Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa (raw, json)
Hash identifier:          Wj7h432gVXA5zfYYBzAjWeXYFWgltCXRAvy+u4uwNCg=
Subject key identifier:   46:9D:18:F6:33:CD:EF:3E:41:02:DD:CF:14:C3:1D:C9:CD:6B:02:92
Certificate issuer:       /CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
Certificate serial:       3D44240A31F997D8B5CEEE24E547C11FFFAEE37E
Authority key identifier: DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa
Signing time:             Fri 04 Sep 2026 15:58:50 +0000
ROA not before:           Fri 04 Sep 2026 15:53:50 +0000
ROA not after:            Fri 03 Sep 2027 15:58:50 +0000
asID:                     265106
IP address blocks:        170.254.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:44:24:0a:31:f9:97:d8:b5:ce:ee:24:e5:47:c1:1f:ff:ae:e3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
        Validity
            Not Before: Sep  4 15:53:50 2026 GMT
            Not After : Sep  3 15:58:50 2027 GMT
        Subject: CN=469D18F633CDEF3E4102DDCF14C31DC9CD6B0292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:16:c4:35:77:6f:9f:ad:fd:a0:e5:65:88:
                    01:c9:90:89:fe:b9:ab:51:9a:07:e3:38:19:71:35:
                    ae:52:2c:2a:7e:16:c0:a8:8f:cf:b7:f4:0d:6a:84:
                    16:28:e6:ba:a0:c6:33:62:d0:e9:c5:d6:b7:4d:3d:
                    d3:ba:ea:37:af:c4:07:c7:32:db:cc:9e:61:f8:44:
                    04:ff:96:36:d4:69:e5:78:ce:c5:ed:5b:9b:0e:91:
                    09:05:bf:87:5d:b8:c7:96:f6:f0:e4:93:c2:d7:2c:
                    2c:98:73:f4:63:f5:d6:cd:46:57:2d:b4:83:ac:17:
                    55:54:75:cc:af:b4:2e:c5:d2:ba:e2:19:17:ce:8a:
                    71:aa:63:63:bc:61:b2:34:9c:c1:25:48:9c:11:f5:
                    08:e8:4b:6f:2f:de:b5:78:dc:4a:0d:36:3b:e0:fd:
                    e9:67:0b:f4:60:6d:35:79:01:9e:2f:8c:43:d3:ed:
                    a2:99:02:26:64:ff:f0:fc:86:6d:48:37:62:a6:7f:
                    61:01:de:4d:32:15:6b:cc:cc:f4:32:a3:39:f2:b5:
                    d8:01:31:0e:73:b3:cc:54:ae:a5:85:ae:98:0f:17:
                    06:22:e9:13:4b:1d:82:ce:a3:6c:08:97:c2:b8:36:
                    78:f4:80:bb:c6:d5:76:e3:1e:b9:85:8f:bc:38:59:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:18:F6:33:CD:EF:3E:41:02:DD:CF:14:C3:1D:C9:CD:6B:02:92
            X509v3 Authority Key Identifier:
                keyid:DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:08:34:79:d7:ef:50:70:fe:8c:ba:86:cf:eb:f0:eb:4d:5b:
         0b:82:e0:bd:43:f2:68:0c:9d:74:a9:4d:0e:f8:2d:8e:4b:f8:
         78:9f:b0:96:2b:88:42:3f:5c:bd:d3:b0:43:e8:59:f6:43:75:
         b8:66:5c:42:e4:07:6e:26:90:34:af:75:92:f1:3e:d8:24:87:
         09:01:71:17:7d:71:d5:3a:13:80:61:9b:11:11:2b:48:a2:a8:
         7f:82:94:29:3c:4c:25:3d:75:89:0f:be:95:7a:b4:5b:a7:62:
         a3:f8:0b:67:c9:68:4d:b4:19:6f:83:20:d2:35:fe:df:db:3c:
         26:1f:8c:57:ad:d2:5e:33:d1:6d:33:be:9f:55:a3:2b:db:98:
         7f:78:57:72:da:29:58:ad:33:94:73:a2:99:29:55:da:cb:2d:
         8b:18:c7:f7:8b:1e:70:f7:46:1d:15:de:65:db:7d:c1:14:56:
         49:a7:98:f2:a5:08:d4:5d:d7:37:03:89:6f:52:0f:eb:b8:8f:
         fd:e7:d6:d3:ad:0c:98:c0:25:e6:3e:1a:55:42:03:7f:33:e8:
         47:66:eb:ae:d7:79:3a:f9:8a:3b:a8:8f:0f:6e:a3:71:b8:f7:
         52:85:bb:aa:bc:18:0d:08:ce:56:81:4a:30:00:ab:d7:20:75:
         d5:9b:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:21:30 2026 by rpki-client