Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa
File:                     3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa (raw, json)
Hash identifier:          KgnW0OqloJ67/FodBVqSqo1Ekql9h1DxmmJ+V0e/Bu8=
Subject key identifier:   1F:40:07:CA:87:0F:62:D7:3F:1F:D5:34:4C:C4:70:F7:67:0D:67:8A
Certificate issuer:       /CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
Certificate serial:       7770CF78874824B241AFCB71AF61A8C74D7F083F
Authority key identifier: ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa
Signing time:             Mon 04 May 2026 18:08:43 +0000
ROA not before:           Mon 04 May 2026 18:03:43 +0000
ROA not after:            Mon 03 May 2027 18:08:43 +0000
asID:                     265086
IP address blocks:        170.233.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:70:cf:78:87:48:24:b2:41:af:cb:71:af:61:a8:c7:4d:7f:08:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9181D45C38C1C772F95EC8E8333102FB083EDC
        Validity
            Not Before: May  4 18:03:43 2026 GMT
            Not After : May  3 18:08:43 2027 GMT
        Subject: CN=1F4007CA870F62D73F1FD5344CC470F7670D678A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0a:c1:6b:84:84:2c:2f:76:76:70:13:a4:b3:
                    05:8c:aa:1c:75:7a:55:a6:8e:be:4e:38:a7:86:e6:
                    f2:a3:c8:16:33:b1:a1:16:2e:cd:e3:a3:c4:c1:22:
                    b0:c1:a8:a8:1d:7e:af:61:02:b5:27:dd:d6:08:43:
                    7e:88:f9:e1:fa:1e:df:19:e4:0d:e8:ed:ca:ce:b8:
                    2e:c1:66:7e:eb:7a:9d:72:ca:cd:9d:d9:b4:16:1b:
                    00:16:87:a4:01:3c:a9:22:b3:56:9c:50:ad:fa:33:
                    91:37:06:3d:96:de:ce:d5:75:d3:25:98:f8:aa:dd:
                    89:77:af:09:d8:be:05:f8:d6:12:17:0f:be:2f:31:
                    bc:5f:cd:2a:ae:05:10:c9:a6:20:2c:40:9e:bb:c2:
                    55:e2:b6:79:0e:6d:89:e5:6b:ab:a9:64:7f:d3:93:
                    5b:90:5f:8f:56:e9:02:a3:0d:08:6b:db:30:f8:02:
                    34:a9:55:b3:03:72:5c:4a:7f:f9:5e:d0:39:6d:84:
                    50:89:a9:27:18:7a:fa:da:82:8f:71:5e:6b:8c:eb:
                    75:37:e9:df:81:90:8e:ad:89:8b:3d:5a:57:b3:35:
                    f3:aa:0f:6c:55:4f:0c:81:81:22:07:74:86:78:6a:
                    5d:26:46:9a:b2:c4:1f:5c:dc:f4:fd:3d:8c:07:44:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:07:CA:87:0F:62:D7:3F:1F:D5:34:4C:C4:70:F7:67:0D:67:8A
            X509v3 Authority Key Identifier:
                keyid:ED:91:81:D4:5C:38:C1:C7:72:F9:5E:C8:E8:33:31:02:FB:08:3E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ED9181D45C38C1C772F95EC8E8333102FB083EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9181D45C38C1C772F95EC8E8333102FB083EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33342e302f32332d3233203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:97:33:d9:0e:2d:7b:db:b8:e0:9e:51:11:e1:94:22:35:24:
         1e:1b:04:6b:85:ad:b8:af:f4:9a:de:90:24:76:87:ef:bc:4a:
         dd:be:ef:52:c9:a9:92:f2:5c:2d:f5:75:39:9e:de:00:77:25:
         85:b6:ad:d1:82:e7:f5:16:8b:c9:79:ec:a8:2f:b5:d7:80:08:
         41:ad:7a:dc:1a:b8:3c:11:1c:4f:8d:09:33:9f:47:ee:0f:3b:
         ed:49:84:52:25:3e:c7:a8:2c:e1:58:37:3e:a8:4c:7e:96:0c:
         2a:c7:e2:75:34:53:8f:d6:82:e5:da:6d:58:8b:20:55:c6:c7:
         d6:bd:73:31:fb:63:be:16:4d:ac:47:8c:f9:bc:f6:36:0b:7f:
         22:bd:e9:d2:3c:c9:55:c8:22:f1:ef:83:6f:e5:32:f4:bd:92:
         cc:bd:77:72:25:72:e9:9f:1f:58:e0:52:dc:76:ed:b7:08:75:
         d3:4f:da:f0:b3:0a:53:fa:13:fa:e5:53:40:f1:b4:a7:b4:05:
         8a:53:bd:dd:d0:30:14:8c:4e:01:3d:e5:cc:cf:ee:8b:ef:d3:
         df:fe:36:cb:a8:69:4b:81:6b:04:83:06:d0:ad:b6:84:4f:26:
         4d:c4:a0:c0:bf:f9:c3:58:0f:e9:91:c9:b9:cb:49:78:47:ec:
         82:2c:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:10 2026 by rpki-client