Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          3L0AceGZ8lkQBkzuzcXOT343C71kJBUiG1Ce4X7uDcE=
Subject key identifier:   11:BB:64:14:F3:58:EE:1D:69:37:06:CF:50:5E:25:00:E3:1C:AC:5D
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       0101FF58E44DEE33DF2891D573D51F694D9189CC
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
Signing time:             Thu 12 Mar 2026 17:20:06 +0000
ROA not before:           Thu 12 Mar 2026 17:15:06 +0000
ROA not after:            Thu 11 Mar 2027 17:20:06 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:01:ff:58:e4:4d:ee:33:df:28:91:d5:73:d5:1f:69:4d:91:89:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:06 2026 GMT
            Not After : Mar 11 17:20:06 2027 GMT
        Subject: CN=11BB6414F358EE1D693706CF505E2500E31CAC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:ef:90:b9:2d:5e:2b:a2:ce:6d:a5:c2:5f:
                    84:3a:94:fd:c8:49:8c:19:9f:94:a3:18:30:8b:3f:
                    22:53:6c:e9:32:8e:5f:3b:f2:73:a7:38:7c:52:41:
                    4c:e5:e4:6a:31:93:17:ac:8d:ae:f3:76:38:25:99:
                    8e:b0:68:d6:ca:dd:e2:5f:9f:b3:6c:10:5e:e2:e1:
                    2e:6b:89:54:08:30:f4:84:e4:6e:dd:0c:43:ef:6e:
                    d1:ca:45:6a:36:17:08:40:78:71:83:b8:af:66:30:
                    b5:35:69:a0:34:d8:9d:bf:24:ec:15:21:82:31:15:
                    88:53:cf:9f:ba:bb:db:cb:7b:c2:4b:00:ba:1d:7a:
                    9b:f9:a2:53:99:35:d6:40:22:ff:99:00:90:70:f9:
                    c3:79:7e:f4:78:24:a0:e0:d8:47:e2:75:c5:a6:28:
                    0b:bd:67:e5:bf:19:0f:ba:99:19:f3:72:dc:01:32:
                    82:5d:f3:e7:0e:b8:2f:11:32:3f:1b:66:8c:5d:3a:
                    02:99:48:0e:a3:74:0e:7c:15:a1:3a:31:f3:3b:23:
                    ba:32:c4:31:7d:23:f1:6b:d3:e0:60:14:c2:e7:09:
                    9e:c6:d1:88:39:95:ea:9d:f8:e7:35:b6:0a:06:5e:
                    f2:ee:22:5c:be:b5:b2:b9:83:92:67:a3:a6:44:15:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BB:64:14:F3:58:EE:1D:69:37:06:CF:50:5E:25:00:E3:1C:AC:5D
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:56:fd:43:b0:85:ed:c1:08:8d:0e:4d:43:08:bb:a1:0c:
         72:b9:e8:13:01:f3:91:dd:7d:2b:4a:d7:0e:ce:9c:b3:1a:55:
         3a:e7:ef:4f:fa:97:5d:8b:77:1a:5d:4d:af:10:17:00:60:34:
         16:e7:95:6e:24:c3:f5:8e:71:b0:be:d7:db:26:65:47:30:e3:
         19:b2:0b:a2:d9:c7:0b:aa:36:0b:6e:4e:81:b6:a0:b4:0b:5b:
         31:e1:e8:d4:74:8b:9d:d1:a3:3e:fd:63:69:2a:2d:31:69:97:
         49:dc:5b:fa:b9:1e:6f:68:7b:b0:43:fd:b5:40:cd:21:9b:2e:
         31:29:57:7c:f9:e1:3b:5c:09:49:56:f5:1b:3b:6b:02:ae:bc:
         2a:84:6f:05:c9:c7:03:e0:f2:b0:4d:19:5b:7c:e3:5f:ad:d1:
         fe:20:3e:9e:e1:90:45:c7:d2:10:19:6d:5f:5e:08:08:36:c9:
         ba:fa:c7:0f:06:03:57:96:d0:36:4c:13:c8:34:f8:d6:9a:86:
         b2:81:34:e1:02:cf:3e:a4:6f:05:9f:c0:57:92:0c:03:bd:1f:
         8f:d9:53:ca:44:cc:9a:0b:9a:e7:8d:c9:6a:f5:f5:c8:0d:1c:
         65:d9:36:8d:97:55:cb:e9:a8:0e:7c:9c:fa:2e:92:80:dd:07:
         19:63:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:46 2026 by rpki-client