Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          Cn+y0ojmOW4LQaYFXFZNryUdTwKMJlliUxroXmAWm34=
Subject key identifier:   04:01:C2:82:99:02:AF:AD:92:F1:DD:98:4D:CF:51:D2:D1:7A:8C:D0
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       3EFDB66104DFD80245CE687C0BBB783410D69AD7
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 20 Apr 2026 13:00:45 +0000
ROA not before:           Mon 20 Apr 2026 12:55:45 +0000
ROA not after:            Mon 19 Apr 2027 13:00:45 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fd:b6:61:04:df:d8:02:45:ce:68:7c:0b:bb:78:34:10:d6:9a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: Apr 20 12:55:45 2026 GMT
            Not After : Apr 19 13:00:45 2027 GMT
        Subject: CN=0401C2829902AFAD92F1DD984DCF51D2D17A8CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:32:ca:1a:98:b8:b5:15:3f:4e:3f:4f:13:
                    1a:1c:be:8d:eb:50:54:ff:4c:60:6d:ed:d5:c9:ea:
                    bb:8a:35:a2:cd:9d:4b:90:63:30:a0:8c:1b:6c:02:
                    1e:8a:17:23:0c:76:26:bf:e0:3c:d5:3d:fd:2e:2c:
                    c3:5d:71:ee:1b:d2:b5:27:59:8e:37:3d:47:54:ea:
                    38:c6:bc:2b:67:db:1b:3e:2d:15:c6:7e:b7:76:2e:
                    d0:6e:55:a0:d0:88:cd:72:61:26:e9:51:10:b5:d4:
                    09:5e:66:f5:aa:7d:75:e8:70:88:e4:51:ad:83:95:
                    bb:35:5b:e9:10:96:1d:6c:4f:41:67:fa:59:30:ab:
                    77:be:26:72:2f:45:30:9d:f3:e7:7d:ca:6c:77:29:
                    a1:43:f7:22:7f:d8:b8:ae:16:53:a0:7b:54:13:aa:
                    1c:1f:e5:0d:96:b3:5e:e5:98:61:76:6c:9e:7b:67:
                    b9:46:0b:19:96:6c:cf:b8:93:08:ea:91:d4:05:6d:
                    81:af:83:65:a8:90:06:b4:73:32:5a:00:1a:1d:9f:
                    26:74:f0:1b:cb:90:bf:a3:d1:c9:46:1a:01:ac:fb:
                    d2:0d:55:20:2b:ad:c6:24:f4:c1:91:4a:a9:2b:99:
                    30:11:9f:f8:01:f0:d0:bf:e8:6f:d4:c0:e6:bd:f2:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:C2:82:99:02:AF:AD:92:F1:DD:98:4D:CF:51:D2:D1:7A:8C:D0
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:91:b9:b0:2f:23:46:ef:0b:e3:e0:32:3d:ed:9d:b6:6d:
         89:a0:45:2b:38:4a:c1:ba:d9:8b:47:f2:46:00:79:70:3a:e0:
         2d:c2:55:41:06:f5:37:64:06:bc:2c:21:c8:96:47:7f:2e:de:
         aa:b6:74:97:cc:96:84:2b:f8:dc:d8:34:7e:87:e6:d8:63:15:
         b8:bb:6c:9a:56:2b:df:55:09:00:86:ef:0c:d0:14:16:fe:bc:
         c7:4f:e1:f2:a1:f8:26:40:1d:30:db:5f:00:2f:14:ca:2b:cc:
         a3:c1:1f:3a:18:5b:fa:21:b2:03:2a:8f:aa:fd:0a:f5:da:fe:
         c6:d7:19:ea:37:98:7a:8b:c3:0d:c4:ee:69:d4:f7:ca:e6:7d:
         29:1e:da:db:01:ce:93:c5:50:5c:51:65:08:0d:2f:97:60:e2:
         c8:19:6a:57:21:9e:e6:e0:8d:e5:e7:18:ef:e3:c2:0c:db:1a:
         25:96:e3:93:48:e6:a5:92:a1:8f:12:e1:d0:c4:5e:ce:98:68:
         b3:f2:37:c8:b7:47:5e:58:9e:9f:00:94:ac:70:5c:bd:07:b6:
         75:2e:d2:3e:b4:5c:e7:d7:ac:cd:68:cd:74:26:8d:3e:86:15:
         be:3e:8f:ad:bc:e9:29:60:70:7d:c5:c9:f3:5f:84:a8:e5:37:
         f7:a1:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:00:39 2026 by rpki-client