Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          wk+ytcmj+MZe6ujq+6En41RPUr6eUygC4NlDnvuo1Iw=
Subject key identifier:   8A:7D:DB:9B:73:65:95:74:9E:23:D4:37:E7:A8:72:3C:A5:BA:7C:53
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       0D2B27869211377C8CFCFC06BCEC3400B988B93D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:44:01 +0000
ROA not before:           Sat 04 Jul 2026 13:39:01 +0000
ROA not after:            Sat 03 Jul 2027 13:44:01 +0000
asID:                     28201
IP address blocks:        170.239.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2b:27:86:92:11:37:7c:8c:fc:fc:06:bc:ec:34:00:b9:88:b9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:39:01 2026 GMT
            Not After : Jul  3 13:44:01 2027 GMT
        Subject: CN=8A7DDB9B736595749E23D437E7A8723CA5BA7C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:dd:e6:a4:a1:e0:83:2c:11:c7:e9:d4:bf:
                    fa:7c:aa:b6:47:2d:12:42:c9:2a:6b:06:fb:34:9e:
                    79:b0:d9:86:9c:99:7f:5b:45:27:27:eb:b2:b6:64:
                    84:49:e0:2a:9a:f8:5b:0b:fa:5e:89:6a:f8:6a:f4:
                    4c:63:a7:f4:78:0a:60:2f:4f:50:61:f8:4b:37:a3:
                    c4:02:d1:5f:25:c7:11:82:5f:ca:48:67:ac:a9:3f:
                    c6:28:dc:03:24:86:40:5d:8d:f5:80:e4:0f:ea:3a:
                    a0:26:7c:61:88:52:9f:98:d4:d0:d6:d2:20:d2:44:
                    95:55:75:04:15:f7:64:ad:d1:f6:ba:6d:ee:cf:be:
                    cb:cc:2e:3f:3b:34:be:e3:89:a3:32:aa:71:b2:71:
                    fb:31:ef:c1:d6:7b:cf:c8:5e:be:1c:8e:f3:97:88:
                    0f:6e:a0:46:83:fe:9a:a7:33:2d:be:41:f5:03:24:
                    44:c2:63:06:e8:c9:6e:2c:1c:f7:db:80:b7:44:fa:
                    a3:3d:0a:ae:a1:c3:04:41:88:d4:c4:3a:17:e5:0c:
                    61:80:87:ac:f6:ce:f4:88:44:28:6c:2b:a1:9a:c7:
                    1f:02:c5:7c:91:eb:de:22:da:26:3e:92:e9:c3:b7:
                    83:28:6e:cb:d4:4c:b3:40:d4:2e:7f:d1:b0:ca:d1:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:DB:9B:73:65:95:74:9E:23:D4:37:E7:A8:72:3C:A5:BA:7C:53
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:69:d0:37:f1:7e:51:c3:2d:dd:ec:dc:8b:24:b6:f4:be:
         47:05:a1:5c:1a:82:77:47:09:1d:5e:84:f1:b5:7b:3c:92:0f:
         eb:e9:56:2b:08:3c:48:4a:3b:84:6a:36:f9:3a:3b:09:f0:e6:
         dc:91:9e:7e:5e:26:f5:2f:20:63:47:52:f0:39:07:2f:fd:d8:
         3a:c8:67:5a:6b:fe:3b:72:97:f6:b2:1d:94:c4:87:e7:a9:7c:
         65:5e:35:17:c0:fc:a2:0d:ef:a0:17:37:57:d9:9c:11:a1:d9:
         c5:56:8c:90:3e:5d:99:3a:ba:e5:3a:7c:84:a2:5b:25:7a:8b:
         da:df:ab:88:52:0b:19:e7:94:49:a4:24:e2:0c:da:45:8b:77:
         c8:6c:e2:30:fc:74:d6:dd:5a:96:87:b4:1f:5c:38:f4:3a:b8:
         ed:41:57:de:82:ba:0d:d1:4c:a5:e8:40:2c:48:49:0b:11:48:
         c8:ea:41:a7:f2:ff:f7:70:d3:cf:5d:fb:1e:c8:fc:dc:5a:81:
         b9:d9:2c:59:fa:60:6b:b7:66:e5:4e:4c:95:07:3a:de:bd:d3:
         cc:b6:62:e1:06:b0:06:fe:56:42:82:ba:96:37:9a:93:b8:87:
         c4:76:52:3d:46:ac:b5:ec:a6:78:6a:a6:6f:b5:3c:2d:cd:10:
         c2:5d:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:22 2026 by rpki-client