Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e3135302e3231362e302f32322d3234203d3e20323637303033.roa
File:                     3137302e3135302e3231362e302f32322d3234203d3e20323637303033.roa (raw, json)
Hash identifier:          FW49oqwN12sJ/2T25yCSaTmR/oYe/A2/xKRsPz4EUaM=
Subject key identifier:   91:24:36:EF:05:B9:48:79:D0:E3:23:D7:9F:72:DB:6C:5A:84:97:DE
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       331F2AECDC6A593E8B86EF611FD5547D59B0E487
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e3135302e3231362e302f32322d3234203d3e20323637303033.roa
Signing time:             Tue 15 Sep 2026 12:22:38 +0000
ROA not before:           Tue 15 Sep 2026 12:17:38 +0000
ROA not after:            Tue 14 Sep 2027 12:22:38 +0000
asID:                     267003
IP address blocks:        170.150.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1f:2a:ec:dc:6a:59:3e:8b:86:ef:61:1f:d5:54:7d:59:b0:e4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Sep 15 12:17:38 2026 GMT
            Not After : Sep 14 12:22:38 2027 GMT
        Subject: CN=912436EF05B94879D0E323D79F72DB6C5A8497DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:13:31:3c:c8:86:fd:4e:99:f5:f0:6b:d7:
                    8a:9c:8d:26:55:ef:e9:29:c2:6b:58:1f:d8:ba:a6:
                    5a:9b:e7:fd:e9:75:1f:13:dd:b6:e0:d8:39:57:23:
                    65:56:19:e5:a7:25:d2:8a:5b:1b:6a:75:75:b6:f0:
                    cf:3a:20:46:70:4e:91:62:35:48:e7:0d:2c:30:1d:
                    30:6d:ed:69:90:8a:52:2d:0e:54:43:5b:cf:fe:9b:
                    91:2e:15:69:a4:6e:a5:96:41:16:d9:5e:31:81:b5:
                    28:94:7c:aa:1c:4c:c3:f1:c0:37:6e:0d:9b:a0:25:
                    54:d9:db:15:70:55:d3:e7:1b:13:67:c4:85:b1:0a:
                    e8:91:b6:e6:07:e1:3b:ba:8e:58:64:04:dc:e3:b1:
                    d2:e5:40:65:50:19:68:f2:fa:82:01:4b:e3:fc:b0:
                    fd:21:dd:7d:d0:13:f0:ae:f9:20:e8:2e:07:33:e3:
                    c0:e4:2e:68:4f:af:f4:4f:e4:67:a7:8f:f0:6e:ae:
                    f6:ff:65:07:71:b6:85:84:20:94:a2:75:f5:17:f1:
                    34:d7:87:51:3d:35:24:d6:09:de:7e:fc:d0:37:f8:
                    e2:2e:d6:dd:4f:81:5f:0f:94:5c:26:4c:78:13:94:
                    f1:b0:0d:b1:11:86:ba:1c:be:16:3c:43:5e:20:68:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:36:EF:05:B9:48:79:D0:E3:23:D7:9F:72:DB:6C:5A:84:97:DE
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e3135302e3231362e302f32322d3234203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:87:96:9e:c8:2b:65:2e:cd:29:1c:78:a5:fd:48:25:e0:33:
         78:c0:04:7d:ec:c2:19:5d:ef:9b:bb:fd:e5:69:f4:80:b0:1c:
         15:46:95:7b:ac:a6:eb:89:31:c8:42:a6:bf:56:ab:26:a7:84:
         fa:78:bf:25:ac:ee:10:f6:05:d1:ac:6f:e3:51:66:39:6a:c3:
         b3:19:4d:40:c1:fa:66:c2:83:5c:f2:38:a2:9f:42:87:af:68:
         07:a5:99:3f:4c:c6:29:61:3f:cc:3c:1a:19:98:13:6a:4f:93:
         c9:ff:d0:43:3c:93:2f:26:38:47:e2:d0:bd:69:d5:13:a6:50:
         ee:c8:79:0f:bb:28:3f:f8:a2:24:01:84:d3:8b:8e:b0:1a:e3:
         a1:74:b7:4e:8d:ed:e7:a8:70:2e:69:db:1d:6c:39:cd:8e:3b:
         16:51:0c:26:60:05:ca:9f:1b:82:aa:8e:b6:2b:d5:ed:e9:a8:
         fb:3c:15:7c:b8:7b:e9:2b:5b:dc:71:2b:9d:96:33:cc:54:52:
         f5:07:4f:dd:4f:3e:8c:6c:b7:7b:7d:e5:26:16:13:22:a5:36:
         c9:ac:0e:6e:fe:b7:3f:28:df:1f:55:b3:2a:76:fe:e4:d1:30:
         d7:5c:c2:a4:54:41:1a:08:51:69:2f:7e:4a:92:ee:65:c4:be:
         04:6d:73:83
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMx8q7NxqWT6Lhu9hH9VUfVmw5IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNjA5MTUxMjE3MzhaFw0yNzA5MTQxMjIyMzhaMDMxMTAvBgNV
BAMTKDkxMjQzNkVGMDVCOTQ4NzlEMEUzMjNENzlGNzJEQjZDNUE4NDk3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1hMxPMiG/U6Z9fBr14qcjSZV
7+kpwmtYH9i6plqb5/3pdR8T3bbg2DlXI2VWGeWnJdKKWxtqdXW28M86IEZwTpFi
NUjnDSwwHTBt7WmQilItDlRDW8/+m5EuFWmkbqWWQRbZXjGBtSiUfKocTMPxwDdu
DZugJVTZ2xVwVdPnGxNnxIWxCuiRtuYH4Tu6jlhkBNzjsdLlQGVQGWjy+oIBS+P8
sP0h3X3QE/Cu+SDoLgcz48DkLmhPr/RP5Genj/Burvb/ZQdxtoWEIJSidfUX8TTX
h1E9NSTWCd5+/NA3+OIu1t1PgV8PlFwmTHgTlPGwDbERhrocvhY8Q14gaNnRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkSQ27wW5SHnQ4yPXn3LbbFqEl94wHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzMwMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqW2DANBgkqhkiG9w0BAQsFAAOCAQEAJ4eW
nsgrZS7NKRx4pf1IJeAzeMAEfezCGV3vm7v95Wn0gLAcFUaVe6ym64kxyEKmv1ar
JqeE+ni/JazuEPYF0axv41FmOWrDsxlNQMH6ZsKDXPI4op9Ch69oB6WZP0zGKWE/
zDwaGZgTak+Tyf/QQzyTLyY4R+LQvWnVE6ZQ7sh5D7soP/iiJAGE04uOsBrjoXS3
To3t56hwLmnbHWw5zY47FlEMJmAFyp8bgqqOtivV7emo+zwVfLh76Stb3HErnZYz
zFRS9QdP3U8+jGy3e33lJhYTIqU2yawObv63PyjfH1WzKnb+5NEw11zCpFRBGghR
aS9+SpLuZcS+BG1zgw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:28:34 2026 by rpki-client