Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          xWFfypIrgO4b5RAriB3qpLKZNlGeNBjQYFtZKexNFUs=
Subject key identifier:   08:CD:17:18:27:4B:BF:78:0B:23:0D:02:32:D8:EA:7B:C7:9F:E8:C9
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       604CD3D559449741943F41F29F1850089D3F5D22
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:12 +0000
ROA not before:           Mon 15 Jun 2026 11:51:12 +0000
ROA not after:            Mon 14 Jun 2027 11:56:12 +0000
asID:                     28182
IP address blocks:        170.231.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4c:d3:d5:59:44:97:41:94:3f:41:f2:9f:18:50:08:9d:3f:5d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:12 2026 GMT
            Not After : Jun 14 11:56:12 2027 GMT
        Subject: CN=08CD1718274BBF780B230D0232D8EA7BC79FE8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:c3:82:a0:50:f5:74:35:6f:ec:7e:a8:0d:
                    43:e3:37:8d:60:c7:a1:72:bb:ce:ef:c3:d6:30:af:
                    c3:4c:d4:3c:1e:a3:c3:a2:30:9a:a3:52:3d:66:59:
                    bd:53:46:89:88:55:5d:fc:3b:5f:b9:eb:26:e9:c0:
                    07:92:94:aa:57:b5:29:b1:dd:b5:c1:d6:0e:ce:28:
                    1a:7a:e1:07:18:81:fb:5d:84:49:1e:8d:30:9d:45:
                    77:dc:04:e6:23:13:53:47:bd:e9:8a:dc:1a:65:0a:
                    e1:76:45:02:11:34:b5:b0:0c:4c:b1:ce:a1:ce:e4:
                    e5:af:83:3e:28:5e:b5:e9:36:ac:2b:7c:12:7b:1c:
                    84:42:fd:d4:51:9f:24:11:61:f7:6f:49:02:5b:59:
                    1c:77:8c:2e:b6:57:23:5d:b6:4c:5e:02:5d:f8:77:
                    70:bd:0f:a1:9d:e2:4d:b2:4f:17:88:e9:1e:ea:0b:
                    d6:81:d5:f8:77:bd:13:d5:0a:d0:0f:3a:39:7d:52:
                    7a:2c:c5:cb:10:25:e0:a2:a1:b2:f2:48:ea:9f:75:
                    5b:0a:38:7e:54:3c:82:8e:60:a6:da:96:d8:d1:19:
                    0c:d8:bc:aa:89:90:1f:aa:c8:b5:88:ac:43:72:87:
                    0e:cb:eb:14:15:97:69:1a:ba:fa:61:90:2c:f7:a4:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:17:18:27:4B:BF:78:0B:23:0D:02:32:D8:EA:7B:C7:9F:E8:C9
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:c2:09:43:87:4e:da:8b:2b:c1:df:87:06:9d:b9:e2:20:
         8e:e7:40:0d:5c:0d:87:2b:51:ac:9a:44:d1:3a:c6:0f:d6:c4:
         48:6f:cb:26:c1:55:1f:64:83:60:05:b3:13:63:c2:af:d2:54:
         2c:72:44:4f:85:41:6f:39:ef:31:be:bf:6a:8f:60:41:a9:c4:
         6e:43:fb:0a:5c:8c:ec:a1:bf:62:08:79:be:9f:3c:6e:79:ac:
         77:3e:23:94:04:69:5e:e8:4e:09:47:fc:aa:16:64:35:e5:ac:
         f1:fc:f8:88:2f:14:8c:11:45:5b:f2:0e:80:6c:b9:8e:89:18:
         2c:38:ee:b0:70:74:ec:89:da:bb:36:a1:78:11:76:69:2f:6b:
         59:5c:22:cf:df:cb:3b:24:38:ea:9a:94:2f:da:e5:40:0c:da:
         72:99:cd:2f:1c:40:69:ea:09:d1:d1:a2:f9:f5:fa:b0:bb:82:
         67:ef:f8:ea:86:34:ca:20:73:79:78:64:15:62:51:86:79:98:
         c4:83:76:58:0a:92:db:1b:4a:66:c2:a9:4a:1f:b6:a2:ef:2f:
         6d:12:87:8c:fe:9d:17:bb:27:52:1d:d7:8b:27:aa:c5:4f:59:
         fd:4d:35:33:84:ea:05:f3:6b:72:25:59:32:e2:c7:de:eb:dd:
         26:51:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:16:05 2026 by rpki-client