Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa
File:                     3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa (raw, json)
Hash identifier:          dgjxF11WnGaFXZ/jAil5QTBQFioEWhGDddWmeUPn5bg=
Subject key identifier:   63:59:58:E0:3A:D4:F3:7B:4B:6D:BA:CA:7A:A7:F5:1C:BD:E0:BE:2D
Certificate issuer:       /CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
Certificate serial:       155CF3EF96871D760DE3353EEADF1BF7CC6371AC
Authority key identifier: F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa
Signing time:             Mon 11 May 2026 12:34:57 +0000
ROA not before:           Mon 11 May 2026 12:29:57 +0000
ROA not after:            Mon 10 May 2027 12:34:57 +0000
asID:                     266291
IP address blocks:        170.79.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl
                          rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5c:f3:ef:96:87:1d:76:0d:e3:35:3e:ea:df:1b:f7:cc:63:71:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
        Validity
            Not Before: May 11 12:29:57 2026 GMT
            Not After : May 10 12:34:57 2027 GMT
        Subject: CN=635958E03AD4F37B4B6DBACA7AA7F51CBDE0BE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:67:9e:f8:b5:eb:a8:60:7e:23:c9:ab:fa:
                    a1:71:da:1f:de:93:32:91:c4:25:c5:41:ec:02:24:
                    10:ae:84:cf:06:45:de:c7:f3:40:e9:8d:69:8b:cd:
                    89:e7:6d:6e:93:d6:9f:2c:75:a0:00:ce:c6:04:89:
                    08:19:92:5f:33:9e:29:41:7c:e8:ee:b7:bc:5f:27:
                    a9:08:a7:79:22:42:68:f6:e7:8e:a4:9d:36:64:47:
                    72:fc:9c:c6:e4:3d:eb:77:cf:e4:ac:f5:fc:94:68:
                    b0:ca:cb:87:db:c0:ba:c8:b9:e5:c7:13:c8:97:7b:
                    ae:e7:e1:b4:44:15:06:82:70:e7:04:69:74:54:39:
                    17:ae:98:1c:aa:db:ef:2f:ab:82:36:fb:24:d0:62:
                    04:63:04:79:b4:c4:14:98:72:ee:d8:14:eb:ad:43:
                    da:88:03:df:10:a8:a5:ae:75:e2:25:bf:53:27:c0:
                    b1:d5:63:10:be:af:e0:ca:25:ad:dc:ac:a3:69:f0:
                    ca:9d:e8:59:90:2b:38:22:0f:27:1e:ec:14:e9:91:
                    c8:f8:cd:79:0b:d1:51:30:0d:03:2d:55:32:c7:9b:
                    56:81:ee:b3:33:df:e1:47:b9:57:62:39:28:22:08:
                    51:0b:7e:49:29:6b:c3:a5:fe:6b:0c:ce:5d:5e:47:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:58:E0:3A:D4:F3:7B:4B:6D:BA:CA:7A:A7:F5:1C:BD:E0:BE:2D
            X509v3 Authority Key Identifier:
                keyid:F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:aa:08:f5:d2:b9:09:a1:ac:6f:d2:08:a9:d8:b7:ac:ea:
         84:d3:83:3a:be:c6:38:aa:62:c7:f6:4e:e7:e7:cb:3b:73:13:
         f8:11:a4:46:36:a5:01:fd:98:c0:2c:81:86:a4:4b:f6:8b:15:
         da:aa:2d:d3:5b:15:3a:c4:ee:7b:d5:6f:d4:e3:9a:c9:7e:a4:
         36:b7:11:50:fe:da:9a:e6:d8:e3:d4:6d:5b:fa:bc:c2:47:11:
         09:b0:7d:a3:5b:9b:fe:ab:4f:16:59:b1:59:27:73:d3:0c:32:
         3b:51:a3:cb:c4:ad:b4:6a:fe:7a:7e:93:d5:7c:2d:80:a8:a7:
         9d:cb:eb:1d:5a:5d:b4:d9:94:51:79:84:5d:13:23:f4:b1:b7:
         90:7b:b8:55:7c:e8:c3:d0:ae:f1:6b:bd:67:aa:e1:d9:7a:8e:
         d0:52:5e:a6:ef:5d:a5:48:fb:08:5d:65:db:98:ba:c8:c3:e6:
         4f:ba:80:f8:22:1d:ac:94:e3:a6:8a:3e:76:50:eb:ed:3c:07:
         da:1c:cc:ef:63:cc:b3:c3:4f:86:c1:31:b6:40:e7:4c:e9:5b:
         bc:72:09:34:0a:02:c5:fb:8b:ec:20:0f:ba:9e:64:ac:4d:4f:
         14:52:6a:2a:20:cd:53:87:03:89:42:05:03:3f:b1:4a:f2:a8:
         75:eb:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:52:43 2026 by rpki-client