Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa
File:                     3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (raw, json)
Hash identifier:          1Bwz3sgUlo4zyOqzoFmtb9UV1BgmCVitk6QWVIfJ9Gw=
Subject key identifier:   C5:D4:B6:98:21:00:17:6A:26:D5:ED:52:56:45:D8:13:08:47:25:67
Certificate issuer:       /CN=EB2DD8C8D4EA793B9BA20B69C44523AF0F503317
Certificate serial:       605A6CDB63D70CFAC63DB6ADB23135B9390AF3EE
Authority key identifier: EB:2D:D8:C8:D4:EA:79:3B:9B:A2:0B:69:C4:45:23:AF:0F:50:33:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa
Signing time:             Thu 19 Mar 2026 14:46:06 +0000
ROA not before:           Thu 19 Mar 2026 14:41:06 +0000
ROA not after:            Thu 18 Mar 2027 14:46:06 +0000
asID:                     265016
IP address blocks:        170.84.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:6c:db:63:d7:0c:fa:c6:3d:b6:ad:b2:31:35:b9:39:0a:f3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2DD8C8D4EA793B9BA20B69C44523AF0F503317
        Validity
            Not Before: Mar 19 14:41:06 2026 GMT
            Not After : Mar 18 14:46:06 2027 GMT
        Subject: CN=C5D4B6982100176A26D5ED525645D81308472567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:11:b4:be:1c:ab:1f:21:4a:39:bb:75:dc:
                    a0:07:63:00:de:7b:2f:73:a6:90:b5:80:d8:fd:38:
                    b0:d6:85:27:ee:ed:26:15:33:ef:48:4c:f2:0a:ae:
                    8f:3a:47:f3:9b:51:20:d5:29:f0:ca:7a:8f:fb:83:
                    ed:cc:95:73:5b:d2:fc:e0:5f:72:49:48:a7:ee:fe:
                    68:49:91:4e:76:cb:b6:c8:9d:f3:0f:9c:d5:6e:f1:
                    a6:4a:4f:9e:22:58:bb:96:a0:ac:3d:df:34:0a:a1:
                    98:8d:78:41:2d:d3:b8:4e:2f:78:8e:de:47:40:83:
                    63:5d:5d:d1:a1:f6:40:41:47:9a:9f:b5:9b:78:c0:
                    5d:0f:2a:5b:5e:b7:24:5d:51:b0:5b:40:fb:df:ae:
                    04:b7:75:39:af:9e:09:00:00:4b:28:c4:ea:71:95:
                    69:04:dc:59:39:1e:af:69:47:ea:89:79:0d:d2:95:
                    e0:a0:2a:19:46:2d:3c:10:85:40:d7:0b:c7:bf:c9:
                    e0:53:97:86:55:ca:cf:0c:fb:92:88:8f:37:e9:e9:
                    89:7a:91:68:94:c0:3b:3e:f4:75:56:9f:f4:f6:79:
                    f2:27:17:a5:14:48:37:2a:dd:56:c1:c3:98:cd:72:
                    3c:20:56:73:36:f9:dc:81:2c:73:96:51:13:54:c3:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D4:B6:98:21:00:17:6A:26:D5:ED:52:56:45:D8:13:08:47:25:67
            X509v3 Authority Key Identifier:
                keyid:EB:2D:D8:C8:D4:EA:79:3B:9B:A2:0B:69:C4:45:23:AF:0F:50:33:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:4a:fd:aa:6a:b0:40:a3:e2:97:f1:2a:83:97:f2:fc:02:
         26:24:12:3f:48:56:7c:1e:32:6b:aa:66:8c:64:30:66:b1:07:
         1e:0b:a4:c1:ec:ca:5f:11:59:34:34:7b:b1:13:e7:09:e6:72:
         ed:17:bc:3a:37:97:c9:67:98:65:80:b6:ae:7d:89:08:67:93:
         18:82:62:54:0c:3f:1d:a7:e3:3e:84:8a:c5:f7:8b:25:1c:41:
         39:d7:c1:11:d5:48:4c:58:dd:d5:9c:a5:ba:60:54:cb:95:6b:
         0f:50:df:6f:1e:14:21:a6:22:4c:38:d2:1e:6a:84:37:2f:77:
         c6:bb:cb:69:92:7a:54:99:6b:88:85:18:33:6f:98:42:a3:6a:
         14:e0:df:5f:86:3e:fd:7f:b1:9e:7a:e8:d2:02:bc:50:7a:c3:
         98:28:d2:20:5c:be:4a:35:85:53:01:a5:63:d1:1f:ae:74:51:
         60:b5:2b:f5:05:ad:8b:19:9b:e2:26:e0:a4:1f:15:1e:2c:b5:
         9b:59:4a:23:1f:65:af:37:30:ab:46:1b:c4:7a:e2:b7:ed:42:
         9a:1d:05:5f:66:8f:3f:dc:73:08:0a:82:fa:90:d8:75:9f:c7:
         35:72:d1:9b:ca:fd:ed:d6:50:60:2c:c3:b5:80:2a:fc:fd:6a:
         00:68:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:58 2026 by rpki-client