Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa
File:                     3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          cSf/0efHP8YFp9emySI/q1cusG7OzuiX6W3CKBjXRU8=
Subject key identifier:   B2:AE:FD:17:9A:19:1D:C1:ED:05:28:3F:1B:4A:98:36:FA:A9:E1:64
Certificate issuer:       /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial:       2DB9D1037884F5975E5DF712D8A70AB92E676940
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa
Signing time:             Thu 26 Feb 2026 18:54:36 +0000
ROA not before:           Thu 26 Feb 2026 18:49:36 +0000
ROA not after:            Thu 25 Feb 2027 18:54:36 +0000
asID:                     262346
IP address blocks:        170.150.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:d1:03:78:84:f5:97:5e:5d:f7:12:d8:a7:0a:b9:2e:67:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
        Validity
            Not Before: Feb 26 18:49:36 2026 GMT
            Not After : Feb 25 18:54:36 2027 GMT
        Subject: CN=B2AEFD179A191DC1ED05283F1B4A9836FAA9E164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:34:66:ec:b3:b5:2b:31:fd:15:72:87:9d:
                    ce:53:29:b0:27:0a:ef:14:70:f2:cc:0e:c4:7e:87:
                    6e:25:57:6a:95:52:0d:bc:57:39:2d:2c:55:c5:65:
                    8b:c0:03:49:52:34:fc:2b:ca:42:a4:3e:ae:e9:5b:
                    c2:7c:7d:85:1d:c2:d6:28:b3:67:56:8f:4d:4a:4d:
                    de:06:b6:0c:20:4d:fb:27:51:cf:3a:1c:02:70:60:
                    de:33:30:96:ab:4d:81:e2:83:2c:d2:11:98:23:8f:
                    e0:7a:65:df:0e:62:27:08:cb:3c:ab:32:94:b4:c4:
                    54:6f:3a:45:e6:e0:a7:e8:ca:45:6e:b4:0c:16:ef:
                    d1:93:21:3f:52:31:a9:f5:44:b5:b8:40:31:f2:43:
                    ea:95:10:48:c1:62:a8:c8:80:65:ad:da:d5:a3:ca:
                    2e:38:f2:c0:14:1f:24:57:0a:35:c6:e5:e5:b2:e2:
                    a7:51:cd:4c:54:ce:23:85:f1:11:f1:3b:ed:7a:a1:
                    e5:48:85:24:9b:1b:77:ab:f2:be:be:1b:61:d9:f6:
                    41:9e:ca:91:a3:90:45:10:df:28:cd:74:33:eb:8a:
                    97:36:08:f1:b1:d3:ce:02:90:3c:3d:fe:73:f2:99:
                    dd:c7:a5:42:97:a0:39:78:8b:fe:00:c3:e6:ee:f3:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AE:FD:17:9A:19:1D:C1:ED:05:28:3F:1B:4A:98:36:FA:A9:E1:64
            X509v3 Authority Key Identifier:
                keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:a6:1e:97:69:89:1e:10:7c:01:33:e0:6d:cf:51:02:db:8c:
         3a:3f:7a:60:1b:08:12:37:90:9b:f5:6f:dc:ea:03:de:0e:84:
         bb:2f:a6:f9:90:29:f7:66:6b:5e:24:be:fa:cf:43:a1:3d:2a:
         76:ed:4d:6c:6d:af:eb:65:3e:64:ff:45:89:83:ac:72:29:8e:
         e1:a8:c1:b1:ed:3f:2c:c9:1b:e0:c2:50:bb:e2:12:5b:35:67:
         06:4d:68:e0:88:53:d8:bd:09:88:f8:8c:f1:d0:8d:8a:95:43:
         3c:24:eb:fd:b3:47:07:dc:84:a7:3e:18:28:a9:1f:76:40:61:
         ae:ea:cf:01:d6:76:ca:ac:a2:56:f3:92:9d:e2:d4:c3:9e:6e:
         34:9f:dc:62:69:1f:a1:37:45:46:a6:9b:0e:f6:b9:81:e3:b3:
         c1:c5:ef:4c:b7:7e:c3:d4:dd:cd:d1:ae:7e:c4:55:79:08:55:
         13:69:82:3a:95:fa:de:08:76:74:f7:5b:e8:78:e6:f0:26:d3:
         70:7e:fa:b2:e5:a7:89:f7:f8:40:c8:2f:51:84:92:ba:50:ab:
         f0:46:37:ee:9c:fe:52:b2:0a:05:ba:13:e7:81:30:1d:1d:68:
         6c:3b:5f:5e:09:ff:5a:ea:4a:71:51:be:36:fc:64:61:5e:01:
         05:88:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:34:37 2026 by rpki-client