Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/3137302e3234342e37362e302f32322d3332203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32322d3332203d3e20323636353035.roa (raw, json)
Hash identifier:          2bR47VnBOGMIqUL2RynoqpEznbLtOfXh5xrtMwoqXws=
Subject key identifier:   82:6B:DC:BF:59:D0:96:5B:67:8A:9B:E0:E0:6F:68:20:A3:6C:51:8D
Certificate issuer:       /CN=A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2
Certificate serial:       4F3C069FF0A1D48769FE2BE0855683F7B539ABBC
Authority key identifier: A6:F5:F3:D6:9C:3E:4F:C1:AE:E5:9E:BF:C2:2E:56:1B:72:98:37:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/3137302e3234342e37362e302f32322d3332203d3e20323636353035.roa
Signing time:             Mon 01 Jun 2026 20:39:48 +0000
ROA not before:           Mon 01 Jun 2026 20:34:48 +0000
ROA not after:            Mon 31 May 2027 20:39:48 +0000
asID:                     266505
IP address blocks:        170.244.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3c:06:9f:f0:a1:d4:87:69:fe:2b:e0:85:56:83:f7:b5:39:ab:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2
        Validity
            Not Before: Jun  1 20:34:48 2026 GMT
            Not After : May 31 20:39:48 2027 GMT
        Subject: CN=826BDCBF59D0965B678A9BE0E06F6820A36C518D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:60:67:4c:29:41:81:83:bf:33:22:74:ab:
                    92:d0:5a:d2:ec:de:13:5e:12:82:56:0e:bc:0f:19:
                    54:b5:bb:50:df:6f:4d:6a:1b:86:3a:b8:87:c2:ac:
                    3a:4f:15:fc:17:79:de:94:14:91:9e:8b:95:dc:d1:
                    a3:7b:d5:17:0b:3d:48:73:b7:ea:af:fe:ce:84:38:
                    5b:ef:4e:60:4b:79:4c:1a:db:9b:ea:a4:3b:c6:3c:
                    9d:97:18:bb:a3:ba:48:81:15:6f:b3:e4:b9:e0:5e:
                    75:7b:45:cd:6f:52:37:59:83:b7:4b:f8:3c:79:7c:
                    f7:98:65:ad:88:01:78:6c:41:a4:5a:3d:55:07:4d:
                    ee:a2:79:31:36:8b:52:a6:cb:80:ac:fb:55:e8:3d:
                    00:31:27:de:eb:d5:f2:07:27:dd:0a:90:ae:19:b4:
                    d8:63:74:de:21:77:43:37:1c:91:f6:9d:90:05:a6:
                    3f:d0:1d:78:bf:ef:39:be:aa:ef:68:75:fc:25:75:
                    36:6a:b2:a2:e4:b6:e0:5a:7b:a7:01:6e:7f:81:4c:
                    f2:df:ce:8a:1e:71:2d:fb:7a:05:d5:eb:eb:28:a2:
                    a4:ac:7b:1b:e8:68:ae:77:10:04:76:17:1a:e2:b7:
                    29:c7:30:d3:ff:4e:da:20:10:39:9e:71:60:cb:45:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:DC:BF:59:D0:96:5B:67:8A:9B:E0:E0:6F:68:20:A3:6C:51:8D
            X509v3 Authority Key Identifier:
                keyid:A6:F5:F3:D6:9C:3E:4F:C1:AE:E5:9E:BF:C2:2E:56:1B:72:98:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6F5F3D69C3E4FC1AEE59EBFC22E561B729837B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/0/3137302e3234342e37362e302f32322d3332203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:3e:78:3e:08:10:9d:73:d7:9b:8d:07:f6:ae:14:e9:31:
         02:a2:cf:b0:79:1b:2c:b3:ab:64:da:ed:18:1a:af:e6:ce:d1:
         f4:59:51:2f:ee:89:8a:31:3c:30:6f:05:21:49:b9:91:4a:cc:
         cd:b5:55:17:ff:b8:7f:97:bb:5f:f4:e9:49:fd:c6:ca:ee:da:
         a0:32:0c:8d:72:a1:3d:7f:bb:0b:2c:3a:19:f0:29:08:0f:8f:
         a0:84:a2:21:4e:fb:c6:e3:69:bb:0b:fa:36:42:89:e5:49:83:
         21:87:9c:26:26:14:3c:d3:f1:3a:fb:ce:4d:5e:7f:74:0d:8e:
         d6:96:78:40:66:ad:35:8d:2e:b3:cb:bb:fd:a4:b3:00:dd:6c:
         50:86:dd:6f:58:6c:83:0e:66:c1:8a:69:90:8f:aa:5a:ca:4b:
         f3:58:a0:83:8b:75:6c:40:f6:8a:63:41:ea:c0:b9:9a:02:e4:
         21:26:d7:64:3a:24:e2:70:cb:3d:3f:32:13:e0:0d:df:c7:14:
         6e:f4:96:1d:88:8e:c1:8d:38:d8:ef:80:ae:93:a8:df:4c:af:
         93:ee:48:aa:b2:12:2e:bf:22:8b:cc:08:36:91:a0:69:8d:71:
         4f:82:46:0d:6b:74:cc:4e:ed:9e:b8:a4:fd:41:6d:eb:53:7d:
         c6:73:ba:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTzwGn/Ch1Idp/ivghVaD97U5q7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZGNUYzRDY5QzNFNEZDMUFFRTU5RUJGQzIyRTU2MUI3
Mjk4MzdCMjAeFw0yNjA2MDEyMDM0NDhaFw0yNzA1MzEyMDM5NDhaMDMxMTAvBgNV
BAMTKDgyNkJEQ0JGNTlEMDk2NUI2NzhBOUJFMEUwNkY2ODIwQTM2QzUxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnGBnTClBgYO/MyJ0q5LQWtLs
3hNeEoJWDrwPGVS1u1Dfb01qG4Y6uIfCrDpPFfwXed6UFJGei5Xc0aN71RcLPUhz
t+qv/s6EOFvvTmBLeUwa25vqpDvGPJ2XGLujukiBFW+z5LngXnV7Rc1vUjdZg7dL
+Dx5fPeYZa2IAXhsQaRaPVUHTe6ieTE2i1Kmy4Cs+1XoPQAxJ97r1fIHJ90KkK4Z
tNhjdN4hd0M3HJH2nZAFpj/QHXi/7zm+qu9odfwldTZqsqLktuBae6cBbn+BTPLf
zooecS37egXV6+sooqSsexvoaK53EAR2FxritynHMNP/TtogEDmecWDLRQPJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgmvcv1nQlltnipvg4G9oIKNsUY0wHwYDVR0j
BBgwFoAUpvXz1pw+T8Gu5Z6/wi5WG3KYN7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2
RGIvMC9BNkY1RjNENjlDM0U0RkMxQUVFNTlFQkZDMjJFNTYxQjcyOTgzN0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2RjVGM0Q2OUMzRTRGQzFB
RUU1OUVCRkMyMkU1NjFCNzI5ODM3QjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E3QVRVZTRSRDUxWXFMeXZDR3VIU3ZTNjNpQXRyclhhRXhKalJqcnY5NkRiLzAv
MzEzNzMwMmUzMjM0MzQyZTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9EwwDQYJKoZIhvcNAQELBQADggEBAEJ/Png+
CBCdc9ebjQf2rhTpMQKiz7B5Gyyzq2Ta7Rgar+bO0fRZUS/uiYoxPDBvBSFJuZFK
zM21VRf/uH+Xu1/06Un9xsru2qAyDI1yoT1/uwssOhnwKQgPj6CEoiFO+8bjabsL
+jZCieVJgyGHnCYmFDzT8Tr7zk1ef3QNjtaWeEBmrTWNLrPLu/2kswDdbFCG3W9Y
bIMOZsGKaZCPqlrKS/NYoIOLdWxA9opjQerAuZoC5CEm12Q6JOJwyz0/MhPgDd/H
FG70lh2IjsGNONjvgK6TqN9Mr5PuSKqyEi6/IovMCDaRoGmNcU+CRg1rdMxO7Z64
pP1BbetTfcZzukM=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:13 2026 by rpki-client