Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          jOmxRKVBVLYE1Ex15DY+LrGk3Oyb+DJa9ko+jW5/phw=
Subject key identifier:   FF:C8:D9:3D:81:F9:81:3C:BC:AD:F7:DE:C2:ED:07:CF:75:E0:3A:00
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       290CE65B8323AFE0C420AB3F82FA12A52DC0F991
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
Signing time:             Fri 27 Feb 2026 01:08:29 +0000
ROA not before:           Fri 27 Feb 2026 01:03:29 +0000
ROA not after:            Fri 26 Feb 2027 01:08:29 +0000
asID:                     263913
IP address blocks:        170.231.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 23:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0c:e6:5b:83:23:af:e0:c4:20:ab:3f:82:fa:12:a5:2d:c0:f9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Feb 27 01:03:29 2026 GMT
            Not After : Feb 26 01:08:29 2027 GMT
        Subject: CN=FFC8D93D81F9813CBCADF7DEC2ED07CF75E03A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:69:70:c0:6b:4a:3b:a5:60:16:2a:03:8f:
                    46:90:03:a5:d3:39:30:cf:33:13:ba:9a:62:21:03:
                    db:3a:c5:bd:87:bf:79:00:c8:1b:55:6a:17:82:7c:
                    5f:19:b0:ed:c5:29:16:a3:bd:d3:44:3d:50:58:98:
                    72:a3:81:e7:9e:58:15:27:9b:9e:42:c4:6d:65:85:
                    f3:16:3c:a9:5c:5c:5e:a9:ca:bd:77:b3:86:8d:45:
                    0a:a6:55:1f:7b:c6:be:a9:31:eb:5a:c6:4f:2d:f9:
                    f8:05:f5:b8:96:74:08:f8:7f:43:8b:5a:54:a9:4c:
                    5e:64:ba:2a:82:b3:6b:1a:34:4e:34:b2:32:3b:a9:
                    5a:88:bb:58:2b:26:7d:ad:e2:79:e0:65:43:8c:be:
                    62:4f:1f:4b:05:f6:b9:21:70:05:73:ac:76:99:cf:
                    be:0c:18:b9:dc:36:15:fb:1f:25:ec:2f:ab:68:e6:
                    6c:52:b8:c3:80:26:fc:6c:80:53:b0:69:47:81:36:
                    71:9e:8b:bb:05:ce:e5:25:0e:85:78:5e:2a:67:7d:
                    3b:3f:64:58:ae:bc:12:72:b0:f7:b1:7c:7d:09:9b:
                    ba:de:42:79:56:78:4d:01:b5:98:1f:25:6e:13:de:
                    1a:f8:64:67:3a:1b:ed:86:11:ec:1a:06:23:a1:55:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C8:D9:3D:81:F9:81:3C:BC:AD:F7:DE:C2:ED:07:CF:75:E0:3A:00
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:89:69:88:3b:07:5a:d0:33:18:d7:a6:13:3a:2f:e4:e6:
         66:ef:e7:e6:df:e8:30:22:18:25:e4:3e:e6:5d:23:b7:b8:1d:
         eb:58:18:16:fc:64:2b:5e:cc:e8:69:dd:c8:b0:75:f1:c6:a7:
         46:f7:09:11:51:3e:87:56:9e:8c:a7:e6:99:6b:57:26:f0:1c:
         b5:f9:87:36:09:d8:a2:bc:f9:d0:ca:61:6c:59:8f:ce:a7:c4:
         e8:89:6d:b6:7b:f5:b6:1a:68:48:96:f3:90:67:af:5b:f8:14:
         d2:00:c3:a6:27:5d:e4:c1:e4:ed:d8:2b:42:46:3a:a6:fe:0d:
         80:36:25:c1:45:bc:30:c5:45:d0:b1:33:75:ea:b6:a6:53:46:
         2e:6e:b8:19:f2:fb:da:96:4f:e2:76:c7:94:59:7b:63:7f:1b:
         05:01:1b:1c:a2:38:7a:6d:92:0b:31:e0:b0:fd:72:c9:e9:07:
         ae:3d:23:8f:2b:8d:88:3a:43:73:e1:c3:c9:cf:3a:a6:16:50:
         88:88:2d:f6:52:11:14:0e:d6:54:55:6e:db:e1:7e:57:c6:c4:
         60:39:87:2e:37:59:6a:25:93:b2:84:fe:ad:3b:39:83:1b:e2:
         c4:1a:22:21:1e:72:6c:34:1b:94:0f:7e:e9:a9:0d:ea:73:72:
         ed:76:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:17:12 2026 by rpki-client