Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134362e302f32342d3234203d3e20323636333631.roa
File:                     3137302e3233392e3134362e302f32342d3234203d3e20323636333631.roa (raw, json)
Hash identifier:          npE50+1Mi26bJwh16CX9roSiHIoJQROm7/rB3LQ1W4U=
Subject key identifier:   81:DD:E1:41:9A:99:69:69:B4:F9:E6:0E:CC:84:2C:B6:A2:F6:F8:B6
Certificate issuer:       /CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
Certificate serial:       59F3DCBDE40099EFD489322D1A31247205C6864C
Authority key identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134362e302f32342d3234203d3e20323636333631.roa
Signing time:             Fri 11 Sep 2026 18:22:26 +0000
ROA not before:           Fri 11 Sep 2026 18:17:26 +0000
ROA not after:            Fri 10 Sep 2027 18:22:26 +0000
asID:                     266361
IP address blocks:        170.239.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl
                          rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 01:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f3:dc:bd:e4:00:99:ef:d4:89:32:2d:1a:31:24:72:05:c6:86:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
        Validity
            Not Before: Sep 11 18:17:26 2026 GMT
            Not After : Sep 10 18:22:26 2027 GMT
        Subject: CN=81DDE1419A996969B4F9E60ECC842CB6A2F6F8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:4e:0c:07:b6:52:bc:7d:65:e2:b5:9b:57:
                    34:1d:69:0f:0b:22:36:56:f9:33:b6:12:77:48:26:
                    d1:f1:1f:8d:8b:4a:25:76:e7:6e:13:a7:35:f8:34:
                    e1:b7:07:75:16:3e:dd:2f:b6:d1:01:79:8d:a8:fe:
                    2b:24:3b:63:89:3c:7c:4e:23:d9:b0:c8:eb:fc:b9:
                    a7:d1:61:3a:e9:88:87:62:3a:f9:7b:19:7c:9f:e3:
                    05:b8:5c:d9:ec:a2:fc:08:22:88:ab:c9:9f:06:03:
                    9f:24:e7:61:fc:78:69:fb:c4:f6:5b:9e:d0:af:2c:
                    bc:6c:22:58:c1:54:a8:2f:da:89:3a:6a:db:e1:df:
                    52:35:44:34:48:59:e4:5b:4f:1d:73:38:3e:4d:7c:
                    39:08:ec:d5:2f:d3:b9:83:71:9f:06:eb:6d:88:d3:
                    48:7c:2b:3a:01:a4:00:eb:65:0b:e6:44:29:0d:c4:
                    3c:54:df:37:b0:32:ed:88:39:71:bb:6d:13:75:b9:
                    1d:2f:68:48:c5:25:92:a9:a1:13:7d:5d:e5:1c:45:
                    ae:8d:28:94:57:f3:e1:f7:c3:fe:eb:1c:5d:6c:56:
                    ff:83:fd:63:bb:fb:8c:cf:31:18:26:cc:6e:2f:f0:
                    52:0a:94:eb:6d:8e:42:3a:ce:9f:5a:4a:35:b0:f3:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:E1:41:9A:99:69:69:B4:F9:E6:0E:CC:84:2C:B6:A2:F6:F8:B6
            X509v3 Authority Key Identifier:
                keyid:97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/3137302e3233392e3134362e302f32342d3234203d3e20323636333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:ad:ca:31:fe:bf:09:4d:ef:19:5f:82:17:2e:0c:48:1f:
         82:9a:83:27:91:7c:52:05:0e:4a:ec:7d:3e:7c:f4:c9:d2:c9:
         5c:e5:42:7f:d1:4a:45:b6:93:7b:6e:5f:ec:bd:93:27:d3:be:
         6b:2e:f2:62:10:31:17:59:5e:ab:61:8c:1a:6e:49:1d:28:ef:
         ec:c4:2f:be:da:11:1b:9d:9e:d0:ee:2f:24:7d:7b:a1:05:c8:
         e0:60:53:88:e5:ac:58:74:52:ae:20:04:00:4c:52:61:10:23:
         50:03:8a:ea:59:bb:3d:aa:60:1d:d0:70:2d:f7:58:58:91:52:
         b6:ab:4e:46:7c:da:b9:3a:56:e3:b2:9d:77:20:13:ba:54:f2:
         a7:b6:10:8b:bd:d7:7f:9b:56:71:d7:84:75:bc:7f:fa:4a:3e:
         5a:7e:8a:98:5f:f8:2c:7d:50:e5:77:f0:c1:95:b4:8c:ff:22:
         26:e4:04:3b:37:e4:0b:c0:db:1a:30:ef:ec:af:dc:4d:c8:2a:
         f6:6e:99:71:84:6c:71:85:ca:80:f1:1f:81:24:34:30:33:9e:
         50:80:49:0f:ac:ce:29:d0:7c:c6:ad:ee:5f:09:5c:db:44:51:
         4d:b7:09:1f:50:3d:09:c6:27:d9:fc:2a:3a:d3:78:59:b4:22:
         38:ce:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:13:55 2026 by rpki-client