Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          bHXt6ehu+jZFK+ZHMtj/aMd1UwgYRNKeouiSL3YTxn4=
Subject key identifier:   F8:AF:53:A3:C7:FB:6F:62:F2:DA:B4:E4:5A:39:60:CA:00:2F:A4:6F
Certificate issuer:       /CN=8B6072680D5DBA826B37027BCC85434051402E03
Certificate serial:       677EC6922BD747DA24D75499FE8BB1FC8ACB4E58
Authority key identifier: 8B:60:72:68:0D:5D:BA:82:6B:37:02:7B:CC:85:43:40:51:40:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B6072680D5DBA826B37027BCC85434051402E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa
Signing time:             Mon 27 Apr 2026 16:17:01 +0000
ROA not before:           Mon 27 Apr 2026 16:12:01 +0000
ROA not after:            Mon 26 Apr 2027 16:17:01 +0000
asID:                     267455
IP address blocks:        164.163.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/8B6072680D5DBA826B37027BCC85434051402E03.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/8B6072680D5DBA826B37027BCC85434051402E03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B6072680D5DBA826B37027BCC85434051402E03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:c6:92:2b:d7:47:da:24:d7:54:99:fe:8b:b1:fc:8a:cb:4e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6072680D5DBA826B37027BCC85434051402E03
        Validity
            Not Before: Apr 27 16:12:01 2026 GMT
            Not After : Apr 26 16:17:01 2027 GMT
        Subject: CN=F8AF53A3C7FB6F62F2DAB4E45A3960CA002FA46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:38:b4:f0:50:e2:95:ac:f5:30:1c:07:fe:
                    a2:76:9f:00:d3:f9:37:8f:b6:02:e4:b8:3e:d1:f6:
                    1f:42:91:8b:f1:0f:a2:58:84:ed:4f:45:44:9f:bf:
                    1b:bc:de:18:62:b7:6a:e4:c8:6b:2e:4a:64:5f:b8:
                    7b:41:76:28:36:30:f1:1d:22:d0:b5:f3:e5:5b:0a:
                    f4:00:c9:bd:e4:6f:5c:eb:64:1d:68:0a:70:02:49:
                    35:38:b9:07:03:b0:79:0e:85:a6:f8:6a:89:25:b2:
                    d5:31:64:00:93:51:58:fe:5b:ca:cd:df:b7:4d:35:
                    f2:52:2f:c3:89:d5:e9:66:68:d1:92:96:02:68:7b:
                    77:40:33:58:30:5f:48:cc:3f:cb:19:1b:e0:45:7d:
                    7c:a0:3e:fe:f4:05:21:6e:99:89:b4:a7:d5:09:37:
                    25:86:55:e2:d1:34:44:42:5e:9e:d8:26:da:0c:57:
                    32:93:bf:a7:66:72:6d:04:07:43:7e:46:db:21:50:
                    de:32:02:31:01:ff:a5:ad:de:c1:66:91:ba:2c:0c:
                    62:67:0f:58:85:06:76:77:8b:c0:20:82:85:bc:c8:
                    8f:90:1f:82:bc:b1:4c:ca:b5:e0:97:91:01:0b:57:
                    b1:8e:eb:df:28:a0:9d:a3:53:a9:84:f2:d2:1a:c6:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AF:53:A3:C7:FB:6F:62:F2:DA:B4:E4:5A:39:60:CA:00:2F:A4:6F
            X509v3 Authority Key Identifier:
                keyid:8B:60:72:68:0D:5D:BA:82:6B:37:02:7B:CC:85:43:40:51:40:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/8B6072680D5DBA826B37027BCC85434051402E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B6072680D5DBA826B37027BCC85434051402E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:6a:5a:cd:75:71:3d:59:f3:6a:67:5d:16:94:34:8c:85:
         e5:91:cd:83:77:98:c4:89:48:5d:51:da:e3:33:97:a9:74:e6:
         9a:db:c0:25:b8:fc:44:46:52:d5:ef:02:8a:6e:f1:1c:a8:5f:
         cd:fc:71:b0:4f:5b:03:f7:75:f1:ff:68:4f:26:17:77:82:c7:
         cc:e2:f2:df:9b:12:12:bb:b3:d3:85:b2:b8:1d:93:56:66:67:
         5d:93:a6:05:7c:f5:60:e9:47:c8:36:3d:7b:97:71:e0:7c:b1:
         05:37:2e:3e:84:8f:7f:51:9f:b5:0f:09:de:70:d1:6a:c1:30:
         66:97:64:80:72:d5:c3:02:72:36:e4:29:bd:27:d0:c2:b8:6a:
         53:a2:7b:58:d4:66:0c:56:c0:e6:c5:c5:f3:89:3c:1a:3b:78:
         8c:ee:55:c9:99:c6:ec:1b:2f:c6:46:4b:79:f6:5a:d7:43:19:
         c2:15:cf:71:79:0d:1c:f1:e0:ff:0c:44:d4:2b:ca:5c:1a:fa:
         ae:7b:ef:d9:8b:d8:5b:9a:ff:50:ff:18:e3:c9:bc:cf:2f:c6:
         43:a6:a7:2c:83:71:13:b2:f8:a9:a5:11:9a:a6:26:95:4d:bd:
         73:0b:83:f8:c1:06:33:6b:4c:8c:31:c6:8b:88:ce:e0:13:5d:
         a5:df:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:35:51 2026 by rpki-client