Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3137302e3234372e3131322e302f32322d3234203d3e20323633393033.roa
File:                     3137302e3234372e3131322e302f32322d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          kySofI/0ybjgsbLgTipV/gr2x5b0J6ATlBCHuCWuEJ4=
Subject key identifier:   F7:82:33:7A:8A:C2:DF:72:98:E9:42:6C:2F:19:44:8F:5B:37:21:D7
Certificate issuer:       /CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
Certificate serial:       58B2766843FC3A725D86045B6D18CCDD23879C9E
Authority key identifier: AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3137302e3234372e3131322e302f32322d3234203d3e20323633393033.roa
Signing time:             Thu 05 Feb 2026 10:00:06 +0000
ROA not before:           Thu 05 Feb 2026 09:55:06 +0000
ROA not after:            Thu 04 Feb 2027 10:00:06 +0000
asID:                     263903
IP address blocks:        170.247.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl
                          rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:76:68:43:fc:3a:72:5d:86:04:5b:6d:18:cc:dd:23:87:9c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
        Validity
            Not Before: Feb  5 09:55:06 2026 GMT
            Not After : Feb  4 10:00:06 2027 GMT
        Subject: CN=F782337A8AC2DF7298E9426C2F19448F5B3721D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:25:89:d5:25:97:48:8a:1b:b3:47:fe:e3:
                    18:df:8a:f3:f8:cb:c3:10:02:b8:e0:43:68:b3:9b:
                    41:dd:99:e0:e6:52:2b:e8:cb:46:fe:85:b7:06:96:
                    49:b9:6a:0f:02:56:e3:2f:80:31:25:c2:f6:16:86:
                    90:4b:26:af:ac:51:e1:1f:10:8e:fc:92:26:33:40:
                    5b:01:03:c6:1e:ba:4a:09:c7:84:8d:37:d7:2c:6c:
                    73:56:3e:7d:7b:ae:4e:27:2c:74:3f:58:6a:08:5b:
                    50:76:7b:56:db:c2:53:6c:03:b1:59:96:28:d4:a7:
                    32:fb:a6:08:68:ce:53:79:53:8b:8a:f4:b8:9d:10:
                    65:85:00:4d:bc:f2:67:09:0b:35:e9:d3:3f:e5:fb:
                    25:08:ab:b7:8d:74:19:fc:2e:61:53:af:6a:38:d9:
                    28:f6:24:0c:f3:d7:ac:bc:2f:7f:aa:46:a5:a5:d6:
                    d5:96:ce:c2:7c:06:ad:5f:6c:43:27:1a:66:35:58:
                    d7:94:cf:6e:f2:63:05:b9:dc:62:0b:a0:85:e9:ff:
                    49:19:8f:5a:fd:82:33:4c:1a:f0:15:48:b7:3a:25:
                    95:69:15:2a:c4:0b:dc:3f:0c:ee:cb:93:98:c8:e1:
                    e5:af:80:6a:eb:76:6d:cc:3a:2d:82:de:11:a6:61:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:33:7A:8A:C2:DF:72:98:E9:42:6C:2F:19:44:8F:5B:37:21:D7
            X509v3 Authority Key Identifier:
                keyid:AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3137302e3234372e3131322e302f32322d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:45:3e:a9:c5:3d:9f:a5:1f:b6:18:9c:a6:09:54:f6:a1:
         3c:b6:cc:26:40:8a:af:0d:f7:77:46:00:80:cd:ad:e2:ec:50:
         15:de:a1:c4:57:a3:84:56:c0:ef:00:1b:f1:78:c4:75:44:a1:
         9d:4e:b0:49:55:c8:37:d3:9b:5b:2a:8f:2d:b9:f7:9a:f9:e4:
         6f:41:54:f5:d4:5a:8a:5a:e0:da:b2:47:ec:38:f2:81:38:5a:
         5b:f7:d2:43:fc:0b:a4:33:4f:cd:af:55:f6:3b:2b:d1:dd:47:
         6f:0b:90:99:c0:13:97:d6:20:de:14:75:35:c8:e7:38:77:c0:
         d9:81:d3:20:76:01:e0:c5:15:04:89:41:1b:02:ca:35:a5:24:
         80:13:38:ce:92:17:66:73:a0:ef:ef:e8:79:16:51:07:99:72:
         84:93:85:7d:f6:ce:6b:13:d4:2e:1f:38:33:11:97:ad:d7:2d:
         ae:ee:76:47:1a:eb:ab:5a:4d:f2:ed:c1:08:01:58:dc:a4:fa:
         be:fc:4b:16:57:59:ba:7e:8a:cd:31:e4:f1:f6:d1:23:97:02:
         f1:3a:9e:cb:6d:35:2c:2e:03:8d:4a:2f:17:33:46:34:d5:3a:
         bf:37:0e:71:eb:19:95:cc:39:78:6a:24:f5:7c:2e:db:bd:64:
         bf:c3:99:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWLJ2aEP8OnJdhgRbbRjM3SOHnJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxQzA1ODkwOTgyNkU4RURGMTNDNTU0Q0FBODU4RUM1
OUNBMTQ1NTAeFw0yNjAyMDUwOTU1MDZaFw0yNzAyMDQxMDAwMDZaMDMxMTAvBgNV
BAMTKEY3ODIzMzdBOEFDMkRGNzI5OEU5NDI2QzJGMTk0NDhGNUIzNzIxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IyWJ1SWXSIobs0f+4xjfivP4
y8MQArjgQ2izm0HdmeDmUivoy0b+hbcGlkm5ag8CVuMvgDElwvYWhpBLJq+sUeEf
EI78kiYzQFsBA8YeukoJx4SNN9csbHNWPn17rk4nLHQ/WGoIW1B2e1bbwlNsA7FZ
lijUpzL7pghozlN5U4uK9LidEGWFAE288mcJCzXp0z/l+yUIq7eNdBn8LmFTr2o4
2Sj2JAzz16y8L3+qRqWl1tWWzsJ8Bq1fbEMnGmY1WNeUz27yYwW53GILoIXp/0kZ
j1r9gjNMGvAVSLc6JZVpFSrEC9w/DO7Lk5jI4eWvgGrrdm3MOi2C3hGmYcH9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU94IzeorC33KY6UJsLxlEj1s3IdcwHwYDVR0j
BBgwFoAUrhwFiQmCbo7fE8VUyqhY7FnKFFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng1MWlucWhnYmhiQjlTd2R1RjE2eVpmSFBacmtLWmJFZGZzUnlZNkRL
QWUvMS9BRTFDMDU4OTA5ODI2RThFREYxM0M1NTRDQUE4NThFQzU5Q0ExNDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMUMwNTg5MDk4MjZFOEVE
RjEzQzU1NENBQTg1OEVDNTlDQTE0NTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4NTFpbnFoZ2JoYkI5U3dkdUYxNnlaZkhQWnJrS1piRWRmc1J5WTZES0FlLzEv
MzEzNzMwMmUzMjM0MzcyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3cDANBgkqhkiG9w0BAQsFAAOCAQEAMGxF
PqnFPZ+lH7YYnKYJVPahPLbMJkCKrw33d0YAgM2t4uxQFd6hxFejhFbA7wAb8XjE
dUShnU6wSVXIN9ObWyqPLbn3mvnkb0FU9dRailrg2rJH7DjygThaW/fSQ/wLpDNP
za9V9jsr0d1HbwuQmcATl9Yg3hR1NcjnOHfA2YHTIHYB4MUVBIlBGwLKNaUkgBM4
zpIXZnOg7+/oeRZRB5lyhJOFffbOaxPULh84MxGXrdctru52Rxrrq1pN8u3BCAFY
3KT6vvxLFldZun6KzTHk8fbRI5cC8Tqey201LC4DjUovFzNGNNU6vzcOcesZlcw5
eGok9Xwu271kv8OZVg==
-----END CERTIFICATE-----