Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
File: AS52706.roa (raw, json)
Hash identifier: tMRYhct67qQqjFg94jjsAmhPxnKOiqpZnzjl66FKEQg=
Subject key identifier: CB:13:35:08:EB:E8:06:B2:18:C7:07:60:CB:47:EC:B1:0F:64:2F:A2
Certificate issuer: /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial: 7B693D54698EB6BBB4F2B97F86837890608C448C
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
Signing time: Fri 26 Jun 2026 12:38:05 +0000
ROA not before: Fri 26 Jun 2026 12:33:05 +0000
ROA not after: Fri 25 Jun 2027 12:38:05 +0000
asID: 52706
IP address blocks: 170.233.212.0/22 maxlen: 22
170.233.212.0/23 maxlen: 23
170.233.212.0/24 maxlen: 24
170.233.213.0/24 maxlen: 24
170.233.214.0/23 maxlen: 23
170.233.214.0/24 maxlen: 24
170.233.215.0/24 maxlen: 24
177.126.16.0/20 maxlen: 20
177.126.16.0/23 maxlen: 23
177.126.16.0/24 maxlen: 24
177.126.17.0/24 maxlen: 24
177.126.18.0/23 maxlen: 23
177.126.18.0/24 maxlen: 24
177.126.19.0/24 maxlen: 24
177.126.20.0/23 maxlen: 23
177.126.20.0/24 maxlen: 24
177.126.21.0/24 maxlen: 24
177.126.22.0/23 maxlen: 23
177.126.22.0/24 maxlen: 24
177.126.23.0/24 maxlen: 24
177.126.24.0/23 maxlen: 23
177.126.24.0/24 maxlen: 24
177.126.25.0/24 maxlen: 24
177.126.26.0/23 maxlen: 23
177.126.26.0/24 maxlen: 24
177.126.27.0/24 maxlen: 24
177.126.28.0/23 maxlen: 23
177.126.28.0/24 maxlen: 24
177.126.29.0/24 maxlen: 24
177.126.30.0/23 maxlen: 23
177.126.30.0/24 maxlen: 24
177.126.31.0/24 maxlen: 24
2804:c70::/32 maxlen: 32
2804:c70::/36 maxlen: 36
2804:c70::/48 maxlen: 48
2804:c70:1::/48 maxlen: 48
2804:c70:2::/48 maxlen: 48
2804:c70:3::/48 maxlen: 48
2804:c70:4::/48 maxlen: 48
2804:c70:5::/48 maxlen: 48
2804:c70:6::/48 maxlen: 48
2804:c70:7::/48 maxlen: 48
2804:c70:8::/48 maxlen: 48
2804:c70:a::/48 maxlen: 48
2804:c70:b::/48 maxlen: 48
2804:c70:c::/48 maxlen: 48
2804:c70:d::/48 maxlen: 48
2804:c70:3d::/48 maxlen: 48
2804:c70:1000::/36 maxlen: 36
2804:c70:2000::/36 maxlen: 36
2804:c70:2000::/48 maxlen: 48
2804:c70:2001::/48 maxlen: 48
2804:c70:2002::/48 maxlen: 48
2804:c70:2003::/48 maxlen: 48
2804:c70:2004::/48 maxlen: 48
2804:c70:2005::/48 maxlen: 48
2804:c70:2006::/48 maxlen: 48
2804:c70:2007::/48 maxlen: 48
2804:c70:2008::/48 maxlen: 48
2804:c70:2009::/48 maxlen: 48
2804:c70:200a::/48 maxlen: 48
2804:c70:200b::/48 maxlen: 48
2804:c70:200c::/48 maxlen: 48
2804:c70:3000::/36 maxlen: 36
2804:c70:4000::/36 maxlen: 36
2804:c70:4000::/48 maxlen: 48
2804:c70:4001::/48 maxlen: 48
2804:c70:4002::/48 maxlen: 48
2804:c70:4003::/48 maxlen: 48
2804:c70:4004::/48 maxlen: 48
2804:c70:4005::/48 maxlen: 48
2804:c70:4006::/48 maxlen: 48
2804:c70:4007::/48 maxlen: 48
2804:c70:403c::/48 maxlen: 48
2804:c70:403d::/48 maxlen: 48
2804:c70:5000::/36 maxlen: 36
2804:c70:6000::/36 maxlen: 36
2804:c70:6000::/48 maxlen: 48
2804:c70:6001::/48 maxlen: 48
2804:c70:6002::/48 maxlen: 48
2804:c70:6003::/48 maxlen: 48
2804:c70:6004::/48 maxlen: 48
2804:c70:6005::/48 maxlen: 48
2804:c70:6006::/48 maxlen: 48
2804:c70:6007::/48 maxlen: 48
2804:c70:6008::/48 maxlen: 48
2804:c70:6009::/48 maxlen: 48
2804:c70:600a::/48 maxlen: 48
2804:c70:600b::/48 maxlen: 48
2804:c70:600c::/48 maxlen: 48
2804:c70:600d::/48 maxlen: 48
2804:c70:600e::/48 maxlen: 48
2804:c70:6050::/48 maxlen: 48
2804:c70:7000::/36 maxlen: 36
2804:c70:8000::/36 maxlen: 36
2804:c70:8001::/48 maxlen: 48
2804:c70:8002::/48 maxlen: 48
2804:c70:8003::/48 maxlen: 48
2804:c70:8004::/48 maxlen: 48
2804:c70:8005::/48 maxlen: 48
2804:c70:8006::/48 maxlen: 48
2804:c70:8007::/48 maxlen: 48
2804:c70:8008::/48 maxlen: 48
2804:c70:8009::/48 maxlen: 48
2804:c70:800a::/48 maxlen: 48
2804:c70:800b::/48 maxlen: 48
2804:c70:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:69:3d:54:69:8e:b6:bb:b4:f2:b9:7f:86:83:78:90:60:8c:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Validity
Not Before: Jun 26 12:33:05 2026 GMT
Not After : Jun 25 12:38:05 2027 GMT
Subject: CN=CB133508EBE806B218C70760CB47ECB10F642FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:f9:a0:68:53:82:77:7b:41:55:84:f6:4d:
70:14:67:74:31:50:7c:e0:1c:0c:b9:61:1a:e7:0e:
0f:23:be:78:cb:b7:e6:65:37:37:57:f1:14:b7:c0:
65:45:cd:e3:67:21:5d:22:f0:8c:fb:d8:c8:b4:93:
41:b7:d8:e4:d0:e3:bd:18:e7:78:95:dd:ec:11:d4:
09:a0:9b:81:a8:b5:34:67:d5:d4:54:90:47:3c:b2:
21:e3:27:9f:b9:e4:1b:77:20:2f:42:e7:0d:a8:92:
8d:04:f1:e1:b2:c9:86:17:17:da:71:a5:28:3f:ab:
7e:db:88:f2:22:e0:83:52:10:f3:31:5c:df:80:48:
7a:4b:6e:ea:a4:ee:e0:d3:37:80:1d:29:60:25:43:
67:a3:ec:f0:60:5c:2e:ce:5e:80:21:89:7a:c7:d1:
1b:b8:df:45:3d:76:a1:81:7f:3c:08:7f:4e:67:36:
a4:5c:b2:6e:30:0c:09:13:b4:d8:2b:73:1b:b9:27:
7e:d3:45:95:74:e4:13:e8:0e:5f:9d:01:3b:ee:20:
9b:46:3f:01:d6:74:dd:68:bd:7c:b2:b8:2c:8c:e9:
c4:e6:ce:2e:61:f9:b3:2f:fd:86:a4:d0:33:43:f3:
08:7f:66:6a:7c:05:9a:ef:61:2c:ed:29:77:ba:64:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:35:08:EB:E8:06:B2:18:C7:07:60:CB:47:EC:B1:0F:64:2F:A2
X509v3 Authority Key Identifier:
keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/AS52706.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.212.0/22
177.126.16.0/20
IPv6:
2804:c70::/32
Signature Algorithm: sha256WithRSAEncryption
53:0a:4c:ca:f7:cf:ef:ac:a6:4c:b9:08:37:20:88:6f:7b:53:
f6:77:62:71:49:50:e6:ba:a0:bc:54:6f:f4:97:d6:d6:5d:ab:
2d:f4:02:81:c7:b1:40:61:85:f3:5c:3a:05:30:c0:d8:14:d8:
34:35:c6:d0:a9:2b:1d:fa:a4:8a:66:32:69:a7:c6:ee:44:65:
e1:55:a2:97:1a:cc:22:d9:69:61:c3:61:59:fd:02:47:9a:1c:
84:39:15:74:f4:53:4e:20:4c:f8:9b:12:57:db:37:40:32:a6:
dd:e5:7c:37:f4:2c:91:eb:20:ab:93:e9:20:19:66:37:af:a9:
50:aa:f5:63:2f:80:b1:aa:b0:74:3b:b2:55:53:89:01:a9:96:
de:c3:ab:8d:67:9c:f6:6d:3c:0d:3b:fc:86:3f:8e:c3:f5:7b:
b5:9a:8d:d4:25:07:19:74:bc:61:b9:b8:2b:9b:36:6f:2e:06:
12:68:d2:86:37:29:78:39:77:5b:17:90:32:55:e9:5c:48:b5:
82:06:0c:07:b6:3e:14:11:84:68:36:bf:e4:0d:7b:1b:f9:6a:
f3:d7:a7:49:c3:04:d1:a3:38:a2:19:b2:7f:28:69:77:35:0d:
e3:0f:8d:19:dd:cf:e4:78:e4:e5:9e:dd:17:bf:88:5a:5b:14:
cc:5c:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:40:24 2026 by rpki-client