Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa
File:                     3137302e38342e3232342e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          v6JUpWHiaGkwMvJB7/NpWfst478laZNjizhOwS79fB8=
Subject key identifier:   D0:8F:61:1E:65:29:7E:0E:2E:55:13:03:87:1F:BB:55:27:F1:A4:B6
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       0E847EEBD293C5C5B77FE4EBF7040390B299D68C
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:50:04 +0000
ROA not before:           Mon 13 Apr 2026 13:45:04 +0000
ROA not after:            Mon 12 Apr 2027 13:50:04 +0000
asID:                     52974
IP address blocks:        170.84.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 09:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:7e:eb:d2:93:c5:c5:b7:7f:e4:eb:f7:04:03:90:b2:99:d6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:45:04 2026 GMT
            Not After : Apr 12 13:50:04 2027 GMT
        Subject: CN=D08F611E65297E0E2E551303871FBB5527F1A4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:93:e4:2e:74:63:ba:d0:62:25:3b:84:fb:
                    63:8e:42:d0:13:e6:0f:75:48:fb:33:ac:2f:40:0a:
                    be:9b:4b:72:d9:c4:92:ce:c5:32:94:fc:45:bd:4c:
                    8f:87:ea:26:26:2b:07:5e:ee:4c:b1:af:36:38:ef:
                    5d:97:0d:04:6e:37:63:de:e2:44:40:5d:0b:34:65:
                    39:64:31:28:07:c4:69:00:fb:b4:ab:e5:e5:e0:c1:
                    05:0b:7e:eb:c7:34:2c:7f:e1:6f:a7:02:0a:39:dd:
                    6f:18:b6:53:87:27:ed:08:d3:e3:97:c1:71:25:f9:
                    29:65:c4:35:a4:e1:ea:f2:65:6f:4b:37:91:53:72:
                    17:01:98:04:5e:94:10:c3:25:dc:22:ed:f8:13:34:
                    e6:6c:5b:65:9c:52:7e:73:b7:c5:3b:05:1f:0d:1c:
                    07:67:ed:c9:f2:f8:3b:4a:d8:97:eb:4d:25:dc:a6:
                    eb:32:f5:44:2e:a7:f0:09:9f:72:eb:b3:6d:3b:87:
                    e9:46:8e:a4:61:83:04:ed:03:7a:71:4e:a7:a7:9f:
                    7a:6b:46:47:d7:2f:17:f5:f3:7f:14:b5:12:53:72:
                    0d:b2:39:80:99:22:f0:b4:13:23:e6:7b:8b:ab:c3:
                    bd:a0:e8:70:2f:3d:37:17:8e:08:2c:7d:80:a1:98:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:61:1E:65:29:7E:0E:2E:55:13:03:87:1F:BB:55:27:F1:A4:B6
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:41:7b:1b:26:ec:11:35:8b:16:e6:da:84:7d:1e:78:d6:
         13:7a:92:93:a2:9f:87:33:8e:d5:f7:4a:9b:89:92:ed:ab:40:
         a1:3f:4f:29:52:0a:ae:16:a8:9c:0a:03:0b:b2:38:83:fa:c3:
         6b:85:f9:1f:c4:de:76:cb:aa:65:94:1f:10:52:6d:a8:ad:40:
         92:72:bf:19:3d:9a:4d:93:af:f4:af:78:6a:aa:fc:ab:69:03:
         83:3c:c6:ed:5c:31:0b:7a:9a:8b:c4:8e:74:59:d8:0c:f4:23:
         1a:ea:61:79:8c:3a:82:95:e1:2f:c2:bd:18:96:a2:8e:28:57:
         0c:a3:eb:35:47:7b:db:28:7b:ed:bd:7a:99:ae:9a:f9:eb:a5:
         5c:61:98:01:60:f0:96:76:48:66:82:0e:32:7f:1e:dd:a0:f0:
         ff:01:77:5a:83:76:6d:44:9d:fd:d8:da:f0:db:77:68:b3:c5:
         c1:c7:a3:4c:4c:11:51:fa:26:39:aa:62:a9:96:05:aa:5b:47:
         de:6f:4b:49:52:17:8a:4b:c8:d0:ad:0c:3c:8f:6e:e4:e9:a7:
         ca:8c:b4:7f:b6:8f:90:ab:70:28:bb:86:39:b5:01:19:87:0b:
         94:c1:98:29:0f:a1:f9:6e:3a:0c:a9:8d:fb:7b:89:f0:18:b0:
         e9:1b:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:31:13 2026 by rpki-client