Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
File:                     3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          znIhHWc/ZuPIwI0seffpGslP3DQV4vbtd2xkIEJvHbo=
Subject key identifier:   A3:3F:4A:EF:FD:1B:AB:07:FB:D3:24:18:98:B9:EF:0B:8A:27:0F:09
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       18E040FCF53A6717FDE7885517F6263A3C840DAB
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
Signing time:             Tue 09 Jun 2026 19:00:00 +0000
ROA not before:           Tue 09 Jun 2026 18:55:00 +0000
ROA not after:            Wed 09 Jun 2027 19:00:00 +0000
asID:                     262813
IP address blocks:        177.70.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e0:40:fc:f5:3a:67:17:fd:e7:88:55:17:f6:26:3a:3c:84:0d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Jun  9 18:55:00 2026 GMT
            Not After : Jun  9 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:2c:af:23:a1:a7:16:31:cf:47:18:45:da:
                    81:61:39:a4:19:d6:8b:81:4c:ff:68:9a:66:3d:df:
                    5a:6b:65:d8:6c:31:fa:91:6c:20:6e:0d:48:7d:3f:
                    89:0b:a0:72:09:7b:d1:a3:97:d2:fa:bc:fc:9b:7c:
                    d0:b7:70:f9:a4:7e:9c:3c:6b:0a:c3:e8:ed:24:30:
                    f3:a9:9b:cb:ea:e2:77:6c:ed:96:89:80:7c:33:3a:
                    9b:1a:6d:16:7c:f1:93:93:e4:42:2f:c8:79:ad:4c:
                    f2:82:41:b8:67:08:72:a5:66:20:f8:18:8e:d2:2f:
                    ae:77:52:23:0b:a7:71:15:4a:8a:6c:d4:91:07:e0:
                    1b:4c:71:80:af:5e:79:bf:e6:32:74:6b:64:5d:1d:
                    df:dc:7e:b4:09:72:22:65:0f:cf:68:17:32:4e:f2:
                    fb:9e:d8:4e:c2:34:4f:26:42:95:aa:0c:af:77:07:
                    3c:8b:87:c6:f6:d4:d1:8d:12:65:e2:a9:b3:b5:3d:
                    e6:4b:ad:4b:24:cf:ed:2a:21:25:0a:6a:53:bd:92:
                    91:f1:46:04:99:21:66:5b:92:a3:0f:15:60:7a:4e:
                    32:4e:5c:06:a8:e7:d2:37:f2:39:2c:f9:3f:b0:59:
                    13:94:72:68:22:93:ce:9a:b5:77:68:52:db:a6:e7:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:4A:EF:FD:1B:AB:07:FB:D3:24:18:98:B9:EF:0B:8A:27:0F:09
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:7f:c7:fb:f2:30:bd:7d:4b:96:e7:00:48:04:b7:da:55:38:
         23:cd:3e:b1:a2:f1:6d:ac:b7:f4:3f:d4:5b:b2:ef:ed:78:2a:
         b1:01:f4:2f:80:07:d2:1a:a9:ef:82:bc:37:27:e9:d0:71:58:
         42:22:33:16:1a:3a:9d:27:74:84:32:22:0a:c0:75:b1:f7:c0:
         34:a2:9e:56:af:e4:3e:d7:2a:cf:3c:36:ab:7a:a4:3e:32:ce:
         c3:08:ed:1b:b8:65:4c:dc:91:29:21:d1:fe:41:80:4b:83:6d:
         03:18:30:c4:91:8a:82:2c:11:47:d3:1b:0d:15:90:ec:79:82:
         11:fb:b6:74:56:72:d4:24:d1:57:57:7a:e0:83:87:14:6a:4e:
         07:f5:54:f2:cf:e5:23:09:48:d8:5a:f6:4d:4e:4c:2c:57:4d:
         43:50:5d:f4:56:7e:99:6a:b0:af:01:ae:9f:fb:0d:1d:11:b6:
         56:6b:fa:78:28:5f:cb:85:9b:98:2f:b4:f9:e9:cd:7d:28:7f:
         7f:f5:70:f3:9d:fd:33:18:17:9d:39:b5:e9:c8:8e:e8:30:d6:
         10:2c:30:20:49:f3:a6:68:ad:19:d2:ff:1a:82:40:bb:8a:2f:
         79:e3:21:89:bd:c4:93:88:eb:9f:3d:3a:5a:65:95:e8:6a:0d:
         7f:59:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:14 2026 by rpki-client