Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
File:                     3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          DUyfpqQS+wCb1aMTVA8zbQcKQWXbMMkUAtBVD97aviE=
Subject key identifier:   44:04:0A:37:6F:94:09:83:70:36:62:A5:21:36:3D:19:77:C9:23:37
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       62C0FDEDD008F925C16716286F40E1A5212D5584
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:50:02 +0000
ROA not before:           Mon 28 Sep 2026 17:45:02 +0000
ROA not after:            Mon 27 Sep 2027 17:50:02 +0000
asID:                     270814
IP address blocks:        170.247.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 07:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c0:fd:ed:d0:08:f9:25:c1:67:16:28:6f:40:e1:a5:21:2d:55:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:45:02 2026 GMT
            Not After : Sep 27 17:50:02 2027 GMT
        Subject: CN=44040A376F940983703662A521363D1977C92337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:d8:6e:22:ac:81:fd:e3:5f:58:c7:57:ce:
                    1c:f4:a1:99:b0:b7:9b:03:c5:a0:0d:e1:18:b9:1b:
                    b8:b1:fa:f1:3f:ff:ee:e0:5e:68:a9:a4:ed:ae:2e:
                    49:ad:a6:3e:53:e2:91:d8:a5:9c:a6:53:98:16:f0:
                    39:53:cd:b7:79:43:cc:33:6b:77:16:f3:a0:e1:58:
                    ec:dc:12:77:bf:9e:b9:6d:a6:d3:04:3d:6c:7b:e9:
                    a4:89:dd:a8:f6:a4:a0:a3:85:c6:8e:5e:04:ad:4a:
                    28:dc:57:d0:70:e9:d9:c7:10:89:00:79:9f:f7:e0:
                    6e:12:ac:39:54:80:79:c4:b7:6c:e0:1b:44:bb:4b:
                    9f:6e:f8:d4:cc:48:97:79:db:54:dc:1e:fa:bd:90:
                    95:02:fd:0e:3c:88:ea:95:2f:2f:05:e1:f2:8f:e4:
                    94:b8:d0:5f:99:ba:11:3c:09:f9:ac:ec:91:bb:39:
                    d4:10:ee:5f:2b:12:46:ce:fe:52:d8:5c:e9:62:c9:
                    55:2d:8e:f1:19:74:d8:de:26:88:0e:74:ce:83:97:
                    d1:3e:7d:f1:88:6c:34:2e:a0:22:a6:a1:d5:9f:a0:
                    e7:bb:48:4b:f7:42:39:3d:9b:b4:9d:c4:6c:64:2f:
                    41:07:74:83:91:66:bb:b6:75:a2:fc:83:c6:ac:75:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:0A:37:6F:94:09:83:70:36:62:A5:21:36:3D:19:77:C9:23:37
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:a9:0b:8a:d1:15:84:8d:41:a8:b9:26:bd:b9:dc:38:28:
         d5:07:ab:70:68:6f:62:eb:f7:a3:28:15:c1:82:40:3b:fc:e7:
         7d:39:33:0f:65:42:6d:65:50:1c:c4:75:0b:4b:00:08:cd:42:
         ea:c6:78:40:98:3d:13:7b:c9:16:55:83:1a:2e:2b:5c:4b:40:
         1e:d5:8c:64:94:67:db:cd:ab:60:7a:f6:38:06:78:fd:ec:2b:
         46:21:71:9a:d4:4d:de:f2:a9:71:79:f2:87:17:02:6f:b4:97:
         0b:2e:ea:a3:66:b5:a5:49:6d:65:c5:32:a2:95:4f:1c:64:d0:
         a3:88:08:05:6f:97:6a:07:dc:21:40:81:27:6c:7b:99:80:e5:
         c0:8c:66:4a:75:70:f7:55:94:6e:52:a2:fd:91:bc:4f:61:19:
         f1:ca:c8:2d:d4:79:2b:95:dc:14:6f:31:28:3b:91:68:cc:1d:
         11:2c:b7:4d:fe:2f:56:11:b3:a9:7c:26:5f:b3:02:e0:d8:9a:
         52:9c:b2:24:c0:06:1b:e4:7e:7e:20:1a:af:32:8d:a0:bc:f1:
         8a:b1:09:d4:56:6e:83:bc:3e:29:70:41:6b:f4:3e:b9:71:ed:
         bf:9a:e5:2d:36:7b:cd:58:d8:fc:49:a3:40:73:2b:ea:52:02:
         4d:c3:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:43:37 2026 by rpki-client