Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e38332e3130342e302f32322d3234203d3e203238313538.roa
File:                     3137302e38332e3130342e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          +WSpqt44dixrQvXn4KUzaLluWjkRNtbBT4FUgDOtnnw=
Subject key identifier:   34:AA:9D:50:29:FA:8F:48:3C:D2:20:CC:29:37:97:77:91:CC:CF:35
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       64A1ED28FF16C94B407ED670530B431B474BD7B8
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e38332e3130342e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     28158
IP address blocks:        170.83.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:ed:28:ff:16:c9:4b:40:7e:d6:70:53:0b:43:1b:47:4b:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=34AA9D5029FA8F483CD220CC2937977791CCCF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:4e:a4:ba:cc:36:59:0b:d8:77:a8:49:06:
                    d6:fe:60:1c:27:f3:ee:c2:6b:ca:de:a0:20:ad:70:
                    5f:d8:c2:e8:b0:a5:d1:9e:b4:be:b0:4b:a3:7a:c9:
                    f9:b5:c4:2d:dc:d0:d1:1e:58:88:a8:ac:34:c9:f2:
                    dd:64:87:62:81:9c:52:4c:65:31:c0:26:12:e8:af:
                    a7:e8:9f:64:ce:72:16:fc:79:d9:de:cd:1f:69:95:
                    57:81:02:ff:0c:f1:a5:68:71:e5:e0:21:3d:5c:56:
                    16:d3:cf:b8:6e:fe:33:b6:a3:39:5d:c7:72:01:f5:
                    32:b2:1f:30:25:d5:88:09:8a:88:17:df:15:79:52:
                    c3:53:6e:df:54:1f:bd:5c:72:50:ad:0e:4e:c0:7a:
                    cb:8a:4b:fc:88:3b:64:96:4f:88:d0:6f:ce:f4:d6:
                    de:43:c1:b0:ba:fb:7a:9b:1d:72:ec:39:60:14:89:
                    8a:00:d6:9f:6f:0b:08:2e:d9:9e:b0:f3:c4:3e:3c:
                    30:b3:0e:8b:a2:ca:12:97:75:14:e1:43:a4:2e:da:
                    f9:f1:3e:72:c5:29:19:d1:61:87:d8:52:ba:ac:e0:
                    81:de:c3:6c:bb:d1:eb:da:bd:d3:40:c8:b5:d0:9a:
                    a6:23:e9:ac:15:e4:65:34:f8:a2:50:fb:44:52:04:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:9D:50:29:FA:8F:48:3C:D2:20:CC:29:37:97:77:91:CC:CF:35
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e38332e3130342e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:61:42:c7:22:15:30:96:96:b9:c9:04:ff:ac:d9:ed:1d:85:
         2d:83:f7:bc:c1:ec:5e:b2:c2:bb:9d:55:61:25:c3:67:ff:bf:
         49:1f:53:ca:bb:51:77:e6:58:d5:1d:53:d5:87:e9:d5:f4:3d:
         1c:39:24:cf:cf:dd:b5:e6:7d:76:68:4d:2f:68:ec:cd:5a:f9:
         17:9b:28:78:fd:91:05:a6:12:6d:fc:36:b7:88:7a:c7:79:42:
         9c:f1:3c:2e:c2:6e:cd:c6:e0:8f:52:8f:2a:41:93:f4:94:e6:
         05:60:3e:64:84:e8:ab:a3:38:90:d7:51:dd:3d:b4:57:4b:c4:
         51:29:c4:8d:3c:f0:8b:e1:05:f9:41:6c:21:c7:2f:fc:6a:7b:
         80:6e:b1:75:25:c1:54:51:2d:6d:53:13:9e:a4:72:d5:7e:b1:
         0d:3c:fa:06:55:55:21:01:b7:65:c6:02:fa:ed:41:af:21:03:
         3b:8b:ba:f1:98:ad:69:05:f6:f7:38:d3:c4:9e:ae:7a:03:7a:
         eb:0d:30:5a:29:da:8b:f5:75:84:7c:56:db:32:72:8f:5e:bc:
         95:10:a2:f4:86:2f:ab:b5:20:e8:cc:b3:5c:00:f1:fb:e9:62:
         15:db:91:ac:fe:e3:9c:ae:59:dc:1a:9e:2d:bb:ef:7b:af:e8:
         44:18:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:33 2026 by rpki-client