Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa (raw, json)
Hash identifier:          wufL1ykuvMLIhLaAn1Pd/Yqf/lr8c3XwqnSFKh5vw4U=
Subject key identifier:   61:1A:1C:A6:41:D5:62:81:D6:5B:F6:A4:05:CE:1E:FE:CC:5E:93:B2
Certificate issuer:       /CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
Certificate serial:       1C3F03294F2A0B425EF1379A8EFDF9B84C52E694
Authority key identifier: ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa
Signing time:             Mon 04 May 2026 18:08:17 +0000
ROA not before:           Mon 04 May 2026 18:03:17 +0000
ROA not after:            Mon 03 May 2027 18:08:17 +0000
asID:                     265086
IP address blocks:        170.233.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:03:29:4f:2a:0b:42:5e:f1:37:9a:8e:fd:f9:b8:4c:52:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
        Validity
            Not Before: May  4 18:03:17 2026 GMT
            Not After : May  3 18:08:17 2027 GMT
        Subject: CN=611A1CA641D56281D65BF6A405CE1EFECC5E93B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:ce:03:1e:cd:d7:e6:b9:17:ef:96:c0:b9:
                    11:71:19:d6:99:d1:ce:d3:c2:40:6b:6a:af:48:6b:
                    5f:9d:26:55:45:ed:61:f4:34:44:a1:6d:44:11:e7:
                    f9:cd:56:75:55:b1:27:24:07:92:81:76:41:3b:79:
                    0b:87:6d:9e:ec:85:c8:25:1b:47:23:a1:9f:43:a3:
                    b5:cf:d3:83:0b:c2:f3:82:46:ce:08:b0:53:08:80:
                    ed:10:bf:13:2f:ee:80:99:41:74:18:b5:21:c8:c1:
                    7a:cb:b2:45:52:5a:0b:fc:4b:7d:2d:9a:d0:9f:a3:
                    fd:60:a5:34:4a:66:ec:d5:1b:a2:8d:2a:b3:ec:24:
                    33:c3:80:43:08:17:8e:4f:8c:59:85:f0:73:8b:b1:
                    13:10:80:c7:65:d5:aa:34:81:db:f8:66:6d:ba:7d:
                    e3:34:34:1b:2b:47:ed:24:69:ad:89:c7:76:1e:6a:
                    57:45:ef:fe:71:3c:59:4c:30:72:41:fd:8f:38:59:
                    fc:28:5c:71:29:86:a2:fc:eb:0e:f5:b8:3d:13:39:
                    57:e8:f0:e9:63:1e:96:df:1d:3b:91:9c:e7:3c:01:
                    7b:60:c7:ed:94:ee:9c:14:62:97:8c:a0:15:bf:4e:
                    47:fc:24:db:7d:ac:b8:5c:a6:c5:7f:60:f1:c0:37:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:1C:A6:41:D5:62:81:D6:5B:F6:A4:05:CE:1E:FE:CC:5E:93:B2
            X509v3 Authority Key Identifier:
                keyid:ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:96:da:38:1b:e8:b4:f6:18:42:3f:c4:77:f0:ac:bd:50:34:
         9c:e0:4c:19:f6:43:ba:c4:a5:c2:ae:32:06:98:e2:0f:a9:ef:
         af:09:8c:cd:d2:45:32:67:7b:de:10:21:bb:28:32:6e:10:44:
         f3:a9:2c:e0:f1:cb:89:e4:31:3d:b8:aa:44:30:fe:31:f4:d0:
         35:f8:53:a2:79:91:d7:f7:1e:7e:9d:17:6d:bc:3b:f7:21:53:
         76:e2:9b:5a:16:56:d7:07:7f:e9:ff:67:67:3c:06:12:4f:86:
         19:77:73:c9:be:94:99:b0:fe:62:7b:82:7e:07:13:ab:32:95:
         81:61:fa:d7:f9:ed:ad:8f:58:b5:0d:15:9f:95:44:e9:d1:9d:
         78:98:bd:5e:39:b4:a5:61:4a:74:28:bb:e0:20:68:39:13:64:
         e3:58:eb:b3:7b:10:d8:d8:df:54:77:99:3c:8c:db:3e:8e:d5:
         1b:39:44:f0:e8:55:56:f6:a5:d7:25:6d:6b:d2:c2:06:e3:bd:
         e6:e1:68:23:45:f9:f8:dc:d4:89:91:42:2f:bb:1e:38:00:8e:
         22:b2:a8:67:1e:bb:c6:58:8f:42:21:fc:25:1f:e9:12:f9:73:
         06:bf:48:5a:04:77:42:2f:83:95:f1:55:3c:e3:20:57:74:fb:
         ca:d9:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:04:47 2026 by rpki-client