Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa
File:                     3137302e38312e3130302e302f32322d3234203d3e203631363138.roa (raw, json)
Hash identifier:          /cvIsK/5XfEMlLcEOKOnH8IHCaOSGxOvSaa8qYsLLRk=
Subject key identifier:   C7:FB:61:FC:5E:72:92:8B:FB:DC:0F:A9:E5:91:5E:20:0F:94:CE:6D
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       65EF51584E59AF86D390C824DF67E0CE456A7490
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa
Signing time:             Fri 08 May 2026 17:59:22 +0000
ROA not before:           Fri 08 May 2026 17:54:22 +0000
ROA not after:            Fri 07 May 2027 17:59:22 +0000
asID:                     61618
IP address blocks:        170.81.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ef:51:58:4e:59:af:86:d3:90:c8:24:df:67:e0:ce:45:6a:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: May  8 17:54:22 2026 GMT
            Not After : May  7 17:59:22 2027 GMT
        Subject: CN=C7FB61FC5E72928BFBDC0FA9E5915E200F94CE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:66:2f:80:b7:e0:53:5d:bb:5e:a4:7a:63:
                    03:b5:7e:87:1f:d0:2f:c3:62:2a:5a:ee:ac:0d:89:
                    ea:14:f9:9a:7e:1b:60:f6:9a:04:40:44:d4:d7:24:
                    e7:9d:49:68:e7:d7:91:fb:17:0a:fc:84:13:d4:90:
                    21:37:30:6c:a9:8f:cf:8c:0d:54:d5:0d:1b:82:9e:
                    d5:46:3d:0c:78:6c:12:f8:a7:e7:57:df:56:2e:22:
                    95:1b:56:b3:6b:33:94:58:03:d6:52:c6:f7:a8:ca:
                    c1:29:fd:88:80:77:d4:5c:1a:41:e1:6b:3f:3f:c2:
                    5c:f0:47:0f:cd:6b:4f:ba:c9:96:c5:35:1a:18:de:
                    90:fb:2e:d6:88:61:cb:4b:f4:3d:61:df:63:35:75:
                    51:ef:4f:f6:3c:8e:af:8c:42:ff:ad:58:f9:4f:82:
                    50:7e:4d:23:e1:ff:2c:ea:5d:f3:f8:cd:5f:29:67:
                    4d:fb:02:ec:44:de:27:73:48:d9:0f:a3:17:54:5f:
                    9d:2c:0f:22:3d:aa:b8:a7:b8:f0:10:b3:3e:1c:fe:
                    1d:0e:86:bd:ca:94:cf:c7:2d:60:60:f5:30:f2:f3:
                    bc:3c:fb:45:c8:10:29:21:c3:c9:7a:3b:ac:5c:83:
                    5d:65:52:73:dd:cb:0a:c5:01:4d:9b:9a:2e:7d:71:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:61:FC:5E:72:92:8B:FB:DC:0F:A9:E5:91:5E:20:0F:94:CE:6D
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:f7:32:ec:32:2c:2a:27:4c:8b:4f:ea:83:b3:08:f2:2a:
         21:18:96:9e:03:a9:f2:63:b5:6c:24:84:97:c5:5c:90:e7:e8:
         d0:34:c1:44:ea:88:21:60:b8:d3:c9:a7:20:c7:01:d6:e2:d6:
         01:7a:19:1f:18:2c:94:cd:3a:d6:12:58:99:e4:cd:23:6b:3e:
         dd:22:0e:10:a2:7d:00:54:e5:d0:67:2f:ef:18:fa:03:c9:ce:
         0c:01:14:18:34:b1:ed:d0:f9:b1:6b:98:3f:53:d7:62:e7:e9:
         2d:2f:64:e7:1d:1f:ea:be:0a:00:06:c1:3c:c0:43:d7:ed:e4:
         42:2d:3a:f1:eb:ca:16:80:c5:ac:2d:91:e9:c4:85:91:c1:31:
         fd:8a:d3:d0:d8:f7:b2:47:db:d6:b9:4b:be:ae:ff:c1:14:5e:
         86:78:2e:63:de:c3:28:da:8f:ed:f8:cc:52:ea:1a:d7:ca:4a:
         e8:e8:3d:04:f7:07:a0:d9:17:58:0e:16:79:ed:65:12:7a:66:
         88:f8:25:f2:bb:99:b1:76:b4:ff:cd:af:82:66:d5:3b:4d:94:
         97:11:e7:ec:44:41:11:d6:64:f9:ff:ce:40:60:2f:d6:db:b6:
         82:ad:bb:73:de:c2:01:35:7d:21:b5:92:e2:39:4b:c3:35:b4:
         17:31:9e:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZe9RWE5Zr4bTkMgk32fgzkVqdJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5RTIxQ0REMDAwMzYyRjE0Q0I1QzZFNUI5NzVFRkUw
ODc3Njg4NjAeFw0yNjA1MDgxNzU0MjJaFw0yNzA1MDcxNzU5MjJaMDMxMTAvBgNV
BAMTKEM3RkI2MUZDNUU3MjkyOEJGQkRDMEZBOUU1OTE1RTIwMEY5NENFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGWYvgLfgU127XqR6YwO1focf
0C/DYipa7qwNieoU+Zp+G2D2mgRARNTXJOedSWjn15H7Fwr8hBPUkCE3MGypj8+M
DVTVDRuCntVGPQx4bBL4p+dX31YuIpUbVrNrM5RYA9ZSxveoysEp/YiAd9RcGkHh
az8/wlzwRw/Na0+6yZbFNRoY3pD7LtaIYctL9D1h32M1dVHvT/Y8jq+MQv+tWPlP
glB+TSPh/yzqXfP4zV8pZ037AuxE3idzSNkPoxdUX50sDyI9qrinuPAQsz4c/h0O
hr3KlM/HLWBg9TDy87w8+0XIECkhw8l6O6xcg11lUnPdywrFAU2bmi59cZr3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx/th/F5ykov73A+p5ZFeIA+Uzm0wHwYDVR0j
BBgwFoAUdJ4hzdAANi8Uy1xuW5de/gh3aIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3g4OUtxOWpMMVdvZGg4c0hTQkdpUGVZZ21YVFdqUlhId0NNTmNBR3lm
RGcvMC83NDlFMjFDREQwMDAzNjJGMTRDQjVDNkU1Qjk3NUVGRTA4Nzc2ODg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0OUUyMUNERDAwMDM2MkYx
NENCNUM2RTVCOTc1RUZFMDg3NzY4ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4ODlLcTlqTDFXb2RoOHNIU0JHaVBlWWdtWFRXalJYSHdDTU5jQUd5ZkRnLzAv
MzEzNzMwMmUzODMxMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlFkMA0GCSqGSIb3DQEBCwUAA4IBAQCktfcy7DIs
KidMi0/qg7MI8iohGJaeA6nyY7VsJISXxVyQ5+jQNMFE6oghYLjTyacgxwHW4tYB
ehkfGCyUzTrWEliZ5M0jaz7dIg4Qon0AVOXQZy/vGPoDyc4MARQYNLHt0Pmxa5g/
U9di5+ktL2TnHR/qvgoABsE8wEPX7eRCLTrx68oWgMWsLZHpxIWRwTH9itPQ2Pey
R9vWuUu+rv/BFF6GeC5j3sMo2o/t+MxS6hrXykro6D0E9weg2RdYDhZ57WUSemaI
+CXyu5mxdrT/za+CZtU7TZSXEefsREER1mT5/85AYC/W27aCrbtz3sIBNX0htZLi
OUvDNbQXMZ64
-----END CERTIFICATE-----
Generated at Wed May 13 17:07:51 2026 by rpki-client