Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa
File:                     3137302e38322e342e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          ACbUGPFQnEeZcSjXxAZ7+bzT3VRH/aU8GlDDAGz68aw=
Subject key identifier:   C9:1D:16:34:16:48:86:C8:4A:52:47:AD:9C:34:8D:A0:22:43:6E:B4
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       1033EDEDA212D219901C89975B45D2270F3E4A18
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 11 May 2026 19:49:45 +0000
ROA not before:           Mon 11 May 2026 19:44:45 +0000
ROA not after:            Mon 10 May 2027 19:49:45 +0000
asID:                     266433
IP address blocks:        170.82.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:ed:ed:a2:12:d2:19:90:1c:89:97:5b:45:d2:27:0f:3e:4a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: May 11 19:44:45 2026 GMT
            Not After : May 10 19:49:45 2027 GMT
        Subject: CN=C91D1634164886C84A5247AD9C348DA022436EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:cd:64:a0:ef:ab:b7:62:ee:f7:0e:2f:88:
                    c1:4a:70:53:91:62:74:5c:7b:8c:80:9f:59:5c:26:
                    be:97:f1:d6:9d:ec:63:dc:fe:1b:c4:b0:55:9e:5e:
                    83:39:e8:2d:e5:f5:aa:1f:ac:25:04:d7:8a:10:3a:
                    cf:19:c1:54:1b:b3:3b:a1:ae:e7:2d:17:b3:e6:bb:
                    81:69:d7:c3:d1:9f:bd:09:f5:78:3a:5a:11:04:3e:
                    49:e7:e4:57:c8:d1:40:66:f5:c4:50:3b:7b:3e:3f:
                    2b:ce:0b:66:22:cd:b8:eb:e8:0f:d1:98:95:b3:92:
                    45:73:b3:71:dc:7e:c9:2d:3e:41:75:dd:aa:c2:7a:
                    14:d2:a0:ce:2b:6c:18:2f:d0:ae:64:93:7a:0a:83:
                    af:e4:fc:13:0b:81:38:b8:e9:8d:7e:a4:81:35:40:
                    7f:ca:ce:23:56:7c:5c:80:52:78:44:4f:3e:e1:81:
                    4d:ea:2d:65:b9:13:08:6e:c4:ff:d0:87:81:bd:84:
                    3d:36:fe:57:64:ef:e1:1c:5c:bd:ee:eb:c6:91:8b:
                    ee:1a:ff:89:5c:cc:a5:05:95:33:6d:60:34:9a:4b:
                    c5:23:58:e1:20:b3:ea:67:66:0d:83:af:65:09:52:
                    e9:d0:11:bb:77:72:dd:bf:36:cc:6c:ba:92:26:86:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:16:34:16:48:86:C8:4A:52:47:AD:9C:34:8D:A0:22:43:6E:B4
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:0e:46:80:a3:05:b1:46:1e:b6:ab:08:92:66:5a:cd:e0:
         0f:98:9b:6f:05:85:91:35:e7:11:96:c9:cd:1f:06:92:1c:fd:
         66:1f:be:d7:a7:64:50:8a:9c:df:e0:a8:54:72:f9:82:1e:00:
         fd:b4:d0:14:55:17:f0:dc:d5:37:8f:93:a0:4e:15:c7:3e:16:
         b3:8c:eb:34:07:9a:2e:09:4e:92:7c:24:50:90:be:16:b0:92:
         57:57:75:0e:2a:77:50:5f:06:8c:61:d0:61:5d:e5:3b:ea:41:
         04:5a:74:a8:43:47:64:7f:57:7d:8e:12:8c:a8:6a:0f:77:32:
         27:7b:63:5a:1c:0b:a8:53:b0:11:07:99:46:7c:07:3a:db:c5:
         70:8b:d4:42:cc:61:ff:44:d5:20:73:e9:f0:78:8f:eb:a6:50:
         f6:3a:90:44:00:f2:6a:1a:8f:f3:b5:d7:66:3e:23:c5:c3:b7:
         d4:85:84:df:c8:3d:9b:2e:8b:aa:6a:a8:0e:2d:36:b3:51:93:
         08:f2:f3:1e:c8:a1:bd:f0:16:45:e4:3b:6c:89:0f:c7:d1:12:
         66:a5:09:dc:bd:27:40:ff:8c:d6:44:ab:61:68:d1:95:90:bf:
         7e:82:06:ac:69:4a:38:cd:b3:75:59:f1:4d:98:b1:e8:06:f9:
         e0:f2:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:52:41 2026 by rpki-client