Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3137302e302f32332d3233203d3e20323636343834.roa
File:                     3137302e38332e3137302e302f32332d3233203d3e20323636343834.roa (raw, json)
Hash identifier:          kd9VxCzVaCdsDvAFKVFdFZnmfjdXefsQ01nU098RHxE=
Subject key identifier:   47:97:26:40:81:AD:97:03:6E:A0:8B:62:F0:8E:07:77:22:F8:C1:33
Certificate issuer:       /CN=34FD8D6B59688A2A0E731C5F8F910DC0BB622774
Certificate serial:       56962EEC954BB0F6CE73B513A216C7E0A9179091
Authority key identifier: 34:FD:8D:6B:59:68:8A:2A:0E:73:1C:5F:8F:91:0D:C0:BB:62:27:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3137302e302f32332d3233203d3e20323636343834.roa
Signing time:             Fri 06 Mar 2026 17:23:35 +0000
ROA not before:           Fri 06 Mar 2026 17:18:35 +0000
ROA not after:            Fri 05 Mar 2027 17:23:35 +0000
asID:                     266484
IP address blocks:        170.83.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.crl
                          rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:96:2e:ec:95:4b:b0:f6:ce:73:b5:13:a2:16:c7:e0:a9:17:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34FD8D6B59688A2A0E731C5F8F910DC0BB622774
        Validity
            Not Before: Mar  6 17:18:35 2026 GMT
            Not After : Mar  5 17:23:35 2027 GMT
        Subject: CN=4797264081AD97036EA08B62F08E077722F8C133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:c7:6b:06:05:cd:0b:f9:39:76:f0:8b:d0:
                    1a:93:00:e1:e5:f7:98:e0:2f:c4:7b:e3:c3:ce:cf:
                    02:74:b2:00:53:10:fa:5a:24:1c:a5:4c:23:9e:b3:
                    0e:02:91:aa:9f:a5:2e:99:bb:d1:29:b9:0c:68:27:
                    30:ea:a7:01:9e:c4:cb:31:3a:9d:3d:08:a8:92:04:
                    11:b7:64:4f:e8:99:f5:46:fc:2e:b0:d7:2e:1e:89:
                    18:55:e7:de:42:41:36:0d:30:06:8b:86:e9:1d:1c:
                    d8:9b:ed:90:73:20:0d:98:56:3d:22:1c:1a:db:4a:
                    4e:83:38:dd:03:d7:e3:f0:b0:ee:38:b7:86:1a:1a:
                    e6:c4:e1:03:e4:6c:e6:6b:60:f6:9b:21:51:29:4e:
                    69:36:f2:41:69:a3:c0:3c:d7:53:6d:b0:b4:6a:6e:
                    44:9d:2d:e4:c2:84:c3:27:8e:ed:42:fa:28:e9:ad:
                    52:5d:c9:a5:a9:53:ba:a1:34:e0:45:26:13:17:21:
                    44:43:a4:59:11:6b:76:f1:78:68:06:a9:88:d7:b8:
                    f6:4b:78:37:ed:0e:2f:c8:0b:02:be:fd:2a:f8:61:
                    59:ff:e1:c9:79:a4:df:ad:bc:67:49:7f:fd:0c:05:
                    02:de:38:7f:11:38:2d:be:22:a9:92:25:ff:d4:36:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:97:26:40:81:AD:97:03:6E:A0:8B:62:F0:8E:07:77:22:F8:C1:33
            X509v3 Authority Key Identifier:
                keyid:34:FD:8D:6B:59:68:8A:2A:0E:73:1C:5F:8F:91:0D:C0:BB:62:27:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FD8D6B59688A2A0E731C5F8F910DC0BB622774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/3137302e38332e3137302e302f32332d3233203d3e20323636343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:03:8a:d7:18:47:64:5b:3f:13:81:5e:64:5d:95:ae:15:f9:
         dd:09:d9:43:dc:e6:30:47:79:e2:3c:33:2f:c4:a8:61:4e:6b:
         ea:70:d6:4f:6b:24:bd:57:ab:8c:44:3d:b2:38:b7:ce:d1:53:
         34:3e:bf:76:52:a7:78:8e:60:8b:4b:12:f2:f6:60:82:6c:b0:
         30:94:a1:09:5e:21:f9:e7:cd:f3:54:7e:82:d4:73:d7:98:6d:
         8a:01:46:a5:22:35:49:0b:18:13:6e:3f:7f:4c:af:4c:c1:7d:
         3c:51:a5:62:b6:a8:81:cd:3a:31:ba:fd:22:ee:47:ed:fb:c7:
         a6:67:db:89:48:7d:e5:3f:7f:a2:1f:2a:cc:ae:fa:d3:a7:b0:
         5f:67:4c:9f:55:22:36:ec:47:69:61:76:31:9b:5e:ce:26:d3:
         86:6b:2b:18:cb:e9:5c:f2:93:aa:68:0c:3f:89:a2:39:99:5e:
         50:4f:b4:59:30:06:99:d8:e6:84:cb:2d:c9:fd:05:e6:34:16:
         db:87:92:c5:75:a7:08:6e:3c:8e:53:12:5b:e0:1e:51:8d:e2:
         ff:b3:15:8e:b6:99:01:77:da:94:3a:bf:65:25:96:94:5c:dc:
         22:17:70:f9:9c:be:72:1c:0e:ad:a2:13:ea:57:ce:03:88:4d:
         ac:50:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:52 2026 by rpki-client