Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133352e302f32342d3234203d3e20323634393832.roa
File:                     3137302e302e3133352e302f32342d3234203d3e20323634393832.roa (raw, json)
Hash identifier:          WpSyqlM8q9vw918/C5O5QDmq89kkMxxcsa3wy6hGVjY=
Subject key identifier:   9D:A9:0C:7E:29:3F:EE:5B:08:F2:D3:C7:F9:C0:CB:40:AA:0F:53:1E
Certificate issuer:       /CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
Certificate serial:       153EF3C4E6EC86BE84DD30AA38C5723DD7869421
Authority key identifier: 3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133352e302f32342d3234203d3e20323634393832.roa
Signing time:             Thu 12 Mar 2026 20:54:57 +0000
ROA not before:           Thu 12 Mar 2026 20:49:57 +0000
ROA not after:            Thu 11 Mar 2027 20:54:57 +0000
asID:                     264982
IP address blocks:        170.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl
                          rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:f3:c4:e6:ec:86:be:84:dd:30:aa:38:c5:72:3d:d7:86:94:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
        Validity
            Not Before: Mar 12 20:49:57 2026 GMT
            Not After : Mar 11 20:54:57 2027 GMT
        Subject: CN=9DA90C7E293FEE5B08F2D3C7F9C0CB40AA0F531E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:aa:8c:67:25:d7:36:0b:ce:72:4a:2d:e0:
                    4f:5c:af:f3:7f:1e:e6:8e:e3:94:5f:95:d4:dc:93:
                    76:19:db:8b:40:80:5c:b0:3c:d8:b5:50:56:6d:20:
                    8f:11:f5:f5:9b:fc:89:2a:7f:86:df:6a:58:bd:dd:
                    aa:62:97:cf:c8:86:4c:a2:ff:44:07:3c:bb:4f:d3:
                    0d:09:11:e4:ba:95:9f:10:21:ba:69:57:34:9b:73:
                    ff:06:cb:59:53:ca:83:ad:8c:6b:7a:aa:a9:7a:25:
                    8e:24:04:79:20:bb:ed:57:76:de:28:ca:72:a3:64:
                    99:58:db:12:1f:1f:e4:b8:85:30:9e:2f:a2:27:6b:
                    9b:0e:7c:12:31:92:21:60:f9:06:65:73:f7:8c:f0:
                    a1:75:21:cf:ee:69:35:c8:38:ae:60:5e:78:e5:42:
                    e4:f0:c2:cd:a7:0c:ba:57:a4:55:5d:36:10:5c:cc:
                    d2:7d:e4:91:5a:44:e8:16:61:62:00:f3:f7:8d:75:
                    71:b7:98:ba:c7:a3:bd:8c:ef:34:8d:68:21:15:26:
                    ad:67:71:22:f8:fb:c1:a1:ca:6c:b9:ed:84:68:39:
                    7c:08:03:43:2f:24:50:a0:b9:26:68:fb:2c:46:06:
                    9e:f8:d7:61:e2:91:79:0e:c6:42:13:21:b5:d0:a8:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A9:0C:7E:29:3F:EE:5B:08:F2:D3:C7:F9:C0:CB:40:AA:0F:53:1E
            X509v3 Authority Key Identifier:
                keyid:3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133352e302f32342d3234203d3e20323634393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:74:ec:e6:3a:15:64:79:64:d4:40:13:0b:87:a4:b9:dd:
         29:a6:c6:59:97:20:65:a3:99:2b:1e:e6:56:62:fc:c1:60:fb:
         93:79:a3:29:a5:89:ed:c4:81:de:15:62:5c:95:82:e1:32:ec:
         be:e4:f2:c6:2b:95:fb:8d:01:82:d3:cd:b0:18:fe:ec:64:1c:
         0c:15:80:7b:a9:3f:e2:eb:b6:e7:79:08:d2:1e:ae:38:d0:ca:
         d0:76:92:e2:c8:59:81:4a:50:ba:e7:2f:8b:75:2d:47:ee:61:
         1f:62:18:41:96:1a:6b:43:45:53:b6:a7:df:5e:8c:6e:46:76:
         9b:0c:bd:5c:39:6a:f7:b5:97:57:8c:d9:db:c6:f7:00:a3:00:
         27:4e:43:14:13:1e:3c:8c:1d:de:f4:eb:84:72:5f:23:34:15:
         9e:20:83:2a:58:2a:64:5b:49:f3:0b:7c:dc:49:3a:f3:8c:1e:
         c9:a2:07:48:c7:0f:05:4b:b3:94:f7:4f:b5:64:d1:09:73:5a:
         a9:f8:a7:46:87:74:ea:4c:27:d3:ec:21:6f:89:6c:06:3c:f6:
         62:d7:17:4e:4f:01:38:07:c6:15:fc:ce:98:02:07:ed:ce:83:
         cf:c5:38:09:54:ae:d0:8f:af:4d:3f:88:7c:af:e9:03:f6:3a:
         46:87:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:29:15 2026 by rpki-client