Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32332d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          ahmkvY20VN0qsYo9CNVFWGoF11+m+BIaWBUFVCk4lSk=
Subject key identifier:   CD:E7:3F:18:35:60:AC:88:8D:42:AB:07:02:B7:C1:7F:51:D9:7A:87
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       222E94B043B979868F54D9FD53D860AF95DFD4D9
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3234203d3e20323636343938.roa
Signing time:             Fri 17 Jul 2026 14:10:52 +0000
ROA not before:           Fri 17 Jul 2026 14:05:52 +0000
ROA not after:            Fri 16 Jul 2027 14:10:52 +0000
asID:                     266498
IP address blocks:        170.244.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2e:94:b0:43:b9:79:86:8f:54:d9:fd:53:d8:60:af:95:df:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 17 14:05:52 2026 GMT
            Not After : Jul 16 14:10:52 2027 GMT
        Subject: CN=CDE73F183560AC888D42AB0702B7C17F51D97A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:fc:1f:eb:32:ef:3d:66:24:d1:34:11:30:
                    b5:22:88:cf:b5:d1:ad:a6:60:b6:52:fa:77:39:1d:
                    df:88:34:b9:9a:b1:3f:c4:10:1f:3b:60:51:58:49:
                    d2:c2:8a:ec:7d:64:cc:c3:8b:d1:e2:16:44:0b:3f:
                    98:c5:3c:89:23:96:d2:43:0d:bf:84:17:a2:4e:64:
                    cb:76:15:47:1e:4c:cd:ab:b5:da:c7:2f:f8:a5:ba:
                    9a:41:e0:a1:6a:d4:51:55:d0:3b:af:5a:3a:23:26:
                    0b:79:4e:3b:75:ca:fc:f3:e5:c7:c5:e6:9d:0b:54:
                    e6:a8:0c:96:c5:72:77:b6:9a:f1:c5:86:96:83:21:
                    90:07:e1:9a:21:16:d5:d0:91:82:78:c0:27:b2:0b:
                    42:22:14:e0:f2:a6:64:fc:1e:3b:e6:87:64:d9:9d:
                    48:79:7f:ff:27:2c:54:34:e1:89:19:93:fb:85:0a:
                    5b:2e:49:6d:df:57:cd:7a:f6:fa:c6:ec:ba:4a:65:
                    6b:35:42:bd:c9:7e:c0:f7:9b:a2:6a:d4:d8:5b:1d:
                    ff:fc:bf:ea:13:30:ed:1c:0d:c2:9a:fe:69:4b:61:
                    6b:4e:66:f6:e8:dd:be:4e:7a:cd:cd:fb:4d:81:7e:
                    42:c5:95:03:ea:ed:05:04:1c:77:a7:54:ff:c9:56:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:3F:18:35:60:AC:88:8D:42:AB:07:02:B7:C1:7F:51:D9:7A:87
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:ea:7b:ca:22:4f:db:e2:8b:7c:ce:b5:63:c3:69:82:d8:6b:
         62:47:16:f3:c4:38:9f:12:ac:61:67:fb:5a:16:73:06:3f:e3:
         cc:d9:b1:b4:3a:e0:ef:97:69:33:d0:2d:ec:e9:1e:c4:32:73:
         00:74:b9:b5:fd:12:53:ee:b4:c3:45:0c:40:12:d4:ea:d9:a2:
         6e:9b:56:e1:9a:b4:75:5f:95:47:0d:6a:4e:ad:7c:c6:06:7b:
         60:a6:16:34:b0:cf:5d:a7:12:d4:bc:c9:9e:39:c6:0c:5d:bc:
         23:1a:13:5e:b5:39:8e:9f:e0:5b:56:73:26:eb:de:b3:d8:72:
         d7:84:ae:f5:ac:84:35:c9:15:98:f0:53:d1:43:8b:7e:f3:5a:
         83:4f:6d:1f:99:0d:1d:81:d3:63:af:47:59:88:72:c4:65:90:
         c9:45:f4:45:f8:f6:79:4d:70:ce:3a:88:12:88:2d:49:e7:4e:
         15:bf:b2:18:2c:71:3c:5c:a9:cf:4b:6b:5c:bf:6f:f8:46:e1:
         77:62:60:ec:fd:79:de:b5:26:0f:70:96:f0:c7:19:57:9a:d0:
         f0:ec:79:db:1f:7d:0c:66:01:e1:a8:76:95:06:eb:54:a2:20:
         23:75:ca:1e:88:cc:bc:e7:69:95:28:09:8a:54:cf:89:fc:fe:
         13:30:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:58 2026 by rpki-client