Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32332d3233203d3e20323731313630.roa
File:                     3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (raw, json)
Hash identifier:          4V6/8XRGdIFW6HKwVui+GXH0vasvGEREWkJLJvKm2bw=
Subject key identifier:   43:D6:F5:F9:B1:92:E5:A8:41:6E:6E:3F:A9:BA:DA:61:2B:33:EC:D1
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       030A462D13E8F2305FCB9D7758E8633976809216
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32332d3233203d3e20323731313630.roa
Signing time:             Mon 16 Mar 2026 20:03:02 +0000
ROA not before:           Mon 16 Mar 2026 19:58:02 +0000
ROA not after:            Mon 15 Mar 2027 20:03:02 +0000
asID:                     271160
IP address blocks:        179.48.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:46:2d:13:e8:f2:30:5f:cb:9d:77:58:e8:63:39:76:80:92:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Mar 16 19:58:02 2026 GMT
            Not After : Mar 15 20:03:02 2027 GMT
        Subject: CN=43D6F5F9B192E5A8416E6E3FA9BADA612B33ECD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:bc:6b:7d:8b:6a:ee:07:01:da:0e:7a:95:
                    78:ec:0d:d6:a8:6f:dd:1d:13:f9:59:ec:88:7e:a4:
                    72:7f:40:5d:2f:0c:e0:30:b5:35:e5:86:0e:54:af:
                    24:8e:a8:97:a8:8b:71:37:c9:fa:54:95:fd:af:67:
                    e0:c4:06:da:98:0b:73:7e:a6:d0:57:cd:f3:3a:9f:
                    c9:ba:56:c8:68:c2:61:79:26:d7:b5:e7:8a:d7:12:
                    1f:0c:ab:19:cd:17:a8:61:8d:90:56:27:a4:18:c5:
                    a5:7e:66:08:66:21:5d:ae:b5:a7:25:6e:8d:2d:60:
                    3d:03:d0:fa:13:8c:d9:7b:d1:09:c8:3a:08:93:c5:
                    91:09:2d:4a:71:e6:00:32:a0:b1:44:66:05:90:12:
                    e9:5e:77:91:90:02:7f:69:e5:f8:8b:94:d5:b0:12:
                    26:5a:8a:50:7c:92:8e:e2:3c:18:fb:3f:ff:81:cd:
                    03:3b:d6:ee:0a:2e:0f:2f:55:80:da:90:c7:23:4b:
                    67:87:08:a5:f3:c9:8f:dc:3c:7c:84:a7:67:dd:f4:
                    71:51:a5:b6:e6:b5:b9:12:2a:97:05:23:55:b4:f1:
                    a0:d2:48:e4:04:f2:27:5f:1f:33:4b:81:84:88:91:
                    77:b9:2c:f8:ce:5b:69:4f:99:69:bc:cc:24:a4:fe:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:F5:F9:B1:92:E5:A8:41:6E:6E:3F:A9:BA:DA:61:2B:33:EC:D1
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32332d3233203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:83:da:d7:48:18:5b:45:2d:b3:ba:2f:77:0c:cf:84:c5:12:
         cb:8f:6a:4a:ce:18:0c:94:69:c3:e5:c5:7b:aa:65:9a:5f:45:
         b3:2b:87:53:9c:55:f2:6e:ad:83:46:4c:d2:20:f5:2c:44:e7:
         1c:eb:82:0d:63:a5:07:b0:ba:32:ab:3b:dc:98:ad:15:c2:70:
         61:70:ee:c7:c9:6f:1b:4e:62:57:d2:33:bb:31:48:63:5f:9a:
         2c:38:9a:01:6c:d8:c9:6a:a4:39:81:55:a5:f6:e0:a3:4e:9e:
         7a:dd:f0:75:04:77:96:2d:bb:b1:ef:5a:a5:1d:22:82:39:75:
         58:fb:02:88:44:65:81:97:e3:dd:de:dc:7f:fc:0b:65:26:ca:
         1a:25:6c:12:98:ec:2e:63:0b:85:db:7f:b1:aa:f7:57:b3:ff:
         10:21:4e:1e:bb:e3:28:87:26:e7:35:67:7a:18:fa:cd:47:7c:
         03:9f:ef:7e:05:0a:97:63:c2:a4:40:b8:a9:c8:6e:2f:fd:b5:
         01:16:14:d0:f2:ca:8a:f8:52:8f:97:c9:78:fa:00:d4:44:27:
         d1:6b:b0:5e:70:a8:57:94:fc:bd:e3:85:a7:f8:a6:bb:d8:29:
         5a:e1:c9:96:70:68:7c:bf:1e:0e:e5:3b:c2:23:1a:ef:7d:57:
         43:fd:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:45 2026 by rpki-client