Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa
File:                     3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa (raw, json)
Hash identifier:          PPThFjb215Dh8GkNycB6GNr/DRqB4AspiD+8kM6m+q4=
Subject key identifier:   AB:C6:F5:10:8B:9F:83:80:80:9E:BD:09:70:83:A5:71:D9:47:51:44
Certificate issuer:       /CN=83D0155F5069287D4AA91D06FC515095D8B510B8
Certificate serial:       737905730E7E1A338A9A0AE19B7ADA0FB4B58A82
Authority key identifier: 83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa
Signing time:             Thu 05 Feb 2026 14:50:50 +0000
ROA not before:           Thu 05 Feb 2026 14:45:50 +0000
ROA not after:            Thu 04 Feb 2027 14:50:50 +0000
asID:                     271023
IP address blocks:        191.37.170.124/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl
                          rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 23:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:79:05:73:0e:7e:1a:33:8a:9a:0a:e1:9b:7a:da:0f:b4:b5:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D0155F5069287D4AA91D06FC515095D8B510B8
        Validity
            Not Before: Feb  5 14:45:50 2026 GMT
            Not After : Feb  4 14:50:50 2027 GMT
        Subject: CN=ABC6F5108B9F8380809EBD097083A571D9475144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:11:da:c1:84:70:cc:58:15:40:2d:cc:40:
                    1e:cf:d7:8a:f1:4b:a5:9c:8b:cd:22:51:bc:e3:f0:
                    38:2b:7a:96:7e:f2:00:01:79:79:0e:97:a5:2a:a8:
                    aa:b1:03:07:9b:76:e8:b5:6a:35:b9:b0:96:66:0c:
                    14:29:17:6c:fd:24:58:d5:9c:a6:0f:b3:a4:00:a6:
                    ae:ad:a7:83:7a:02:7a:10:09:20:af:4c:d3:56:96:
                    63:3e:c5:3f:29:1a:0f:be:b7:a4:7c:02:1d:4f:55:
                    05:cc:42:18:14:88:98:ee:ae:d0:d5:e6:6a:bd:18:
                    fe:3d:89:4b:8a:d7:95:19:30:63:85:fc:21:60:ec:
                    c3:49:f9:05:96:f8:56:d7:c6:0b:ab:03:23:27:0c:
                    d5:87:01:3f:9c:58:b0:ff:5b:2d:a3:c3:2e:94:b6:
                    ab:ea:9a:34:bb:c7:86:5c:42:ac:3a:fe:6b:1c:41:
                    ae:e3:e4:14:44:a4:e1:20:15:ee:45:a3:52:88:d4:
                    64:fa:8d:37:bc:4a:8d:8a:c9:48:18:5e:48:1d:06:
                    74:cf:0f:cd:4f:6f:9f:79:22:a9:ec:e8:b7:81:a5:
                    cf:38:34:1c:95:63:15:65:ce:63:8a:0b:12:48:23:
                    56:89:36:f8:2e:84:bd:e8:3b:b9:63:f1:92:81:bb:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:F5:10:8B:9F:83:80:80:9E:BD:09:70:83:A5:71:D9:47:51:44
            X509v3 Authority Key Identifier:
                keyid:83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e3132342f33312d3331203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.170.124/31

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:78:52:a8:04:b7:67:13:bb:fa:44:df:88:e6:be:41:c8:
         80:b5:e8:b3:25:61:59:45:ae:b5:4c:5a:1b:c9:f8:60:1b:9d:
         ec:7f:14:e5:ce:39:49:8b:e6:18:9e:c6:32:b3:02:84:01:d1:
         81:38:1d:c7:f1:52:8e:71:48:c9:4d:e5:77:0e:8b:01:2c:d6:
         60:88:19:23:d7:f2:64:25:e7:f5:14:8a:6c:e6:17:4b:7a:f2:
         20:d6:07:b2:9b:06:4a:d3:f0:c3:c9:a8:f8:c2:6d:c4:24:d8:
         57:3f:0b:b6:fb:01:30:fb:84:46:bb:29:71:80:ce:3b:87:c9:
         b4:e1:d2:ff:41:1c:3f:0c:1e:1c:bf:a5:aa:ec:fa:ba:ba:ce:
         90:37:b1:f5:ba:7c:69:9c:de:48:7a:2d:26:1a:e8:d1:e5:85:
         f1:e7:2a:f3:f7:fd:c3:15:a6:6b:9f:8d:03:22:02:15:92:14:
         75:6e:f9:52:a8:3e:9f:25:b6:be:83:87:a6:d5:10:8f:64:2d:
         26:8b:45:52:eb:3e:ad:4f:01:3d:aa:1a:b1:b0:61:a7:05:71:
         0a:55:5b:04:db:b2:b7:46:26:38:59:16:32:f9:59:1c:07:e6:
         ba:17:e3:5e:c3:62:77:4e:ee:3c:f7:6a:cb:c9:68:e0:d8:f1:
         a8:6a:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:17:40 2026 by rpki-client