Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137302e38302e3231362e302f32322d3233203d3e203134383638.roa
File:                     3137302e38302e3231362e302f32322d3233203d3e203134383638.roa (raw, json)
Hash identifier:          JXuh1o1Np8tIX+FjXGIz8lr+1Vp2VgnXYMBLopOxGYo=
Subject key identifier:   90:30:54:D9:82:E8:0C:F5:2F:0F:38:8F:2E:70:38:81:28:C8:3C:BD
Certificate issuer:       /CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
Certificate serial:       53C3491D7D137C95D7E0DD899A74777E37D2F3E8
Authority key identifier: 1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137302e38302e3231362e302f32322d3233203d3e203134383638.roa
Signing time:             Mon 25 May 2026 17:35:33 +0000
ROA not before:           Mon 25 May 2026 17:30:33 +0000
ROA not after:            Mon 24 May 2027 17:35:33 +0000
asID:                     14868
IP address blocks:        170.80.216.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl
                          rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c3:49:1d:7d:13:7c:95:d7:e0:dd:89:9a:74:77:7e:37:d2:f3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
        Validity
            Not Before: May 25 17:30:33 2026 GMT
            Not After : May 24 17:35:33 2027 GMT
        Subject: CN=903054D982E80CF52F0F388F2E70388128C83CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:34:a8:1d:95:a3:91:26:cb:38:7b:7b:26:
                    db:eb:af:fa:5d:ed:5c:6d:17:34:56:a7:42:e0:66:
                    1c:c3:11:23:d3:21:d1:7e:9b:2e:03:38:c9:a9:d1:
                    a9:48:0d:89:b7:60:72:15:42:25:06:b8:1d:89:a3:
                    24:62:aa:ae:b1:90:90:08:28:a1:2c:a6:59:d7:de:
                    bf:66:8c:d4:20:21:5f:07:f2:ac:8b:f6:e2:26:16:
                    cb:b3:05:15:f3:c5:e7:5a:b8:dc:f1:36:94:3c:12:
                    df:f8:5a:91:e4:be:11:37:f4:34:32:ad:80:fc:97:
                    c2:ad:27:5c:b5:53:43:53:fb:84:6e:ec:0f:82:69:
                    87:95:8d:d8:52:47:ca:12:86:6a:8b:b2:cb:77:67:
                    d3:18:e6:04:7f:57:dc:29:82:66:b6:7e:15:61:6b:
                    26:b5:4f:28:06:1b:1c:f1:db:0e:6d:45:b8:29:61:
                    59:29:de:37:25:4b:ee:23:c6:6b:47:f1:e4:88:68:
                    63:aa:58:61:77:b1:a5:7e:ef:51:d5:79:4e:cd:69:
                    d4:07:7d:96:cb:05:d1:55:e9:22:c2:43:80:b9:19:
                    55:5c:f3:43:52:ee:24:69:fb:57:5f:e4:ec:ac:6c:
                    da:54:ed:d1:7f:df:6d:f9:9e:2a:bd:53:18:31:5d:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:30:54:D9:82:E8:0C:F5:2F:0F:38:8F:2E:70:38:81:28:C8:3C:BD
            X509v3 Authority Key Identifier:
                keyid:1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137302e38302e3231362e302f32322d3233203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:cc:fe:7d:b5:25:11:ee:ee:87:63:3f:20:06:8a:7b:13:c1:
         91:13:55:44:1d:78:04:18:4b:2b:53:1c:44:ca:03:ee:6c:62:
         58:a0:79:d8:16:c3:ae:b9:4f:54:c3:6c:40:28:c0:83:2d:46:
         eb:65:c9:07:81:c9:62:17:08:60:aa:f3:bb:ee:29:dd:50:ff:
         2a:bc:01:7a:34:68:8b:9f:9b:3f:3d:c7:4f:bd:b8:ee:75:e3:
         8e:86:0e:41:2a:73:f1:81:1c:27:41:ef:b8:6e:16:b5:e8:83:
         b6:47:c8:ee:20:f8:e2:f7:75:2e:f3:bd:e3:8d:1a:c0:d7:fc:
         3e:cd:ad:c9:0f:9b:de:2f:93:5e:c3:fc:26:7c:c8:0d:c9:45:
         23:ff:d9:55:ba:88:a1:3b:43:d6:4a:27:fb:a9:a7:d0:07:8f:
         92:1b:7c:fd:a8:a1:f5:40:96:bc:10:ac:61:40:f5:a1:07:81:
         85:79:09:e1:28:07:0f:d4:0b:6c:4e:99:e2:52:8c:6a:05:a3:
         bb:58:7d:20:39:73:7f:3b:98:70:46:2f:88:be:28:3e:f8:e7:
         13:b3:3c:d3:1b:5c:22:82:73:2e:df:31:ee:4a:58:68:fa:b2:
         b1:b3:ee:79:cd:5d:c9:5c:4a:10:8c:5a:de:44:2b:5d:5f:f6:
         5c:f0:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:29 2026 by rpki-client