:5f:ca:83:3b:1f:7a:d6:72:48:56:ff:85:0b:11:d8:
         6a:5f:f5:ac:5d:b4:85:cb:a5:00:5e:71:7a:0f:73:20:ef:67:
         73:ec:1c:1f:8e:11:73:80:57:0e:f8:4c:2d:fa:6b:ac:30:14:
         92:3c:f8:f1:3b:7f:6a:a4:38:32:49:f2:c5:63:48:4c:66:07:
         b2:2a:c6:b9:f5:3e:e1:3f:f1:43:7d:ed:db:4c:30:87:bc:52:
         67:b2:d4:14:ca:6a:94:5f:55:dd:b0:eb:1d:ca:b9:bf:f9:76:
         7c:42:7c:7d:be:05:3a:82:4e:39:f9:a2:3f:20:8d:25:d8:6f:
         1c:5a:9f:04:c2:ad:e6:3e:30:ef:a5:8f:55:89:48:bc:45:e3:
         f7:b9:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:33 2026 by rpki-client