Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
File: AS52706.roa (raw, json)
Hash identifier: ZOrLIxDOlQroCXwL5gyPZIdIvpM1rMFZCNMJfI5ZmgU=
Subject key identifier: FA:97:6A:97:D8:9C:13:26:B6:6B:8E:55:99:9B:0E:ED:8B:D6:34:75
Certificate issuer: /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial: 3F4BF2E3DDB6B1CC753AB91F01E9F9639EEB7136
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
Signing time: Fri 13 Mar 2026 13:00:09 +0000
ROA not before: Fri 13 Mar 2026 12:55:09 +0000
ROA not after: Fri 12 Mar 2027 13:00:09 +0000
asID: 52706
IP address blocks: 170.233.212.0/22 maxlen: 22
170.233.212.0/23 maxlen: 23
170.233.212.0/24 maxlen: 24
170.233.213.0/24 maxlen: 24
170.233.214.0/23 maxlen: 23
170.233.214.0/24 maxlen: 24
170.233.215.0/24 maxlen: 24
177.126.16.0/20 maxlen: 20
177.126.16.0/23 maxlen: 23
177.126.16.0/24 maxlen: 24
177.126.17.0/24 maxlen: 24
177.126.18.0/23 maxlen: 23
177.126.18.0/24 maxlen: 24
177.126.19.0/24 maxlen: 24
177.126.20.0/23 maxlen: 23
177.126.20.0/24 maxlen: 24
177.126.21.0/24 maxlen: 24
177.126.22.0/23 maxlen: 23
177.126.22.0/24 maxlen: 24
177.126.23.0/24 maxlen: 24
177.126.24.0/23 maxlen: 23
177.126.24.0/24 maxlen: 24
177.126.25.0/24 maxlen: 24
177.126.26.0/23 maxlen: 23
177.126.26.0/24 maxlen: 24
177.126.27.0/24 maxlen: 24
177.126.28.0/23 maxlen: 23
177.126.28.0/24 maxlen: 24
177.126.29.0/24 maxlen: 24
177.126.30.0/23 maxlen: 23
177.126.30.0/24 maxlen: 24
177.126.31.0/24 maxlen: 24
2804:c70::/32 maxlen: 32
2804:c70::/36 maxlen: 36
2804:c70::/48 maxlen: 48
2804:c70:1::/48 maxlen: 48
2804:c70:2::/48 maxlen: 48
2804:c70:3::/48 maxlen: 48
2804:c70:4::/48 maxlen: 48
2804:c70:5::/48 maxlen: 48
2804:c70:6::/48 maxlen: 48
2804:c70:7::/48 maxlen: 48
2804:c70:8::/48 maxlen: 48
2804:c70:a::/48 maxlen: 48
2804:c70:b::/48 maxlen: 48
2804:c70:c::/48 maxlen: 48
2804:c70:d::/48 maxlen: 48
2804:c70:3d::/48 maxlen: 48
2804:c70:1000::/36 maxlen: 36
2804:c70:2000::/36 maxlen: 36
2804:c70:2000::/48 maxlen: 48
2804:c70:2001::/48 maxlen: 48
2804:c70:2002::/48 maxlen: 48
2804:c70:2003::/48 maxlen: 48
2804:c70:2004::/48 maxlen: 48
2804:c70:2005::/48 maxlen: 48
2804:c70:2006::/48 maxlen: 48
2804:c70:2007::/48 maxlen: 48
2804:c70:2008::/48 maxlen: 48
2804:c70:2009::/48 maxlen: 48
2804:c70:200a::/48 maxlen: 48
2804:c70:200b::/48 maxlen: 48
2804:c70:200c::/48 maxlen: 48
2804:c70:3000::/36 maxlen: 36
2804:c70:4000::/36 maxlen: 36
2804:c70:4000::/48 maxlen: 48
2804:c70:4001::/48 maxlen: 48
2804:c70:4002::/48 maxlen: 48
2804:c70:4003::/48 maxlen: 48
2804:c70:4004::/48 maxlen: 48
2804:c70:4005::/48 maxlen: 48
2804:c70:403c::/48 maxlen: 48
2804:c70:403d::/48 maxlen: 48
2804:c70:5000::/36 maxlen: 36
2804:c70:6000::/36 maxlen: 36
2804:c70:6000::/48 maxlen: 48
2804:c70:6001::/48 maxlen: 48
2804:c70:6002::/48 maxlen: 48
2804:c70:6003::/48 maxlen: 48
2804:c70:6004::/48 maxlen: 48
2804:c70:6005::/48 maxlen: 48
2804:c70:6006::/48 maxlen: 48
2804:c70:6007::/48 maxlen: 48
2804:c70:6008::/48 maxlen: 48
2804:c70:6009::/48 maxlen: 48
2804:c70:600a::/48 maxlen: 48
2804:c70:600b::/48 maxlen: 48
2804:c70:600c::/48 maxlen: 48
2804:c70:600d::/48 maxlen: 48
2804:c70:600e::/48 maxlen: 48
2804:c70:6050::/48 maxlen: 48
2804:c70:7000::/36 maxlen: 36
2804:c70:8000::/36 maxlen: 36
2804:c70:8001::/48 maxlen: 48
2804:c70:8002::/48 maxlen: 48
2804:c70:8003::/48 maxlen: 48
2804:c70:8004::/48 maxlen: 48
2804:c70:8005::/48 maxlen: 48
2804:c70:8006::/48 maxlen: 48
2804:c70:8007::/48 maxlen: 48
2804:c70:8008::/48 maxlen: 48
2804:c70:8009::/48 maxlen: 48
2804:c70:800a::/48 maxlen: 48
2804:c70:800b::/48 maxlen: 48
2804:c70:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 04:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4b:f2:e3:dd:b6:b1:cc:75:3a:b9:1f:01:e9:f9:63:9e:eb:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Validity
Not Before: Mar 13 12:55:09 2026 GMT
Not After : Mar 12 13:00:09 2027 GMT
Subject: CN=FA976A97D89C1326B66B8E55999B0EED8BD63475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:fe:cd:77:d6:44:fd:30:1f:8b:ce:67:76:
f7:b9:41:7d:06:0b:31:31:12:e4:bf:fb:9f:b5:79:
a9:12:99:20:92:ae:2d:de:f1:21:41:27:49:d1:72:
1e:b5:0f:0b:0d:b4:fd:29:ee:a2:94:40:81:46:f4:
a1:0f:c4:cd:a5:36:77:64:e3:ae:47:3d:d5:f2:3e:
51:3d:91:10:6c:b0:b4:99:94:af:bc:a4:b2:28:9b:
68:d8:40:9f:4c:33:9d:5b:24:62:03:17:50:f7:da:
b2:c4:9a:4c:3b:8b:ee:36:14:29:1c:42:bd:9b:3c:
00:07:c9:f0:ae:12:43:a7:d1:e9:15:b9:af:cd:e1:
6f:86:ad:31:1d:d2:30:fb:0d:63:7c:54:6f:da:c2:
13:95:d6:cc:8a:85:7a:5f:7d:1f:05:4f:95:50:c3:
6f:15:96:e1:f1:9f:ab:6a:87:0f:fa:79:7c:8d:fb:
e7:b0:78:0e:70:96:e6:5a:09:f7:4d:db:76:0a:44:
10:14:a0:89:ab:6b:cc:57:02:31:54:a0:d9:2c:9e:
f6:f5:8d:6b:ae:cb:49:3c:6b:c9:71:f1:03:8c:d6:
11:78:68:38:ec:22:05:55:ed:7f:e3:f4:70:93:0c:
3d:49:85:04:ce:7a:9b:39:ce:3e:ec:a3:0b:12:a3:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:97:6A:97:D8:9C:13:26:B6:6B:8E:55:99:9B:0E:ED:8B:D6:34:75
X509v3 Authority Key Identifier:
keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.212.0/22
177.126.16.0/20
IPv6:
2804:c70::/32
Signature Algorithm: sha256WithRSAEncryption
8e:2e:96:16:d7:e2:dc:32:36:8f:f4:d9:0c:cf:6d:aa:fb:5d:
1f:8d:f0:cb:80:ea:46:8c:8a:e1:18:a8:0c:ea:08:61:15:b1:
8f:c8:b2:95:86:50:d4:a8:fd:33:9a:e9:20:ab:92:44:de:75:
58:1b:96:79:11:dc:47:d9:5c:cd:c4:5e:60:a6:88:1c:2b:ff:
42:da:dc:e4:72:f2:df:06:3e:61:44:ca:a6:8b:57:cd:e6:5e:
16:92:54:35:4c:6e:f7:42:8e:ee:fc:49:c8:fb:75:51:23:17:
62:68:c9:17:fe:8b:f8:a6:7e:20:60:cf:3c:54:20:e4:9e:0b:
8c:35:ea:d1:a1:42:1d:7b:f6:0a:d0:d6:93:00:ad:7b:f9:4c:
20:c7:dd:4e:df:a1:38:15:62:8d:81:ea:7d:6a:2a:02:9e:0f:
d5:a9:de:bc:db:5b:2a:bc:f0:0a:c8:82:c5:35:a6:06:da:32:
27:ca:3f:b0:21:62:f4:91:54:d5:26:9f:2d:74:fa:34:f1:4d:
7a:b7:7f:f6:c7:57:80:00:af:4d:b8:c4:d7:31:5c:e3:66:0f:
a1:a6:31:83:56:9f:68:3b:a0:5a:28:09:eb:cb:10:c5:5c:c9:
c5:ff:2e:4c:70:9d:6e:10:6d:0a:9f:10:db:ab:14:4c:c0:a4:
40:9e:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:29:48 2026 by rpki-client