Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
File:                     3137392e34332e342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          mteFw98qqaZyxMwRvqY+EgHdmbiLhYptFN6/uUeWibk=
Subject key identifier:   6D:2E:C2:8C:33:0D:46:83:41:4E:B9:E1:BB:EE:48:93:54:9A:31:45
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       28BBA8CB9524AB1725475F1E892A379A8DFBE7E6
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:21:00 +0000
ROA not before:           Tue 30 Jun 2026 14:16:00 +0000
ROA not after:            Tue 29 Jun 2027 14:21:00 +0000
asID:                     262417
IP address blocks:        179.43.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bb:a8:cb:95:24:ab:17:25:47:5f:1e:89:2a:37:9a:8d:fb:e7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:16:00 2026 GMT
            Not After : Jun 29 14:21:00 2027 GMT
        Subject: CN=6D2EC28C330D4683414EB9E1BBEE4893549A3145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:ff:80:75:3c:32:aa:5e:e4:61:50:12:a9:
                    5c:69:dc:11:aa:2d:20:9f:81:d9:6b:de:b8:34:4f:
                    83:d9:81:3f:0b:01:45:ce:30:ae:ea:0f:57:6a:27:
                    35:32:3d:9f:80:4c:0d:eb:41:d0:6a:95:71:d8:2f:
                    85:ce:ab:67:b0:e1:89:cf:2f:21:af:18:ba:d4:83:
                    ba:a9:a1:f6:e9:23:de:7b:4c:58:23:64:79:96:ab:
                    82:e5:96:09:a7:25:33:d2:26:55:ad:d5:18:4a:23:
                    70:3c:e4:f8:85:c5:51:66:8f:2a:3c:eb:66:cb:47:
                    8f:8c:f4:81:d5:48:a0:bc:fc:25:42:69:c4:d3:f3:
                    06:f5:10:12:08:e3:27:bf:d6:c4:12:21:3a:b8:1b:
                    53:73:42:a7:70:18:b0:ee:ee:b8:0e:49:c1:3f:4e:
                    27:73:46:67:2b:8c:8e:58:cb:09:41:d4:77:a1:d4:
                    b1:d4:22:ea:9f:25:7f:f4:31:2b:ff:08:8b:af:f6:
                    44:93:16:82:23:35:20:bc:47:16:b5:bf:a1:a7:c1:
                    45:78:7c:4a:03:d2:2e:9d:a5:13:56:6d:0c:86:b2:
                    6b:b0:69:20:73:09:52:91:74:fb:a0:12:53:74:e4:
                    b9:f6:24:3c:90:b3:d7:6c:92:b3:32:b2:e3:8c:9c:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:C2:8C:33:0D:46:83:41:4E:B9:E1:BB:EE:48:93:54:9A:31:45
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:b1:08:51:6b:0b:7a:b2:dc:f8:6b:52:62:21:32:bb:a5:
         4b:17:b6:6c:30:0d:14:be:b6:fa:31:f8:2f:1c:7f:3d:4d:b9:
         12:62:29:2b:d6:e2:e1:f7:64:69:31:de:d2:49:43:b7:a8:18:
         a3:b5:71:13:02:8a:1c:ee:d2:2c:96:87:86:59:b9:8f:de:7d:
         ae:c7:b6:ab:b1:85:23:97:d2:18:a8:36:ea:81:5f:84:b3:6d:
         21:7a:3b:60:aa:8f:25:a0:2c:d2:bc:34:0f:88:43:d6:b0:f8:
         d8:23:59:c2:81:b7:13:74:30:0f:f5:3d:31:fd:53:81:4a:7f:
         03:03:bd:02:98:31:3c:87:3c:9a:52:9a:b4:1e:39:54:fb:48:
         1e:e5:0c:8f:15:2f:e0:5a:9d:33:74:89:2c:5f:be:2a:8b:45:
         5b:ad:b0:86:ac:1f:ff:67:b6:b7:02:f1:de:c6:93:41:33:fe:
         06:c2:6d:3e:0a:12:00:b4:70:6a:f8:80:f2:68:fe:4c:58:bf:
         9a:60:79:14:f0:e0:e7:a9:ad:74:77:17:bc:6f:bb:56:9f:5b:
         50:0c:ef:a0:ba:6d:4e:a8:62:45:fa:8f:57:a0:66:c6:6f:a0:
         8a:1b:f7:53:c2:22:d3:54:09:57:6d:83:f9:56:83:02:dd:da:
         d5:cb:23:e2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKLuoy5UkqxclR18eiSo3mo375+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3NjFGQTI4NzFGRkZENDQ1NTdFNDBBM0MyNUY4MTAw
MTc0ODdGMjAeFw0yNjA2MzAxNDE2MDBaFw0yNzA2MjkxNDIxMDBaMDMxMTAvBgNV
BAMTKDZEMkVDMjhDMzMwRDQ2ODM0MTRFQjlFMUJCRUU0ODkzNTQ5QTMxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwv+AdTwyql7kYVASqVxp3BGq
LSCfgdlr3rg0T4PZgT8LAUXOMK7qD1dqJzUyPZ+ATA3rQdBqlXHYL4XOq2ew4YnP
LyGvGLrUg7qpofbpI957TFgjZHmWq4LllgmnJTPSJlWt1RhKI3A85PiFxVFmjyo8
62bLR4+M9IHVSKC8/CVCacTT8wb1EBII4ye/1sQSITq4G1NzQqdwGLDu7rgOScE/
TidzRmcrjI5YywlB1Heh1LHUIuqfJX/0MSv/CIuv9kSTFoIjNSC8Rxa1v6GnwUV4
fEoD0i6dpRNWbQyGsmuwaSBzCVKRdPugElN05Ln2JDyQs9dskrMysuOMnJNlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUbS7CjDMNRoNBTrnhu+5Ik1SaMUUwHwYDVR0j
BBgwFoAU6nYfoocf/9RFV+QKPCX4EAF0h/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC9FQTc2MUZBMjg3MUZGRkQ0NDU1N0U0MEEzQzI1RjgxMDAxNzQ4N0YyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNzYxRkEyODcxRkZGRDQ0
NTU3RTQwQTNDMjVGODEwMDE3NDg3RjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNzM5MmUzNDMzMmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMrBDANBgkqhkiG9w0BAQsFAAOCAQEAXxOxCFFrC3qy
3PhrUmIhMrulSxe2bDANFL62+jH4Lxx/PU25EmIpK9bi4fdkaTHe0klDt6gYo7Vx
EwKKHO7SLJaHhlm5j959rse2q7GFI5fSGKg26oFfhLNtIXo7YKqPJaAs0rw0D4hD
1rD42CNZwoG3E3QwD/U9Mf1TgUp/AwO9ApgxPIc8mlKatB45VPtIHuUMjxUv4Fqd
M3SJLF++KotFW62whqwf/2e2twLx3saTQTP+BsJtPgoSALRwaviA8mj+TFi/mmB5
FPDg56mtdHcXvG+7Vp9bUAzvoLptTqhiRfqPV6Bmxm+gihv3U8Ii01QJV22D+VaD
At3a1csj4g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:01 2026 by rpki-client