Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa
File:                     3137302e38342e37362e302f32322d3234203d3e20323634393939.roa (raw, json)
Hash identifier:          QIHP/tP5EjO3i8b76AzYGEc6z7o26Iy6zc06dO4wSWY=
Subject key identifier:   EB:12:34:F7:0D:20:4E:7C:11:0D:BC:8A:9D:5F:04:89:E3:13:7F:71
Certificate issuer:       /CN=96EC498898251C1501401F3A18522521C4648127
Certificate serial:       15B8FE74A439F6BC14406C17C2D607FD52698915
Authority key identifier: 96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa
Signing time:             Tue 08 Jul 2025 22:31:11 +0000
ROA not before:           Tue 08 Jul 2025 22:26:11 +0000
ROA not after:            Tue 07 Jul 2026 22:31:11 +0000
asID:                     264999
IP address blocks:        170.84.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b8:fe:74:a4:39:f6:bc:14:40:6c:17:c2:d6:07:fd:52:69:89:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC498898251C1501401F3A18522521C4648127
        Validity
            Not Before: Jul  8 22:26:11 2025 GMT
            Not After : Jul  7 22:31:11 2026 GMT
        Subject: CN=EB1234F70D204E7C110DBC8A9D5F0489E3137F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:c9:e6:ac:3a:c6:62:78:91:90:5e:77:31:
                    ab:f6:94:38:5e:68:76:1f:c7:67:cc:95:6f:aa:68:
                    f4:a5:1b:5d:90:d6:f2:45:15:4c:0b:5f:76:dd:38:
                    1e:92:40:5e:cf:84:e7:8e:c5:59:34:ff:de:06:99:
                    70:c8:0a:07:c4:f3:91:ba:bf:6a:05:e8:02:3e:6d:
                    b6:be:a5:4b:88:99:bb:bf:e5:fe:0f:99:bb:c4:ae:
                    0a:c5:0c:26:14:53:a4:c6:ba:32:5d:60:0d:cf:a9:
                    0a:5b:f6:b8:2a:a6:28:e8:a1:f1:55:ad:c3:c7:9c:
                    08:92:d2:32:a6:03:53:2f:6a:9a:0f:35:16:a3:23:
                    d7:27:28:8e:50:6d:1f:46:0e:ac:b4:d0:97:d2:cc:
                    5a:3a:23:ef:a5:40:2c:3a:25:fb:26:29:6b:b0:66:
                    05:a3:f3:5f:28:64:49:3f:fc:44:38:48:97:28:24:
                    24:27:1b:42:e7:ba:d0:07:50:f0:d1:98:90:67:1a:
                    4e:09:e2:65:d6:13:2b:64:83:62:29:ae:50:bf:e0:
                    8a:18:8a:dd:c1:81:cd:71:78:25:3a:f6:5a:65:0d:
                    8f:e0:83:dc:f7:70:ec:ef:3e:56:f1:00:64:db:df:
                    c0:97:b2:a3:80:52:95:67:67:be:4c:4d:d0:fc:cf:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:12:34:F7:0D:20:4E:7C:11:0D:BC:8A:9D:5F:04:89:E3:13:7F:71
            X509v3 Authority Key Identifier:
                keyid:96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3234203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:93:da:a3:41:7d:a9:25:5f:b2:78:c9:dc:06:f7:67:44:
         11:4f:72:04:ed:2d:43:c6:d4:d6:93:f5:10:b3:48:1d:86:72:
         25:98:09:ac:a5:36:59:f3:ce:48:65:26:38:ac:ef:84:f7:58:
         1e:a4:18:04:9e:73:4b:c0:b2:4f:ac:44:69:1e:65:2f:15:27:
         9c:27:97:a0:c3:c2:81:78:d6:3d:82:7d:3b:af:c1:05:d8:c4:
         32:78:4f:43:b5:5b:1b:4a:6a:3a:c5:30:c4:36:31:31:5f:2d:
         37:23:10:85:9f:8c:68:ae:ab:81:0c:ac:ec:a7:8d:c0:61:cb:
         a8:56:a5:00:55:ca:45:ea:92:41:17:0f:af:c0:58:ab:be:f3:
         9d:65:22:1e:d5:09:16:18:c2:fd:d4:5c:84:4a:dc:e0:30:66:
         cf:1a:b7:e2:19:e1:49:72:de:4f:98:4e:d3:33:8f:83:11:f3:
         17:e1:48:29:24:9f:41:b1:1b:31:f3:6f:76:95:25:a9:8a:6c:
         c8:a1:4b:ec:d7:33:09:16:03:77:28:47:ab:fb:f8:ee:46:d9:
         14:26:5c:29:c5:9e:01:55:87:19:d3:da:46:7b:83:1e:61:00:
         d0:a6:d6:15:db:bb:18:d1:6e:57:fb:7c:ff:48:03:86:55:85:
         31:2b:08:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFbj+dKQ59rwUQGwXwtYH/VJpiRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFQzQ5ODg5ODI1MUMxNTAxNDAxRjNBMTg1MjI1MjFD
NDY0ODEyNzAeFw0yNTA3MDgyMjI2MTFaFw0yNjA3MDcyMjMxMTFaMDMxMTAvBgNV
BAMTKEVCMTIzNEY3MEQyMDRFN0MxMTBEQkM4QTlENUYwNDg5RTMxMzdGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RcnmrDrGYniRkF53Mav2lDhe
aHYfx2fMlW+qaPSlG12Q1vJFFUwLX3bdOB6SQF7PhOeOxVk0/94GmXDICgfE85G6
v2oF6AI+bba+pUuImbu/5f4PmbvErgrFDCYUU6TGujJdYA3PqQpb9rgqpijoofFV
rcPHnAiS0jKmA1MvapoPNRajI9cnKI5QbR9GDqy00JfSzFo6I++lQCw6JfsmKWuw
ZgWj818oZEk//EQ4SJcoJCQnG0LnutAHUPDRmJBnGk4J4mXWEytkg2IprlC/4IoY
it3Bgc1xeCU69lplDY/gg9z3cOzvPlbxAGTb38CXsqOAUpVnZ75MTdD8z9aDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6xI09w0gTnwRDbyKnV8EieMTf3EwHwYDVR0j
BBgwFoAUluxJiJglHBUBQB86GFIlIcRkgScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC85NkVDNDk4ODk4MjUxQzE1MDE0MDFGM0ExODUyMjUyMUM0NjQ4MTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RUM0OTg4OTgyNTFDMTUw
MTQwMUYzQTE4NTIyNTIxQzQ2NDgxMjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VnMWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAv
MzEzNzMwMmUzODM0MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlRMMA0GCSqGSIb3DQEBCwUAA4IBAQAWa5Pao0F9
qSVfsnjJ3Ab3Z0QRT3IE7S1DxtTWk/UQs0gdhnIlmAmspTZZ885IZSY4rO+E91ge
pBgEnnNLwLJPrERpHmUvFSecJ5egw8KBeNY9gn07r8EF2MQyeE9DtVsbSmo6xTDE
NjExXy03IxCFn4xorquBDKzsp43AYcuoVqUAVcpF6pJBFw+vwFirvvOdZSIe1QkW
GML91FyEStzgMGbPGrfiGeFJct5PmE7TM4+DEfMX4UgpJJ9BsRsx8292lSWpimzI
oUvs1zMJFgN3KEer+/juRtkUJlwpxZ4BVYcZ09pGe4MeYQDQptYV27sY0W5X+3z/
SAOGVYUxKwgC
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:57 2025 by rpki-client