Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          M9VsE/cPeBVSfPjB3wjc7h6f5ocG4S2jv2fA05UlNQc=
Subject key identifier:   D2:37:60:DF:C0:7A:80:CA:61:0E:15:09:C5:BA:89:D7:C9:E0:A1:CA
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       41702939C766DF976F85AE2041E1662C6D58A26B
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:17 +0000
ROA not before:           Mon 15 Jun 2026 11:51:17 +0000
ROA not after:            Mon 14 Jun 2027 11:56:17 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:29:39:c7:66:df:97:6f:85:ae:20:41:e1:66:2c:6d:58:a2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:17 2026 GMT
            Not After : Jun 14 11:56:17 2027 GMT
        Subject: CN=D23760DFC07A80CA610E1509C5BA89D7C9E0A1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:8f:b2:b8:69:e3:0e:3a:15:14:6d:2a:c5:
                    15:01:0b:ce:3e:6f:c8:a0:11:9e:fe:31:c0:3e:69:
                    58:82:37:d0:54:72:b1:ac:cd:e1:40:26:aa:7a:fe:
                    79:42:79:be:73:f6:be:92:02:56:59:3c:fb:3e:cc:
                    52:91:cf:df:f0:7d:0a:09:20:9d:88:56:d1:a8:90:
                    4a:8a:8e:8b:08:14:3b:c9:00:40:a2:eb:6a:0c:8d:
                    fb:d0:37:32:81:e3:27:2b:c5:1a:37:0b:db:74:21:
                    66:d0:bc:eb:47:65:f4:2c:ac:98:4e:6f:e1:5e:91:
                    32:4e:8f:76:32:11:fe:96:6b:da:fd:72:be:e6:25:
                    a8:36:90:9b:e5:a0:f3:2b:7d:2a:61:70:0a:d2:e4:
                    19:11:1a:dc:ba:9b:f5:05:b4:33:1e:87:3e:21:e3:
                    01:f1:1b:24:f1:85:d6:a8:ce:0b:78:c4:7c:e1:37:
                    a4:7e:d1:72:84:8f:b1:93:f6:0e:5d:d1:d5:e6:bb:
                    94:d4:5e:31:c1:79:36:92:b7:7c:ea:80:17:c1:85:
                    e3:c3:da:97:43:54:68:d4:43:b9:ce:87:7d:63:0f:
                    af:02:ec:e9:45:22:8d:25:a0:cf:96:ba:80:3e:39:
                    01:bb:c1:c4:16:f3:10:43:54:9a:6e:f5:21:79:e3:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:60:DF:C0:7A:80:CA:61:0E:15:09:C5:BA:89:D7:C9:E0:A1:CA
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:c7:7f:8c:65:26:0c:d5:55:8a:69:32:f2:ad:b3:71:10:6a:
         e6:25:ec:93:a2:3c:aa:ff:9c:ee:72:32:99:77:f6:d4:db:2e:
         27:12:91:41:cd:2e:8c:36:70:f4:69:9f:87:68:39:13:ad:18:
         a5:54:37:5e:8e:ed:98:ab:b2:3b:e7:5a:ab:05:b4:3d:fd:09:
         ef:34:cc:90:a1:cb:3a:f8:72:37:1e:e3:99:74:44:fc:ea:67:
         9f:46:5a:e7:73:9b:1a:d1:fd:a4:55:4a:2b:bc:0c:85:f1:2d:
         b4:69:72:cb:c9:91:9b:bc:89:3b:83:4a:57:45:5c:3c:4d:0e:
         86:ef:37:0e:ef:6a:d3:50:1a:8a:af:da:78:03:56:cc:84:cd:
         a3:ce:2d:d9:75:8d:24:aa:f1:7e:67:18:98:ff:ab:b4:de:13:
         a7:76:5e:57:1c:70:e0:a2:3a:ed:46:5b:07:08:4a:5d:f7:6d:
         14:51:dc:af:6e:0c:01:78:f2:95:c2:b0:e6:6c:8c:06:18:a4:
         88:73:90:ad:4a:d0:be:3e:2d:bd:ce:dd:c0:64:0e:19:35:7f:
         be:f7:5d:65:72:64:db:f9:85:9b:d4:52:07:ad:c2:b3:9a:93:
         2c:11:42:ff:ee:ae:e3:d3:8d:1f:bc:8e:77:33:7b:fc:20:33:
         c5:37:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:11 2026 by rpki-client