Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
File:                     3137302e37382e36382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          iHHkHM00h1Kd8sEHnmp/GIGumZ8k97+8mmcqUr++qB0=
Subject key identifier:   7D:38:D5:0A:6C:11:AD:CE:05:15:16:19:5B:A9:04:CF:0B:52:14:04
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       10450FB05A09D579DF390686BB3E739190D083A4
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa
Signing time:             Sat 04 Jul 2026 13:43:59 +0000
ROA not before:           Sat 04 Jul 2026 13:38:59 +0000
ROA not after:            Sat 03 Jul 2027 13:43:59 +0000
asID:                     262669
IP address blocks:        170.78.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:45:0f:b0:5a:09:d5:79:df:39:06:86:bb:3e:73:91:90:d0:83:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:59 2026 GMT
            Not After : Jul  3 13:43:59 2027 GMT
        Subject: CN=7D38D50A6C11ADCE051516195BA904CF0B521404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:10:12:a0:41:7c:e7:0a:98:b1:6b:f3:55:
                    75:61:86:13:82:9d:36:25:d8:f9:4a:3f:24:34:ae:
                    aa:17:5c:b9:2a:35:00:fb:8c:95:61:70:ed:f4:0c:
                    ac:40:a2:88:2a:cc:79:de:ed:da:dc:30:af:cd:04:
                    1f:af:42:25:81:20:9e:b7:67:40:00:ba:74:67:11:
                    d2:1d:7b:45:d0:d2:36:f0:3b:22:e8:49:b9:52:b4:
                    52:16:ea:26:51:d9:4a:92:eb:2d:0c:69:aa:b7:32:
                    67:f7:9c:f1:ba:4a:63:db:6a:d9:bf:5a:35:51:4f:
                    6f:cc:94:4c:c5:2d:f2:dc:8c:7e:18:31:b3:22:11:
                    45:ae:18:66:6d:a3:f2:24:51:a1:1e:fe:a7:65:bf:
                    e6:51:fb:3b:a6:1d:08:e0:3b:0d:ad:d1:bc:c1:5a:
                    0a:d0:d6:eb:22:7d:7d:8e:5c:e0:46:65:dd:10:9a:
                    42:59:e4:d9:b0:63:d5:27:56:cd:28:ee:fb:6d:69:
                    34:72:1e:8b:53:d6:d7:b2:b5:82:d7:89:ae:2c:02:
                    f8:35:50:d4:04:cd:46:b9:de:78:fc:0a:5d:e6:9f:
                    fc:15:44:33:53:77:24:f2:cf:7a:e4:62:f5:8c:38:
                    4e:aa:8b:a5:d2:40:79:ba:0b:87:a1:ef:89:b5:71:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:38:D5:0A:6C:11:AD:CE:05:15:16:19:5B:A9:04:CF:0B:52:14:04
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e37382e36382e302f32322d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:98:08:49:8f:ab:0e:d7:c0:d8:58:2f:ca:0e:73:b5:10:
         bf:82:8e:66:f9:9a:7d:14:a3:6b:90:54:f4:9c:76:b6:ec:84:
         3d:d7:37:f6:d2:63:70:31:0b:c8:44:a0:9c:d0:87:8a:0b:17:
         af:df:e1:2d:89:c1:d2:5b:26:71:df:cb:7b:a3:50:79:fb:73:
         67:01:08:e6:0d:08:3d:31:5d:61:05:63:08:1c:cf:a6:41:84:
         ae:cb:36:bb:e2:be:e2:67:61:52:1e:b2:5a:5e:93:f2:4a:89:
         7f:a9:83:76:e2:38:b6:ac:a0:8f:1f:80:9c:73:c2:eb:ee:77:
         81:3c:6c:76:bd:28:ae:7c:6e:54:4f:51:08:ec:59:19:8e:1b:
         92:8f:56:ef:78:35:56:34:4b:95:0f:d1:82:3a:11:5d:18:2d:
         a4:76:60:62:de:b7:e8:eb:81:19:da:d0:91:48:92:92:2d:c3:
         38:c5:2d:f6:96:81:25:8c:df:4a:b6:f1:c7:86:84:be:32:5c:
         ca:07:1e:29:09:bf:a7:d2:4c:a9:7a:bc:83:7a:2d:66:fe:00:
         be:f7:2e:fd:5e:03:d5:70:14:3b:15:a2:95:43:e8:d4:37:f3:
         cb:9f:89:cc:95:d0:e6:84:52:0c:8c:19:49:72:31:97:38:ba:
         4c:96:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:09 2026 by rpki-client