Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa
File:                     AS271724.roa (raw, json)
Hash identifier:          iR6QoaQkb7Kqc4rRZEp7H8OWqgas3P8CYQXIL0qQLO0=
Subject key identifier:   88:38:F1:94:0E:52:84:90:B8:8E:2E:94:99:84:AD:52:23:81:6B:E6
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       7490A031E82AA7448FAFA8BD754CD4312FA1394F
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa
Signing time:             Fri 12 Jun 2026 14:33:12 +0000
ROA not before:           Fri 12 Jun 2026 14:28:12 +0000
ROA not after:            Fri 11 Jun 2027 14:33:12 +0000
asID:                     271724
IP address blocks:        131.221.68.0/22 maxlen: 22
                          131.221.70.0/23 maxlen: 23
                          138.117.124.0/22 maxlen: 22
                          138.117.124.0/24 maxlen: 24
                          138.117.126.0/23 maxlen: 23
                          143.255.112.0/22 maxlen: 22
                          170.0.204.0/22 maxlen: 22
                          170.245.100.0/22 maxlen: 22
                          177.75.192.0/20 maxlen: 20
                          177.75.193.0/24 maxlen: 24
                          177.75.206.0/23 maxlen: 23
                          177.75.208.0/20 maxlen: 20
                          177.75.222.0/23 maxlen: 23
                          177.75.222.0/24 maxlen: 24
                          177.75.223.0/24 maxlen: 24
                          179.191.128.0/20 maxlen: 20
                          179.191.144.0/20 maxlen: 21
                          179.191.152.0/22 maxlen: 22
                          179.191.156.0/22 maxlen: 22
                          179.191.156.0/23 maxlen: 23
                          187.110.208.0/20 maxlen: 20
                          187.110.208.0/24 maxlen: 24
                          187.110.209.0/24 maxlen: 24
                          187.110.210.0/24 maxlen: 24
                          187.110.211.0/24 maxlen: 24
                          187.110.212.0/24 maxlen: 24
                          187.110.213.0/24 maxlen: 24
                          187.110.214.0/24 maxlen: 24
                          187.110.215.0/24 maxlen: 24
                          187.110.216.0/23 maxlen: 23
                          187.110.219.0/24 maxlen: 24
                          187.110.220.0/24 maxlen: 24
                          187.110.222.0/24 maxlen: 24
                          187.110.223.0/24 maxlen: 24
                          189.50.144.0/20 maxlen: 20
                          189.50.144.0/21 maxlen: 21
                          189.50.144.0/22 maxlen: 22
                          189.50.144.0/23 maxlen: 23
                          189.50.144.0/24 maxlen: 24
                          189.50.145.0/24 maxlen: 24
                          189.50.146.0/23 maxlen: 23
                          189.50.146.0/24 maxlen: 24
                          189.50.147.0/24 maxlen: 24
                          189.50.148.0/22 maxlen: 22
                          189.50.148.0/23 maxlen: 23
                          189.50.148.0/24 maxlen: 24
                          189.50.149.0/24 maxlen: 24
                          189.50.150.0/23 maxlen: 23
                          189.50.150.0/24 maxlen: 24
                          189.50.151.0/24 maxlen: 24
                          189.50.152.0/21 maxlen: 21
                          189.50.152.0/22 maxlen: 22
                          189.50.152.0/23 maxlen: 23
                          189.50.152.0/24 maxlen: 24
                          189.50.153.0/24 maxlen: 24
                          189.50.154.0/23 maxlen: 23
                          189.50.156.0/23 maxlen: 23
                          189.50.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:90:a0:31:e8:2a:a7:44:8f:af:a8:bd:75:4c:d4:31:2f:a1:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Jun 12 14:28:12 2026 GMT
            Not After : Jun 11 14:33:12 2027 GMT
        Subject: CN=8838F1940E528490B88E2E949984AD5223816BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:ff:1e:a7:92:c8:74:1a:a2:c5:2f:10:c8:
                    2e:af:63:a1:09:ce:19:cd:9c:8b:a6:87:7c:c5:12:
                    ca:4a:1c:4d:ea:7e:4a:6c:37:bf:13:e4:25:f7:4e:
                    f0:5b:3f:27:63:75:ad:75:44:2f:d5:34:36:e3:5f:
                    e9:28:35:4c:c4:5b:dd:07:86:70:f3:d2:c7:d7:5c:
                    37:ff:5b:6f:e9:b8:47:a2:58:6d:d4:e2:e5:6f:58:
                    56:b5:9b:a5:e5:32:eb:69:47:2f:7c:33:b4:c6:c6:
                    eb:fb:49:47:3f:8c:85:fa:05:bf:f0:af:d3:d4:54:
                    9f:9b:b6:65:73:74:ed:eb:7e:b4:37:34:5b:31:66:
                    04:d8:52:a7:ae:74:d9:13:d5:4f:0f:ae:72:c3:ca:
                    3d:52:7c:e3:47:5a:5b:81:f6:d1:79:30:74:fc:b1:
                    fd:b4:a8:8d:fd:e0:a0:d0:5d:ab:58:a2:57:df:40:
                    57:a4:25:86:8f:5c:f2:d3:11:fa:45:2e:b4:a8:f3:
                    26:e4:07:01:54:14:54:f8:42:5c:0d:b9:0d:4e:fe:
                    01:a7:4d:70:cd:fe:cd:ba:b7:5c:1b:05:a5:a6:39:
                    ee:30:15:f0:be:45:7a:2b:a5:e8:89:ee:12:4e:2e:
                    c7:13:ad:94:1a:73:eb:14:19:a3:a2:a8:36:86:0f:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:38:F1:94:0E:52:84:90:B8:8E:2E:94:99:84:AD:52:23:81:6B:E6
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22
                  138.117.124.0/22
                  143.255.112.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  177.75.192.0/19
                  179.191.128.0/19
                  187.110.208.0/20
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:58:94:cf:7c:30:5d:20:7e:c1:be:80:67:61:2c:42:84:
         12:4c:16:ca:80:6a:ae:ac:22:8d:40:f8:fd:67:ab:5b:43:13:
         2a:f0:38:76:9c:3b:c3:92:44:cb:2f:49:86:df:22:2f:aa:2b:
         e7:23:ec:41:c5:a5:6b:57:b8:cd:7a:fa:a8:79:74:68:ac:b8:
         44:4c:9c:83:67:84:b3:14:9e:63:bc:90:e6:c0:c5:bc:5b:59:
         73:4b:1a:9f:d4:74:87:3c:f6:45:07:3e:b2:42:79:31:76:37:
         20:77:ef:c7:72:a8:4f:6b:9b:b3:44:ef:4d:5d:51:3b:d4:a4:
         52:36:7c:a4:7d:3e:57:66:ad:0e:92:73:8f:13:d4:36:b8:ca:
         fa:b3:d2:06:cf:eb:ad:40:45:b1:e7:cc:2e:65:1b:34:03:58:
         50:ae:75:f9:5e:c7:71:3b:16:89:3d:d1:8b:4e:d4:91:c4:08:
         e8:57:11:cb:f9:54:2f:2d:d8:96:b4:7a:fb:28:89:35:58:1b:
         5f:43:89:11:f3:0b:db:f0:df:07:ac:44:f6:a2:1b:da:95:4f:
         54:7f:1b:2e:67:19:26:d0:b8:d4:19:d9:f7:d4:b3:82:18:49:
         5a:c6:05:0d:28:81:f7:4a:b9:b9:32:1b:db:12:46:6b:cb:b0:
         d2:05:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:56 2026 by rpki-client