Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          BAQLqfBD8VF7rIt66EzmTitFyM/+ibkOL+D3QKlZvmE=
Subject key identifier:   62:B7:7C:37:EF:82:B0:AD:D9:D3:29:3D:17:5E:2F:21:34:C3:C8:7F
Certificate issuer:       /CN=8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067
Certificate serial:       4A54B6B2F4F89B9D0C573AD19E68910B669D28E1
Authority key identifier: 8C:F4:67:76:C8:BE:3E:84:E5:4A:F9:C2:EA:BC:B6:FA:0B:F2:30:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time:             Fri 05 Jun 2026 18:26:17 +0000
ROA not before:           Fri 05 Jun 2026 18:21:17 +0000
ROA not after:            Fri 04 Jun 2027 18:26:17 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 07:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:b6:b2:f4:f8:9b:9d:0c:57:3a:d1:9e:68:91:0b:66:9d:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067
        Validity
            Not Before: Jun  5 18:21:17 2026 GMT
            Not After : Jun  4 18:26:17 2027 GMT
        Subject: CN=62B77C37EF82B0ADD9D3293D175E2F2134C3C87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:0e:8d:80:de:9a:dc:2b:fe:52:4d:83:44:
                    b5:e0:98:7e:57:6a:ce:37:af:77:63:a7:9a:1f:60:
                    65:45:0b:05:7b:34:52:58:44:c8:a9:1e:dd:bf:7d:
                    01:a4:2e:f3:47:09:28:33:49:8e:83:0c:c2:61:74:
                    53:2b:b4:94:fe:4e:7d:9f:67:a8:87:81:71:f6:5b:
                    d2:52:d2:58:db:7e:6f:48:7c:2c:69:ab:94:26:e3:
                    1d:95:1e:a5:d9:8b:41:e0:25:a6:4a:aa:8b:a2:d7:
                    d7:a4:7c:e5:93:22:8b:d2:ba:1a:b5:71:44:2e:1c:
                    46:f3:c3:b3:6b:5f:2e:4e:fe:e5:b7:45:c1:a4:17:
                    1a:7d:67:bb:99:fc:db:09:c1:99:42:51:45:f1:90:
                    fc:33:9a:a3:6a:73:8a:77:55:49:87:a5:8d:19:46:
                    9c:2d:ca:50:bd:c5:e6:5e:9d:80:1a:3f:8e:47:5a:
                    fe:e6:36:2b:ff:ef:0f:18:89:9f:52:77:d0:91:09:
                    1d:b1:81:20:2a:ca:a9:0c:ad:45:0f:72:0f:8a:f3:
                    b2:cb:e5:90:91:67:ce:36:0a:e6:1d:a7:0e:52:33:
                    8c:b4:e5:7f:46:85:dc:c2:00:b7:db:56:f7:d2:b2:
                    c6:82:1d:dd:2c:a6:0f:62:e8:d5:ff:0b:ea:08:9c:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:7C:37:EF:82:B0:AD:D9:D3:29:3D:17:5E:2F:21:34:C3:C8:7F
            X509v3 Authority Key Identifier:
                keyid:8C:F4:67:76:C8:BE:3E:84:E5:4A:F9:C2:EA:BC:B6:FA:0B:F2:30:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF46776C8BE3E84E54AF9C2EABCB6FA0BF23067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:fe:c0:19:1f:da:21:c8:18:7e:b2:79:76:31:22:ad:16:
         6f:bf:2a:ce:d7:dd:30:99:e3:a5:11:ce:fc:db:35:18:60:15:
         a6:89:25:6a:46:65:cc:3b:5a:da:16:c1:c4:49:0c:4f:ec:e6:
         26:21:d8:0d:13:d3:01:0d:d8:95:c3:c2:c0:08:a5:a0:c2:d1:
         95:d8:39:07:8f:cb:16:47:e8:66:ac:8f:da:0e:cf:69:96:43:
         e0:06:7c:ba:c4:04:c3:7f:b4:11:bf:be:33:fa:fa:69:23:4f:
         92:ba:9f:e6:3a:37:e8:67:f1:1a:d4:66:87:d5:3c:4d:77:95:
         8f:b7:f0:f7:88:2e:e0:8d:83:22:71:21:35:dc:e9:61:a5:19:
         12:95:d6:e6:2a:64:a9:fe:ee:60:39:2d:ef:e1:ef:54:6b:7a:
         9b:76:da:11:d9:f6:a6:a8:48:f9:56:3d:ff:de:4f:37:78:84:
         75:39:8d:7c:b5:32:37:61:7a:d0:d3:3e:68:68:38:b7:ee:01:
         32:21:fd:82:a4:48:e9:2e:46:ba:16:6d:5c:94:48:cc:4d:34:
         d7:10:9b:df:8c:0f:fa:93:e3:af:fb:b4:64:90:40:ad:54:d0:
         02:97:96:d8:12:6a:30:b9:a5:d9:b9:e1:59:70:82:06:28:8c:
         d5:03:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:27:33 2026 by rpki-client