Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32332d3233203d3e20323634313132.roa
File:                     3137302e38332e3136322e302f32332d3233203d3e20323634313132.roa (raw, json)
Hash identifier:          XtwfLxzacSFxe3PQu+TY4x1HkJCM7bkqaK5zngyrdyU=
Subject key identifier:   47:1B:31:B9:6D:6F:B5:DE:9A:84:56:B5:EF:F9:D7:1D:81:4B:58:7A
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       1325AA697195086899A9FF5B09C57C6C4F3051E0
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32332d3233203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:01:01 +0000
ROA not before:           Fri 05 Jun 2026 01:56:01 +0000
ROA not after:            Fri 04 Jun 2027 02:01:01 +0000
asID:                     264112
IP address blocks:        170.83.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:25:aa:69:71:95:08:68:99:a9:ff:5b:09:c5:7c:6c:4f:30:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:56:01 2026 GMT
            Not After : Jun  4 02:01:01 2027 GMT
        Subject: CN=471B31B96D6FB5DE9A8456B5EFF9D71D814B587A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:20:d8:b7:a8:0b:d6:9f:7c:78:4b:a1:26:
                    b2:5c:78:88:98:72:1a:1d:2d:e1:36:d2:d2:04:ef:
                    ad:f6:b8:3b:2e:b1:33:46:fb:fa:26:d2:99:26:61:
                    12:63:e0:b9:9b:31:74:93:84:49:60:26:ba:70:6c:
                    0a:86:f9:d1:b3:52:aa:6e:58:0b:4d:21:79:ad:7c:
                    fd:92:f0:1c:35:90:06:da:ee:a6:bf:a1:00:da:e8:
                    33:6e:64:69:84:9e:86:05:31:a5:ff:2b:76:21:08:
                    97:17:9b:0e:61:ae:a9:42:d2:96:13:17:e0:c5:1e:
                    f2:1d:96:a3:7b:33:0b:bc:f5:d4:3b:c1:f7:4a:d0:
                    fd:dd:1d:dc:ec:e2:78:e4:fd:09:d7:76:3c:bd:68:
                    ea:f2:3a:15:dc:18:1a:30:20:75:f7:2a:dd:b3:8a:
                    31:bb:df:80:e8:0d:9c:37:64:7d:42:d2:b4:97:5e:
                    73:2c:07:3d:65:bb:f4:08:bc:69:69:21:c9:ee:dc:
                    01:52:c3:f7:e6:c3:38:fb:4e:33:fa:eb:e7:95:4f:
                    85:61:48:cd:3a:49:47:e2:68:aa:f8:ad:22:ef:10:
                    6a:bc:45:7b:2b:fc:b3:46:3e:51:f9:93:d1:47:f1:
                    08:79:6b:55:73:df:b5:81:f4:06:29:a4:ea:9b:0c:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:31:B9:6D:6F:B5:DE:9A:84:56:B5:EF:F9:D7:1D:81:4B:58:7A
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32332d3233203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:19:ff:2f:8a:34:3f:58:58:4a:62:f4:bc:82:36:98:ad:51:
         a8:b2:01:05:74:05:e2:28:15:c1:70:b9:a1:64:b1:55:30:4f:
         40:8e:b4:fa:f2:19:13:c2:67:43:96:85:ed:15:df:96:da:1b:
         23:a0:8b:57:5d:b1:8a:20:72:39:c0:9e:bd:4e:b4:da:f7:a3:
         9b:41:dd:9a:2a:90:b8:80:33:93:20:df:80:8d:e0:1a:df:e7:
         d6:76:8b:89:6d:17:de:f4:42:4e:dd:83:e8:e5:bb:88:76:d1:
         d3:30:5a:75:0c:ff:cd:eb:d0:29:5c:16:d3:61:cb:7a:f4:26:
         f5:2d:5f:1a:5e:b4:f3:45:04:1d:4f:a9:1f:cc:dd:60:80:f9:
         aa:45:1b:37:b3:2d:4e:9f:e6:f6:8d:2b:e7:dc:c9:79:17:07:
         9e:8d:5f:61:00:a7:c6:5c:8a:bd:3e:d7:fa:32:40:80:12:31:
         85:3f:cf:3d:ea:93:b6:b5:50:d8:d5:9a:6a:82:59:e1:b1:ce:
         44:f4:08:eb:9b:8d:c1:4b:15:22:b6:c1:b2:a1:55:51:ba:bf:
         92:64:21:5d:bf:47:a5:02:e6:13:31:61:74:12:b5:5d:34:29:
         b2:34:0b:0e:ee:c2:8d:ea:d8:c9:72:9f:94:5a:36:ba:79:6f:
         7f:fe:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:39 2026 by rpki-client