Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32342d3234203d3e20323632383739.roa
File:                     3137302e3234352e3134302e302f32342d3234203d3e20323632383739.roa (raw, json)
Hash identifier:          X4habXdARcLb8zfjXZ2S+5L1lNACuba6ItntS+TTunU=
Subject key identifier:   8F:E3:7A:1E:99:EE:94:89:8F:47:44:BA:58:F0:25:38:F8:13:D8:01
Certificate issuer:       /CN=38B1611D858EB973AD6A2DBEB185544EDDA796FC
Certificate serial:       599B34B3E6DE1E729979E6E138FC7A6418DD4DB8
Authority key identifier: 38:B1:61:1D:85:8E:B9:73:AD:6A:2D:BE:B1:85:54:4E:DD:A7:96:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38B1611D858EB973AD6A2DBEB185544EDDA796FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32342d3234203d3e20323632383739.roa
Signing time:             Mon 11 May 2026 21:10:03 +0000
ROA not before:           Mon 11 May 2026 21:05:03 +0000
ROA not after:            Mon 10 May 2027 21:10:03 +0000
asID:                     262879
IP address blocks:        170.245.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/38B1611D858EB973AD6A2DBEB185544EDDA796FC.crl
                          rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/38B1611D858EB973AD6A2DBEB185544EDDA796FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38B1611D858EB973AD6A2DBEB185544EDDA796FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:34:b3:e6:de:1e:72:99:79:e6:e1:38:fc:7a:64:18:dd:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38B1611D858EB973AD6A2DBEB185544EDDA796FC
        Validity
            Not Before: May 11 21:05:03 2026 GMT
            Not After : May 10 21:10:03 2027 GMT
        Subject: CN=8FE37A1E99EE94898F4744BA58F02538F813D801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:f6:03:62:01:3f:84:ad:cd:07:96:33:c6:
                    ec:c9:93:8d:5d:0f:d6:4f:df:af:dd:61:04:f9:0c:
                    7b:ac:ec:6e:50:80:9c:6c:b8:d7:7d:07:1e:fe:4d:
                    f0:34:28:4e:36:6a:13:50:91:bf:2f:cd:31:eb:66:
                    71:a3:5c:9c:dc:8f:fd:b9:26:42:b6:cb:c8:6e:04:
                    09:d6:23:13:ce:e9:69:79:f4:0c:66:90:b4:b6:0c:
                    70:eb:9f:0b:f6:08:35:89:2e:f3:d5:86:f0:09:6f:
                    ef:45:b6:b5:f7:f4:cc:05:87:46:c8:94:67:ba:03:
                    0b:db:24:b4:4d:9a:c8:d5:c1:48:6c:d7:a6:a7:1e:
                    0b:c7:56:7c:33:61:1c:c6:b2:6c:6b:d2:bf:20:51:
                    18:58:03:b1:b1:c4:20:54:9d:63:e2:df:b9:1b:8c:
                    cb:89:35:fd:23:c5:7d:84:07:79:cb:d6:8f:31:ff:
                    26:f5:ed:fa:b6:40:1e:28:6d:32:e1:45:df:8d:95:
                    09:0b:39:e1:5b:b2:39:5a:51:a8:f0:29:0d:53:13:
                    f0:db:67:25:62:ab:8d:4c:0b:ec:2d:2a:84:c9:c9:
                    4e:55:bf:0b:f7:ce:f7:76:a0:b4:7a:14:aa:c1:60:
                    a0:1b:df:18:68:61:80:d4:90:08:81:ca:cd:2c:21:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:7A:1E:99:EE:94:89:8F:47:44:BA:58:F0:25:38:F8:13:D8:01
            X509v3 Authority Key Identifier:
                keyid:38:B1:61:1D:85:8E:B9:73:AD:6A:2D:BE:B1:85:54:4E:DD:A7:96:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/38B1611D858EB973AD6A2DBEB185544EDDA796FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38B1611D858EB973AD6A2DBEB185544EDDA796FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32342d3234203d3e20323632383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:35:74:53:37:45:d6:a1:a3:6a:00:1d:2d:f1:ca:8e:a5:78:
         ad:02:9a:8e:14:0b:37:59:c3:7e:ae:ac:43:55:17:69:c9:96:
         e8:5d:20:02:00:04:92:a6:bd:b0:34:e8:0b:18:26:e5:ce:ac:
         b4:2d:5d:9c:3c:e6:59:37:49:70:3a:66:99:e6:49:42:24:6d:
         76:71:f8:94:d5:ef:a8:ca:08:71:df:59:47:a6:a0:f9:38:f8:
         27:76:59:24:eb:08:d3:e8:67:a3:9f:88:3e:74:c4:ac:ed:13:
         04:0a:8f:20:a4:ed:96:38:1e:41:ce:43:cf:f3:b7:be:85:c4:
         c3:f0:50:f3:bb:88:75:91:aa:c5:00:9f:d1:7a:83:50:45:6f:
         2e:6d:4b:56:ca:83:4a:92:98:d0:1a:06:21:bd:cb:90:a0:49:
         e9:ef:a9:a2:6c:79:7e:91:93:13:16:bb:28:18:61:3f:5f:74:
         1c:b4:20:64:1a:b4:c7:5c:5f:d9:4f:a7:db:2e:dd:e7:c1:df:
         ad:d2:19:2e:26:d1:b0:de:da:5c:ea:cd:86:02:c8:55:eb:06:
         37:82:6e:66:1b:2e:3d:03:aa:ec:2f:7b:96:ea:67:68:47:14:
         49:ac:a6:20:39:14:ac:b3:21:41:88:32:a8:3f:a4:68:c2:18:
         73:53:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:39 2026 by rpki-client