Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131392e302f32342d3234203d3e20323636323835.roa
File:                     3137302e37392e3131392e302f32342d3234203d3e20323636323835.roa (raw, json)
Hash identifier:          48qJG3QlOBPL8Guo+gJFpTTXyF8TFexYnjfjJHGelyU=
Subject key identifier:   6A:3D:27:96:DF:11:11:1A:4F:36:2E:B8:A3:B1:41:BA:FC:99:47:FF
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       3ADA199794F0909D93BD6E30C8DB7309E956BF46
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131392e302f32342d3234203d3e20323636323835.roa
Signing time:             Fri 24 Jul 2026 18:57:13 +0000
ROA not before:           Fri 24 Jul 2026 18:52:13 +0000
ROA not after:            Fri 23 Jul 2027 18:57:13 +0000
asID:                     266285
IP address blocks:        170.79.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:da:19:97:94:f0:90:9d:93:bd:6e:30:c8:db:73:09:e9:56:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Jul 24 18:52:13 2026 GMT
            Not After : Jul 23 18:57:13 2027 GMT
        Subject: CN=6A3D2796DF11111A4F362EB8A3B141BAFC9947FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:31:c2:1d:c9:93:06:e4:77:a1:5a:46:77:
                    8d:6b:01:1a:55:6a:09:09:d9:c8:00:75:ae:9a:c4:
                    34:fc:87:37:19:44:3c:95:85:c3:06:f1:9e:0a:69:
                    16:94:9b:1e:33:b6:d0:b6:fe:22:ac:41:37:3a:d6:
                    d0:cf:16:fa:48:87:e5:18:6c:4f:2f:53:1d:b5:12:
                    da:06:25:e2:f0:70:0a:b6:03:c9:20:50:ab:ef:21:
                    66:41:fa:8e:6f:63:07:0b:4f:08:21:f2:d3:c5:61:
                    28:48:66:43:49:41:ac:83:74:d5:81:28:af:37:7f:
                    50:d8:9b:ed:5e:b2:70:41:6a:06:90:64:fa:77:59:
                    d8:51:8d:ab:71:1f:a1:d3:09:ef:49:8e:1a:f8:dc:
                    bb:60:e0:36:15:f9:e8:72:28:79:99:18:fb:26:0a:
                    72:16:64:eb:a2:2b:78:e2:8d:5a:54:61:43:19:5f:
                    aa:99:59:bd:25:9f:54:aa:0e:c6:2b:f4:d6:5d:3c:
                    19:9b:65:83:fa:a7:2b:f6:bb:f8:8b:94:e9:71:eb:
                    2c:7b:eb:3d:8c:1d:b1:b8:d8:21:99:e3:b9:e7:2b:
                    27:14:b7:bd:cf:e5:2c:c4:85:5a:72:1f:01:7f:5c:
                    03:7f:46:bb:89:b4:e2:21:24:f3:66:14:07:31:a3:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:27:96:DF:11:11:1A:4F:36:2E:B8:A3:B1:41:BA:FC:99:47:FF
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131392e302f32342d3234203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:d9:4d:c5:d9:13:93:c6:a1:6e:40:e5:2e:b0:bc:8e:dc:
         3a:4e:2b:ac:ea:e8:af:60:63:ba:ed:28:08:48:0a:3c:9d:d7:
         c8:a9:93:2f:29:43:4b:8e:65:7b:19:98:18:9e:89:fd:f4:32:
         df:ee:9f:ae:8a:40:9a:3e:39:7e:60:f6:95:93:8f:f8:f6:22:
         bf:4e:22:ad:50:3c:be:b1:e1:dd:20:b1:19:bc:88:5e:56:ae:
         57:63:c6:77:15:fd:36:0e:35:5b:8c:48:41:ac:d6:75:ea:c5:
         3d:58:7d:68:12:d5:0f:b2:6c:bd:bd:f9:f2:ff:01:e5:56:64:
         f9:2c:38:19:ef:65:b1:f1:80:fa:f5:f4:84:25:bb:10:bd:de:
         4d:30:72:58:88:99:7c:44:b0:0c:36:7f:3d:0d:65:3e:7f:a5:
         af:23:9c:38:4d:f4:78:a5:23:ca:4d:1a:dd:e2:37:6f:be:b1:
         0d:13:ad:ed:de:01:d9:cc:0a:f2:39:94:5d:51:9a:24:54:9c:
         a7:79:10:0f:e6:ba:74:30:9d:a9:b9:1e:1b:39:38:2a:31:eb:
         9f:8a:66:06:e8:be:d8:04:d0:52:1e:83:f4:e7:e2:03:85:3b:
         ca:2c:d0:71:b9:65:aa:84:6b:d1:25:9e:97:85:5e:86:c0:15:
         3f:88:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:01:06 2026 by rpki-client