Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/3137302e37382e35362e302f32322d3234203d3e20323731373138.roa
File:                     3137302e37382e35362e302f32322d3234203d3e20323731373138.roa (raw, json)
Hash identifier:          f80l1/o5RPwF0YAAuWRN7jz1CxbpOdHlgbRDY2xS0Do=
Subject key identifier:   10:C9:F3:62:5A:CE:26:BF:AF:DC:0D:C3:FF:E2:B1:07:C6:7A:22:23
Certificate issuer:       /CN=4D0C26C9E5113ED8D6133843E7F0100CA43B99C9
Certificate serial:       2FCC3616914798DF670EFD6A6488A6056F799A13
Authority key identifier: 4D:0C:26:C9:E5:11:3E:D8:D6:13:38:43:E7:F0:10:0C:A4:3B:99:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/3137302e37382e35362e302f32322d3234203d3e20323731373138.roa
Signing time:             Mon 13 Apr 2026 18:28:04 +0000
ROA not before:           Mon 13 Apr 2026 18:23:04 +0000
ROA not after:            Mon 12 Apr 2027 18:28:04 +0000
asID:                     271718
IP address blocks:        170.78.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.crl
                          rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cc:36:16:91:47:98:df:67:0e:fd:6a:64:88:a6:05:6f:79:9a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0C26C9E5113ED8D6133843E7F0100CA43B99C9
        Validity
            Not Before: Apr 13 18:23:04 2026 GMT
            Not After : Apr 12 18:28:04 2027 GMT
        Subject: CN=10C9F3625ACE26BFAFDC0DC3FFE2B107C67A2223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:c4:cc:44:97:e0:4b:ac:da:b0:76:64:ad:
                    3d:78:ee:e7:f4:f0:8e:10:17:d1:67:50:ee:4b:0f:
                    16:3f:c7:c0:c1:9d:93:e4:f0:6c:cd:75:12:f0:9d:
                    05:be:8d:c5:80:fd:22:64:94:c5:b7:f9:ad:b8:a8:
                    00:f1:54:18:04:21:c6:6a:4a:a3:39:24:26:17:cb:
                    9a:0a:63:1e:e3:f0:7d:17:ad:c8:78:98:e2:81:2b:
                    1c:e1:17:78:77:e5:1d:71:f6:e4:b5:26:13:60:7f:
                    19:d4:a9:ed:a6:0b:76:c8:7e:fd:5d:38:bf:c7:c7:
                    2f:cb:9c:c3:54:3b:9b:9b:5f:39:e3:12:23:75:42:
                    51:42:1f:cf:a5:ca:e2:17:2c:8a:aa:47:c5:89:9f:
                    61:b5:2a:76:81:ae:5b:b3:35:9f:79:c5:f8:fa:69:
                    ce:80:b9:fe:cf:8a:49:3b:a9:8c:39:19:90:36:21:
                    6d:d0:a4:99:fc:08:31:5a:3c:c7:92:5f:a3:2f:ee:
                    3a:61:28:9a:51:94:4c:b9:51:f4:17:41:56:19:d6:
                    2a:93:0b:99:29:ca:c8:40:e7:3a:e8:e9:ae:38:46:
                    c3:41:c4:b1:f8:49:79:93:eb:8d:ec:f9:ad:f0:49:
                    32:0d:b7:1b:4e:76:39:63:67:ea:7d:61:a9:07:0f:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:F3:62:5A:CE:26:BF:AF:DC:0D:C3:FF:E2:B1:07:C6:7A:22:23
            X509v3 Authority Key Identifier:
                keyid:4D:0C:26:C9:E5:11:3E:D8:D6:13:38:43:E7:F0:10:0C:A4:3B:99:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D0C26C9E5113ED8D6133843E7F0100CA43B99C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/3137302e37382e35362e302f32322d3234203d3e20323731373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:4d:14:6f:4c:21:37:a9:03:50:da:d0:ce:92:3d:bd:57:dc:
         ac:00:c0:14:e3:fc:7e:3a:62:f6:8b:ad:25:2a:34:04:a5:1f:
         72:cb:e0:2a:01:12:33:3a:59:bd:f7:9e:07:e1:f3:5f:cf:50:
         40:ff:ba:50:0a:c6:ab:13:a3:cd:b1:5e:fc:f4:11:3d:74:0e:
         d9:c0:cb:08:5b:8e:67:3a:4b:e0:f1:90:67:0b:6b:84:cb:67:
         87:b2:83:83:41:b5:fa:c7:83:d7:56:69:28:aa:c9:33:61:62:
         e0:4b:c3:f9:fc:b5:4d:24:27:82:2d:aa:d5:f4:fd:e1:b1:c5:
         c0:24:3e:71:ca:09:41:78:62:5e:05:82:b0:50:c3:12:9e:45:
         9e:89:7e:87:5f:04:3e:41:15:b1:10:84:25:99:ed:38:99:0e:
         31:2e:f9:e9:f9:57:f8:64:b0:40:22:05:6d:a7:4b:18:24:ae:
         11:66:bf:f8:06:a3:4b:ac:10:39:ea:c2:f2:33:39:81:ce:45:
         0b:a1:45:0a:ad:a0:4f:a8:52:b6:a2:03:ac:6e:ed:4c:42:a4:
         3e:a6:ba:01:13:61:f3:0b:cd:d4:51:9c:5f:38:fc:ff:e6:bb:
         52:a1:98:fe:ea:fa:9a:66:02:4d:7d:f2:6b:3d:f7:31:52:b6:
         4e:66:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:28:07 2026 by rpki-client