Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32332d3234203d3e20323636343938.roa
File:                     3137302e3234342e37342e302f32332d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          rNhDkGLHeIaoEOny3W37gjWXQh0RqCR2hS3u8sfK+1c=
Subject key identifier:   B9:B2:1B:BC:82:EE:1B:20:0C:8D:12:05:67:78:48:F7:F1:25:AE:7B
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       77723CACB3B7E81C0F220A3779316F925D4E0518
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32332d3234203d3e20323636343938.roa
Signing time:             Fri 17 Jul 2026 14:08:43 +0000
ROA not before:           Fri 17 Jul 2026 14:03:43 +0000
ROA not after:            Fri 16 Jul 2027 14:08:43 +0000
asID:                     266498
IP address blocks:        170.244.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:72:3c:ac:b3:b7:e8:1c:0f:22:0a:37:79:31:6f:92:5d:4e:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 17 14:03:43 2026 GMT
            Not After : Jul 16 14:08:43 2027 GMT
        Subject: CN=B9B21BBC82EE1B200C8D1205677848F7F125AE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:f1:82:78:c3:34:5a:c5:a3:fa:24:90:3f:
                    7a:dd:f2:00:fd:a5:70:bb:d3:e0:25:9d:68:a2:3d:
                    8e:61:72:77:3b:39:d8:e0:bf:1b:1e:db:cf:69:76:
                    35:b0:7e:80:23:96:72:29:80:7a:aa:ae:ad:6d:31:
                    54:51:96:37:a4:9a:d1:61:f1:4f:a0:9e:73:36:f0:
                    73:5c:70:5a:da:e0:49:5b:94:6a:a6:5f:3b:cc:80:
                    4d:9a:aa:bb:d4:7d:0e:5b:37:b3:ca:a2:e7:c1:d4:
                    53:ae:c8:b8:fc:14:61:a3:8f:4c:58:7a:f2:38:ea:
                    c1:29:b9:11:2c:b1:44:fc:7e:7f:2b:c7:f4:2e:a2:
                    a9:17:29:75:d9:eb:77:7c:37:3c:47:61:c9:1f:27:
                    19:ac:1d:2c:7e:96:d5:7b:36:9a:5f:e8:a7:31:7b:
                    c7:d0:a0:c6:95:71:22:79:4a:1f:20:69:ee:fd:09:
                    c1:d8:bb:65:8d:30:ba:3c:bc:30:39:93:31:a5:ae:
                    01:de:7c:f4:f8:44:6b:0d:60:e1:41:96:59:a3:e3:
                    8a:3e:4f:90:a5:2b:c0:7a:b0:44:28:3f:16:1a:c8:
                    50:80:fc:13:49:b9:56:5b:db:70:b3:d3:13:59:e8:
                    7d:7a:06:e6:a0:b0:ab:92:16:67:bd:61:f1:f7:86:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:1B:BC:82:EE:1B:20:0C:8D:12:05:67:78:48:F7:F1:25:AE:7B
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32332d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:b0:af:44:73:f9:89:4e:81:f1:ef:3c:65:28:98:23:58:
         45:a6:62:d3:e2:65:ed:43:5e:1b:22:d7:f0:cf:71:d3:f9:9a:
         89:c9:35:99:08:6a:39:3e:b5:c4:f0:69:c8:8a:a7:18:74:61:
         ab:fe:dd:bb:07:e5:bf:76:cc:a2:f2:70:ea:51:fe:a7:57:42:
         01:3d:a2:31:e1:90:f4:10:29:96:fe:34:c9:26:79:7c:da:fc:
         a8:29:3a:0e:9a:e8:30:2c:ca:3a:15:b4:0a:10:9b:b5:07:fe:
         ec:5d:c6:c7:21:5d:16:83:38:2b:e5:c6:5d:d2:b5:21:fb:cf:
         52:bc:a7:f4:5b:bb:8c:54:1d:92:90:7d:bf:28:2b:f4:32:f8:
         29:ce:b3:40:69:fa:0d:dd:49:18:3b:8d:f9:f2:ac:1d:a8:02:
         a2:30:da:4e:98:8b:75:aa:9f:64:13:53:17:d1:50:00:bf:7b:
         8a:eb:b5:5c:0d:e5:0a:63:af:00:1f:2e:6a:fd:10:cf:c7:a0:
         f4:ef:2b:ab:b7:ef:9e:38:af:58:36:56:24:ca:03:83:65:38:
         bc:9c:5d:a5:f8:d6:64:48:c1:9c:0b:c1:4d:1b:24:a4:c8:de:
         73:c4:fd:00:da:76:36:21:f2:79:61:b5:f8:70:5b:c7:9c:73:
         f6:46:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:00 2026 by rpki-client