Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa
File:                     3137302e37392e35362e302f32322d3332203d3e203532393536.roa (raw, json)
Hash identifier:          98rLAjiX7Kh8lKDqXBdgqSTm+YzQRJ6389rme41d9ns=
Subject key identifier:   F8:AE:B1:7C:C5:9A:C2:B0:87:58:1A:11:51:90:6F:33:00:F1:65:4E
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       2FEB4B7884F5BF74C2346F26E9F4BA0C0AAA12C0
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa
Signing time:             Wed 06 May 2026 16:07:35 +0000
ROA not before:           Wed 06 May 2026 16:02:35 +0000
ROA not after:            Wed 05 May 2027 16:07:35 +0000
asID:                     52956
IP address blocks:        170.79.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:4b:78:84:f5:bf:74:c2:34:6f:26:e9:f4:ba:0c:0a:aa:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: May  6 16:02:35 2026 GMT
            Not After : May  5 16:07:35 2027 GMT
        Subject: CN=F8AEB17CC59AC2B087581A1151906F3300F1654E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:97:0c:7e:ef:eb:fa:bf:ed:51:29:46:ca:
                    62:bd:b5:84:cf:2b:8c:01:23:95:a3:6a:3d:d0:50:
                    95:28:b8:05:55:6a:06:64:cf:2d:ce:de:65:a3:da:
                    bb:46:a7:1d:1b:b1:15:0c:ef:d9:c5:49:b1:3b:f1:
                    05:fe:a2:e3:6c:42:36:bc:96:8e:55:13:5f:ed:45:
                    bb:5d:79:4b:9f:2d:a7:65:20:7a:6c:40:f7:03:d2:
                    12:a4:53:47:cc:44:5a:b3:80:38:71:3d:88:4f:5a:
                    fd:86:24:29:d1:d9:9c:f0:01:cf:c7:12:da:e4:5c:
                    72:25:38:c5:d2:55:0e:21:6c:ab:9e:73:bd:d0:44:
                    d8:aa:28:8e:fe:b9:66:be:4c:03:73:ea:02:db:33:
                    bf:56:d8:18:6a:2e:43:be:57:9b:be:5c:fa:d8:56:
                    08:1e:8a:1c:32:8d:99:68:7a:b6:c5:dd:9b:05:3f:
                    fb:c2:04:2c:de:3e:89:1d:23:bb:2f:86:74:85:87:
                    30:5a:cb:9d:85:2f:ba:7f:13:e7:df:38:30:00:58:
                    11:40:6e:ef:cd:15:bc:be:56:bd:df:ab:67:00:91:
                    73:03:61:2d:a7:6a:2a:53:a5:9e:34:10:1c:5f:b1:
                    07:ed:72:ac:8e:c3:5b:0f:bd:13:4d:0c:2d:be:6d:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AE:B1:7C:C5:9A:C2:B0:87:58:1A:11:51:90:6F:33:00:F1:65:4E
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137302e37392e35362e302f32322d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:8b:5d:31:7a:da:e9:76:15:8e:25:58:d6:6a:85:d4:ee:
         4a:fa:13:71:95:55:80:ec:0c:04:e8:30:8f:28:aa:9b:84:df:
         69:5b:8c:03:61:7e:c9:59:43:2a:c4:f7:eb:bc:b6:df:49:fd:
         43:51:ff:4f:83:b5:af:87:89:bc:17:61:87:f8:ed:ab:4d:35:
         d3:f6:4a:c0:3c:53:71:eb:3c:da:60:cc:dc:5d:f1:b9:cc:f1:
         f6:0e:02:3e:aa:22:58:d5:ed:e7:5a:9a:4a:bc:86:f3:ac:16:
         03:35:25:3a:04:14:9d:a1:18:34:1d:19:76:9a:ea:c8:43:f5:
         da:4a:5a:b2:cc:f4:11:6d:7a:39:39:83:0b:84:5b:ac:b2:a4:
         a9:5e:a5:aa:58:ba:c2:51:00:85:75:90:d8:74:78:4a:98:62:
         6c:85:03:4f:15:47:6e:ae:2a:a8:2e:cd:08:2b:27:9b:63:ba:
         ec:dc:d2:a0:4f:57:15:57:ab:c1:50:d7:68:0c:e8:87:45:fe:
         56:27:82:19:d6:d2:44:17:60:4a:9c:b0:56:a6:f4:15:eb:28:
         00:84:50:f5:42:65:16:eb:ea:9b:59:c4:1d:e0:88:3e:7a:83:
         dc:e1:37:98:81:bd:44:7c:6c:a7:17:c3:29:ec:7a:d2:4b:ca:
         cd:35:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:09 2026 by rpki-client