Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233382e34382e302f32322d3332203d3e203238363439.roa
File:                     3137302e3233382e34382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          c48mW5S5EPDsSWWIY2QJLzLkJieSHgf6YYMpdWK2IbE=
Subject key identifier:   C3:22:88:3D:FA:7F:79:9A:F8:67:21:50:8E:97:85:B7:22:C9:59:45
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       6C41DAB9E99686927CCCAAAE8BBC6E3463CD0623
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233382e34382e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        170.238.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:41:da:b9:e9:96:86:92:7c:cc:aa:ae:8b:bc:6e:34:63:cd:06:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=C322883DFA7F799AF86721508E9785B722C95945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:83:fe:eb:ba:21:d3:85:d5:d5:9a:da:62:
                    64:a9:6f:b4:fb:55:e0:b7:7b:fb:00:1f:75:3b:fa:
                    17:2e:4e:77:ff:e5:a2:dc:aa:ca:d1:43:80:70:50:
                    c1:61:90:7d:60:c1:8d:d0:41:64:fa:1c:c4:10:02:
                    3e:46:bc:71:93:e9:98:1a:c0:89:bf:fd:b3:de:55:
                    db:35:87:70:f2:b5:2b:99:56:55:aa:8d:37:1e:69:
                    71:a7:c7:f3:14:16:4a:05:91:bd:fa:34:61:26:d7:
                    be:de:b8:e7:af:0d:4c:06:86:eb:4e:40:d9:7d:d2:
                    90:4f:6d:45:c2:68:fe:ac:4f:6c:33:bb:16:f1:4d:
                    66:01:4b:14:5e:ff:2e:e1:3a:b4:a3:c0:5c:fe:ba:
                    1c:b5:ad:a8:86:2b:3c:92:29:20:98:a1:b3:15:9a:
                    29:64:c7:60:41:0e:d6:b5:55:39:0d:28:16:26:6a:
                    9e:bd:6f:63:d3:03:57:9c:a1:5b:c0:28:6f:e5:0a:
                    3a:04:b6:b1:fd:4b:20:a4:69:86:3a:8c:da:23:cc:
                    1c:41:0c:02:df:02:16:61:d8:94:da:f0:0c:03:f2:
                    9b:9a:0b:c5:4c:7c:af:3c:d1:55:a9:5a:80:97:2a:
                    c5:ba:5e:87:77:e7:9e:f9:58:1c:93:fc:2c:0b:d4:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:88:3D:FA:7F:79:9A:F8:67:21:50:8E:97:85:B7:22:C9:59:45
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233382e34382e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:88:0d:a8:ca:38:08:56:54:38:df:e4:5f:0a:32:c1:54:70:
         da:24:31:e5:52:35:ed:22:54:8f:94:46:33:f0:70:fa:16:cf:
         16:ec:e3:ee:c2:82:5f:64:57:17:20:88:21:33:d6:f2:0d:14:
         20:8d:1f:87:35:5d:d6:53:bd:08:43:96:e5:aa:a2:2f:76:f1:
         40:c7:92:24:db:54:24:de:3b:c7:5f:60:6e:91:fb:eb:1a:1c:
         e5:e3:88:e7:c7:a2:e1:48:ac:ab:e1:1e:43:4b:7b:f9:e7:6b:
         65:0c:3a:f4:10:b0:5a:00:0c:a5:f1:3e:7f:2b:ec:62:34:3c:
         fb:71:4a:76:7f:77:b3:47:21:21:e0:2a:85:15:4e:14:64:3c:
         11:52:d8:ab:b5:3a:69:22:b4:57:e2:87:b8:2d:25:56:fb:9b:
         da:87:e9:51:a6:0c:f0:be:6f:9c:a4:f9:6a:a7:f8:db:ce:7c:
         64:8e:0b:2e:02:bc:78:2e:90:22:3d:a5:6c:01:2a:f5:8d:e9:
         78:42:ae:41:85:5f:e9:6e:e5:98:5d:91:90:ff:eb:de:c6:b0:
         4b:c6:78:33:e2:56:49:5f:90:fc:fa:a9:b6:0a:98:60:d3:ef:
         14:ea:39:96:5b:b8:d0:81:6a:1d:be:b3:9d:08:e4:dc:2d:8f:
         68:1f:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:27 2026 by rpki-client