Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa
File:                     3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          YLNSqIatAtx4cYalXGAHUENlT70YbSfeLtT7Mbcpy4w=
Subject key identifier:   88:D2:B8:D3:89:A7:7E:81:48:42:AD:AA:21:90:8A:08:93:6C:49:3A
Certificate issuer:       /CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
Certificate serial:       556D9588414BD1E26737753D57931E06784B2B06
Authority key identifier: 71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 22 Jul 2026 12:36:26 +0000
ROA not before:           Wed 22 Jul 2026 12:31:26 +0000
ROA not after:            Wed 21 Jul 2027 12:36:26 +0000
asID:                     265447
IP address blocks:        170.238.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6d:95:88:41:4b:d1:e2:67:37:75:3d:57:93:1e:06:78:4b:2b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
        Validity
            Not Before: Jul 22 12:31:26 2026 GMT
            Not After : Jul 21 12:36:26 2027 GMT
        Subject: CN=88D2B8D389A77E814842ADAA21908A08936C493A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:f5:ef:28:43:89:0b:d7:93:a7:40:c2:3d:
                    a9:63:d8:dd:63:a8:6e:d9:7d:ff:be:c4:15:76:86:
                    15:6b:da:0f:13:59:7d:5f:16:e9:4d:3f:32:e5:cf:
                    01:89:da:29:1f:0d:3b:24:12:ee:e4:40:9e:b4:32:
                    fc:1b:ee:f3:06:7a:9b:d8:1a:e0:eb:6f:eb:99:23:
                    b1:65:52:3a:b5:da:af:5d:21:e6:20:ff:6c:05:04:
                    a3:bd:a8:b2:7c:4c:32:ae:f4:64:27:cb:bb:d0:a1:
                    aa:75:ab:4d:ce:d3:4e:3b:af:7e:54:ce:8f:fe:5b:
                    c2:02:3e:e9:cc:a3:d0:cf:d7:c5:b0:11:14:ff:c2:
                    34:95:09:5b:2c:6b:c9:80:ac:b4:57:fe:4b:3a:07:
                    60:48:9a:3b:80:27:ad:84:6f:39:ec:e9:0c:21:ef:
                    16:50:a4:46:a5:ba:2a:52:63:dd:c8:ba:42:d6:52:
                    59:95:25:39:a6:9a:4f:76:bf:28:ad:f1:be:23:df:
                    a8:a2:03:98:57:56:01:72:df:a5:dd:6e:5c:b5:bb:
                    6d:8d:dc:47:00:4c:35:ed:bb:53:af:48:5d:73:ee:
                    3b:17:d1:eb:2b:42:11:6a:f4:e4:d6:35:d4:8a:85:
                    63:83:cd:f1:b7:18:12:e8:fc:3c:c9:4f:6b:9f:70:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D2:B8:D3:89:A7:7E:81:48:42:AD:AA:21:90:8A:08:93:6C:49:3A
            X509v3 Authority Key Identifier:
                keyid:71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:3c:b0:77:38:27:4a:4a:53:d5:bb:de:26:d6:de:67:20:3f:
         56:8b:7a:8e:30:21:51:83:1f:be:3a:2e:a9:de:ec:a7:f3:a0:
         65:50:5d:0c:df:1d:69:a4:ab:55:b9:27:10:05:d0:f1:c0:76:
         9f:3c:60:18:0e:f2:07:b1:60:31:0a:7b:f7:76:19:aa:9e:8f:
         a6:94:a2:0b:de:68:5b:49:a2:bd:e7:0f:8f:1d:87:d0:a9:c8:
         92:7d:a4:32:08:b9:25:07:29:78:c2:52:b3:f7:4d:2f:08:b1:
         15:a8:b0:f1:f7:49:8f:aa:f8:dc:af:79:84:e4:28:64:29:b8:
         4e:5c:ad:b5:3b:c0:4b:1c:ac:f9:e3:10:93:17:3a:d0:36:9a:
         22:7d:34:7e:50:3f:89:b3:97:e7:e9:34:9b:98:41:2b:56:76:
         11:33:45:28:ed:07:ac:e7:f5:69:db:f4:0c:fa:43:7f:ab:7e:
         95:de:ba:6e:96:66:0b:53:fb:6d:9e:82:a3:10:fd:a6:bb:b2:
         20:e7:2b:6e:1d:4f:de:39:2d:92:90:42:4c:85:34:a5:5b:6c:
         4f:8b:7a:e8:c3:c7:4a:b4:de:51:dd:89:4b:23:38:a4:01:d1:
         0c:13:28:1f:3f:55:dd:0d:62:a2:11:20:f7:42:69:21:c7:4d:
         86:70:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:50 2026 by rpki-client