Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32342d3234203d3e20323730393433.roa
File:                     3137392e3138392e38322e302f32342d3234203d3e20323730393433.roa (raw, json)
Hash identifier:          zY3lQyBlx23e3rf7lcMjFya9D5Owkfbf9o7zTGhgCw8=
Subject key identifier:   60:22:3A:27:24:47:77:2B:C9:EE:6D:D9:82:98:79:63:8F:C5:6D:E9
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       7E175B2A0E27EC7E46C4422AB7260C92A6AC17A3
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32342d3234203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:18 +0000
ROA not before:           Mon 23 Feb 2026 20:52:18 +0000
ROA not after:            Mon 22 Feb 2027 20:57:18 +0000
asID:                     270943
IP address blocks:        179.189.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:5b:2a:0e:27:ec:7e:46:c4:42:2a:b7:26:0c:92:a6:ac:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:18 2026 GMT
            Not After : Feb 22 20:57:18 2027 GMT
        Subject: CN=60223A272447772BC9EE6DD9829879638FC56DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:8f:98:2a:6c:53:01:c3:87:3a:33:af:08:
                    e8:31:9f:44:78:c8:44:22:05:0a:9f:f7:a1:84:c4:
                    5e:c5:45:d1:30:60:b9:de:3c:5f:4d:42:e1:16:ca:
                    5f:c7:ad:c5:3d:97:4c:57:83:a5:b0:d8:45:b8:12:
                    e4:7e:7f:7d:6d:4b:bb:08:d2:4c:77:59:39:4b:70:
                    8c:d9:bd:ca:6c:3d:ed:a5:12:43:61:5e:fa:36:22:
                    27:02:6f:d3:d8:a8:a5:a3:96:3e:7b:68:7a:2b:62:
                    6c:ad:41:cd:cb:4c:8a:b9:54:96:30:e4:7e:02:a9:
                    d0:4c:95:cb:32:4b:03:6e:18:b3:9f:44:6d:5d:d6:
                    2a:af:23:38:fc:88:2b:5e:c8:d1:d2:c8:72:60:d0:
                    de:43:42:c2:d5:80:fa:59:65:93:43:c1:cd:34:07:
                    f8:d3:11:88:90:dd:73:13:c6:0a:a9:c0:a2:3b:e5:
                    0d:a7:b7:07:c9:39:15:06:92:8e:d7:0d:9c:da:b4:
                    34:86:63:fd:6f:ea:f7:a9:e7:7e:08:ce:00:3f:20:
                    be:b5:96:27:8e:0f:1d:f0:ce:23:d6:83:22:8a:ef:
                    26:ce:49:e5:b7:3e:28:ae:5b:17:7d:43:ab:14:7e:
                    74:9d:aa:0d:9f:0a:33:ab:c4:3d:4c:3d:7f:84:47:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:3A:27:24:47:77:2B:C9:EE:6D:D9:82:98:79:63:8F:C5:6D:E9
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32342d3234203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:83:93:5d:65:04:a0:25:27:6a:1c:e8:d6:9d:ba:1e:3c:
         1c:99:b6:e5:b5:57:bd:31:e4:8e:4e:0c:2d:3d:91:0f:9b:af:
         f5:82:bb:cd:0e:32:f2:73:33:4d:de:73:0c:61:ec:81:b5:ae:
         12:dd:2b:be:09:14:b9:cc:79:f3:bd:ba:26:60:16:29:6e:75:
         db:3b:da:99:10:87:96:2a:e2:1b:80:be:35:65:9a:93:62:82:
         2b:bd:55:9b:09:75:f2:f2:c7:38:55:07:87:59:5e:9b:4f:e8:
         47:5a:06:21:64:2a:1b:6d:0c:cf:b9:bf:ba:ae:9f:57:19:0f:
         07:46:3a:36:33:7e:98:72:79:c6:41:c4:45:20:c8:64:2e:95:
         aa:85:c8:d4:d9:07:3b:53:96:31:70:c6:56:2a:e9:24:d0:c8:
         22:16:d8:e7:5d:87:aa:8e:46:a1:75:e7:3a:13:a2:04:0a:03:
         0e:61:49:dd:ae:a9:9f:b6:ad:ab:ff:e5:08:27:60:af:dc:b5:
         87:2b:32:6c:a4:14:b2:9f:5c:12:27:da:67:a7:53:85:75:a9:
         df:26:ba:dc:20:84:7f:6d:b1:e5:19:4d:87:8b:fb:f6:80:20:
         f3:5f:50:6b:3c:ab:a5:d1:1c:37:42:1d:c3:2e:81:86:c0:a7:
         ec:77:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:34 2026 by rpki-client