Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32332d3234203d3e20323634303133.roa
File:                     3137302e302e3135322e302f32332d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          hx4Tp/99ihK6yfWsnCluy/irOMX17UE9qWREGz/lpAA=
Subject key identifier:   6E:24:B2:A1:81:86:E0:DE:F7:53:75:B4:91:D7:84:C6:4E:9B:7B:B3
Certificate issuer:       /CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
Certificate serial:       62F8721BE87249B24C9A96546978B556D4158413
Authority key identifier: 7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32332d3234203d3e20323634303133.roa
Signing time:             Tue 21 Jul 2026 14:53:48 +0000
ROA not before:           Tue 21 Jul 2026 14:48:48 +0000
ROA not after:            Tue 20 Jul 2027 14:53:48 +0000
asID:                     264013
IP address blocks:        170.0.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f8:72:1b:e8:72:49:b2:4c:9a:96:54:69:78:b5:56:d4:15:84:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Validity
            Not Before: Jul 21 14:48:48 2026 GMT
            Not After : Jul 20 14:53:48 2027 GMT
        Subject: CN=6E24B2A18186E0DEF75375B491D784C64E9B7BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:80:28:08:c2:d0:14:5b:74:ba:f4:a0:ec:
                    e6:57:74:91:1f:9a:e4:ab:c8:96:4e:4f:7f:19:e3:
                    2c:20:c3:d6:d5:09:77:c6:2f:5c:3f:ab:8c:06:7d:
                    01:fe:b5:c4:49:e2:3a:45:b6:62:37:1a:64:12:fe:
                    d5:ad:b3:42:d5:d1:24:f0:be:f5:af:65:79:2b:63:
                    68:79:11:cb:ba:45:69:ea:82:a8:28:72:1a:03:02:
                    dc:99:47:ea:c7:14:6c:b7:e4:db:6d:de:11:45:66:
                    fc:56:1c:0f:21:47:c9:2a:f3:09:33:c4:2c:f3:d6:
                    52:e0:90:2f:9d:fd:f2:05:49:a9:c3:39:3e:36:d2:
                    89:56:28:33:c6:04:2d:49:c2:6b:0f:de:7d:23:89:
                    14:28:e4:3f:c2:78:d5:e6:2e:a7:26:5b:55:6f:6b:
                    89:92:8c:3e:2f:1f:b6:00:90:bc:c9:6b:9e:46:81:
                    6e:25:33:e5:f8:55:a9:61:06:5d:19:47:eb:16:a5:
                    fa:af:60:d9:0e:9f:58:5d:4c:3a:64:7d:16:54:32:
                    16:9c:78:69:d6:57:f1:92:a2:f2:7f:b8:86:86:8a:
                    fd:49:e3:89:74:cc:40:a3:68:28:2e:73:4e:0a:73:
                    6b:6a:d2:56:4f:94:6c:e4:f0:73:62:29:16:84:19:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:B2:A1:81:86:E0:DE:F7:53:75:B4:91:D7:84:C6:4E:9B:7B:B3
            X509v3 Authority Key Identifier:
                keyid:7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32332d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:2f:14:a0:0c:4f:d7:80:54:1e:4d:a2:d7:f3:d9:ca:4e:
         c9:36:95:9f:62:67:58:20:7f:b3:9f:45:4c:7a:dd:a9:6a:c4:
         9a:7b:54:37:fe:2f:51:e6:b5:0a:ca:07:a0:98:d2:17:80:12:
         be:32:d7:cf:4b:99:22:4d:0f:70:00:39:f3:a1:7f:cd:95:8d:
         9d:37:51:cd:77:80:9f:c2:ff:c6:44:4b:03:2c:17:61:a2:dd:
         90:65:9f:f9:38:7c:2a:c6:c4:cf:95:e5:d3:85:fc:1b:ff:1c:
         72:9f:d6:26:ea:97:89:e9:7a:dc:54:53:fd:71:fc:a7:2a:50:
         aa:6f:2f:53:6d:d5:35:7e:87:9e:22:42:b6:1c:d8:02:3f:39:
         c6:2a:25:67:ba:c8:ff:1a:c4:e0:de:cd:bc:86:cb:5b:c4:1e:
         d3:63:2d:40:eb:59:f4:c8:4d:e6:e0:55:59:1f:a1:e3:0e:ac:
         ed:91:a5:97:1e:1d:6e:ad:c7:f9:56:ed:30:4b:0b:64:ec:b8:
         32:7c:39:d3:b1:8b:8e:5b:4b:69:37:f3:e1:23:4a:34:9d:4f:
         e9:7b:2a:56:d1:97:d9:da:c3:c7:18:71:68:61:7d:fc:a5:2a:
         22:68:32:42:f1:bf:de:96:88:9d:01:53:4a:0e:48:2e:a0:1c:
         59:e1:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:21:55 2026 by rpki-client