Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32342d3234203d3e20323636343938.roa
File:                     3137302e3234342e37342e302f32342d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          dChsdfFyUH9r5wnjsL56hLV+2ZRWynn6CMxju9ELo+U=
Subject key identifier:   39:96:BE:66:EE:9D:8F:7E:AC:07:27:61:FD:D0:3C:7C:FC:A1:46:07
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       750C28DE07260DE2D3C8669E45550EFFFBF09A22
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32342d3234203d3e20323636343938.roa
Signing time:             Thu 16 Jul 2026 19:59:44 +0000
ROA not before:           Thu 16 Jul 2026 19:54:44 +0000
ROA not after:            Thu 15 Jul 2027 19:59:44 +0000
asID:                     266498
IP address blocks:        170.244.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:28:de:07:26:0d:e2:d3:c8:66:9e:45:55:0e:ff:fb:f0:9a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 16 19:54:44 2026 GMT
            Not After : Jul 15 19:59:44 2027 GMT
        Subject: CN=3996BE66EE9D8F7EAC072761FDD03C7CFCA14607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:94:dd:53:86:44:8b:57:5d:47:b9:93:46:
                    4a:9f:6c:22:27:47:5f:0d:a0:7a:85:cd:72:b4:f9:
                    77:cd:1e:7d:8b:1d:d0:2e:4e:2e:48:ec:c9:a4:07:
                    b1:b9:d7:67:e9:25:43:34:b6:f5:48:9e:0c:d5:d5:
                    f4:b6:36:12:da:0e:a3:de:1e:30:ad:b6:0e:2f:53:
                    b3:0e:65:b5:bc:bb:ba:6c:9b:13:ee:b3:76:51:a2:
                    26:a1:94:c3:a4:07:55:ab:35:69:4b:7d:80:e8:e0:
                    e8:2c:81:80:b5:2c:10:de:65:ce:c7:f7:dc:bd:9d:
                    07:a4:c3:45:a1:da:e8:cd:88:04:54:88:f2:64:ae:
                    24:0e:44:22:f7:11:e7:6c:bb:c5:8e:b2:ad:e0:57:
                    84:4d:c7:79:5b:e0:71:eb:36:78:b6:9a:ec:2e:20:
                    55:f4:dc:b6:0d:c5:52:4a:dc:26:47:d4:35:0f:b9:
                    69:87:ac:e6:c1:50:54:35:90:e4:db:39:c3:f4:8e:
                    38:e8:6d:b2:07:cf:d2:61:c0:f8:a5:f9:ff:f1:d1:
                    ef:6a:0d:be:50:cf:23:9f:f3:d2:e9:56:85:57:79:
                    b2:0d:18:32:07:03:df:ab:dd:7b:90:97:cf:92:24:
                    14:6c:06:ec:12:ec:84:db:ef:ac:9a:b0:75:fe:a9:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:96:BE:66:EE:9D:8F:7E:AC:07:27:61:FD:D0:3C:7C:FC:A1:46:07
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37342e302f32342d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:05:d0:20:e6:7d:56:b8:b4:74:ef:52:05:8b:03:37:dc:
         98:9a:20:60:c6:45:5f:00:ea:4a:c0:ee:8e:6b:d5:da:99:58:
         8b:a1:1c:6c:a3:ef:6a:2d:83:28:61:1c:08:19:e3:6a:2b:3f:
         73:d1:57:25:df:01:f6:5a:3b:54:a6:9d:80:bc:64:7a:51:99:
         6a:f6:75:ea:08:c3:28:29:f9:20:94:98:3d:9b:14:69:34:a5:
         86:ef:df:34:53:2c:6f:b8:cc:d9:1b:1f:0b:42:8e:56:7e:2d:
         7b:11:4f:f3:3f:90:d0:cf:07:35:0c:c8:f9:9a:98:5c:e4:bf:
         fb:1c:7a:a6:04:95:2f:6d:90:50:e3:1e:83:f1:82:0f:02:1d:
         e1:7a:3a:ee:04:c0:6d:5d:e7:ab:41:f0:99:0a:bd:e2:62:ef:
         48:fe:8e:dc:95:87:92:df:3e:de:c9:d1:d6:12:ea:38:dd:e1:
         dd:d3:b4:93:5d:fe:ea:a1:57:fb:10:e9:1d:62:1b:ff:14:74:
         fe:b8:e3:05:18:f9:e7:68:1a:5f:32:02:59:c0:b4:22:4c:5d:
         4d:45:13:cb:76:4c:c0:f2:db:83:52:b3:ed:f5:69:1a:b1:87:
         68:14:e7:25:0d:e3:e7:eb:19:a2:f3:e9:20:26:51:a0:2a:43:
         0b:f0:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:46 2026 by rpki-client