Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130342e302f32312d3231203d3e20323633333537.roa
File:                     3139312e33372e3130342e302f32312d3231203d3e20323633333537.roa (raw, json)
Hash identifier:          LpJC208d9HYiNixdWwioW4Qw4q+Ao/s53habXpwyhZk=
Subject key identifier:   C4:8D:64:AC:C2:73:BE:9C:22:8B:8F:31:4F:5A:04:F9:C0:5D:AB:A2
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       678F44C32D9FDFA445B1D15CC019F29F04D269F3
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130342e302f32312d3231203d3e20323633333537.roa
Signing time:             Thu 01 Oct 2026 12:16:35 +0000
ROA not before:           Thu 01 Oct 2026 12:11:35 +0000
ROA not after:            Thu 30 Sep 2027 12:16:35 +0000
asID:                     263357
IP address blocks:        191.37.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:44:c3:2d:9f:df:a4:45:b1:d1:5c:c0:19:f2:9f:04:d2:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct  1 12:11:35 2026 GMT
            Not After : Sep 30 12:16:35 2027 GMT
        Subject: CN=C48D64ACC273BE9C228B8F314F5A04F9C05DABA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:7f:50:7e:00:37:79:fb:04:eb:d6:56:ba:
                    2c:7b:a0:7a:b1:38:78:c4:6e:41:32:a3:5a:fe:f7:
                    1f:a1:0f:2d:2c:d2:43:95:77:1f:cc:5b:8e:b9:56:
                    d8:cc:a4:af:41:d2:5d:cf:8f:12:53:38:c2:f9:2d:
                    43:c3:da:c0:83:e0:e2:af:6a:04:d5:7d:43:7c:0e:
                    f5:30:6c:56:a1:8a:e2:1c:3d:8a:75:e2:36:f7:b6:
                    b3:ce:64:69:24:61:b4:1e:b1:68:d2:d1:41:dd:7e:
                    5f:64:5b:4c:1f:53:9b:21:ab:76:6a:f7:fe:eb:31:
                    2e:9d:91:c1:26:05:fb:03:7f:2f:1e:8b:ba:0e:f0:
                    c2:7c:c6:68:26:e6:81:6f:b4:66:2b:ba:14:5a:d3:
                    40:7d:47:af:b2:1d:aa:1b:f5:37:7a:ed:a3:2d:2a:
                    b6:9d:40:3a:ef:d6:d0:08:0f:25:28:65:c6:ed:f8:
                    3c:8f:96:99:f8:5e:4c:af:11:2d:6c:f7:83:9a:95:
                    ac:e2:13:51:a8:09:37:7a:51:a4:a2:d5:ba:8c:9c:
                    d4:13:41:c3:c3:f6:aa:2a:b1:5f:55:56:62:09:4c:
                    34:d1:dd:8d:f7:10:60:3f:7c:cf:c9:03:e3:de:32:
                    fe:23:d7:5d:48:09:0e:39:65:7c:fa:a1:b1:c0:30:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:64:AC:C2:73:BE:9C:22:8B:8F:31:4F:5A:04:F9:C0:5D:AB:A2
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130342e302f32312d3231203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:d0:c2:7e:d1:78:e3:55:7e:19:d8:dd:ed:91:27:1b:96:
         ea:c8:19:67:b4:c8:6a:4b:42:c2:62:85:19:a8:9a:37:a7:8b:
         a2:eb:a0:97:ab:db:4b:df:11:c2:73:9f:2a:a5:92:65:22:2b:
         2a:25:ff:98:ba:65:8a:97:26:fb:a6:3c:65:d7:85:7b:21:e4:
         0e:34:40:6f:30:f8:25:e2:30:32:f1:c1:55:e6:28:a2:92:53:
         e3:ec:27:c1:55:a3:e9:c4:64:c5:57:d0:69:5a:f7:fd:18:6c:
         9b:d6:d2:98:3e:5c:c0:46:17:48:05:f8:c6:18:2a:f0:9f:4f:
         b6:32:de:16:25:20:6c:ea:b5:47:9a:1a:6e:7c:3e:36:bc:0f:
         4a:62:0c:03:4d:c4:a8:53:02:07:b9:d2:44:e2:c4:84:98:21:
         27:5e:c4:de:e6:0e:38:5f:54:4d:d0:1e:5c:cf:d3:e8:65:03:
         60:d2:2a:32:86:ea:a6:9d:e1:2a:89:d6:fd:bc:56:83:8b:61:
         71:a2:b7:51:3c:5c:27:84:25:71:3f:b4:10:fd:50:cc:87:44:
         a4:24:bd:6b:2a:cd:1b:d6:23:21:e8:c5:54:12:f2:5b:29:7c:
         59:ab:ae:9b:e1:4f:20:0f:0b:71:ce:66:3b:67:e2:6b:32:37:
         57:18:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:19:35 2026 by rpki-client