Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323636343437.roa
File:                     3137302e38322e3230362e302f32332d3332203d3e20323636343437.roa (raw, json)
Hash identifier:          irfOphObR0uYreDMfLceRMjf5BZYVaFGjH11F3Y7A4A=
Subject key identifier:   B2:80:72:3B:56:0E:2C:7B:DF:36:2B:00:9B:A8:48:7F:5D:7E:D6:BF
Certificate issuer:       /CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056
Certificate serial:       4AE400050A1AB4BF1B0635D5E5C0F3ABAC1B5010
Authority key identifier: 12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323636343437.roa
Signing time:             Tue 23 Sep 2025 21:34:34 +0000
ROA not before:           Tue 23 Sep 2025 21:29:34 +0000
ROA not after:            Tue 22 Sep 2026 21:34:34 +0000
asID:                     266447
IP address blocks:        170.82.206.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:00:05:0a:1a:b4:bf:1b:06:35:d5:e5:c0:f3:ab:ac:1b:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056
        Validity
            Not Before: Sep 23 21:29:34 2025 GMT
            Not After : Sep 22 21:34:34 2026 GMT
        Subject: CN=B280723B560E2C7BDF362B009BA8487F5D7ED6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:07:70:6a:db:09:fa:45:3d:28:58:eb:c2:
                    1f:17:77:75:ec:c3:6f:a2:6e:ee:f9:55:60:f6:a6:
                    04:a9:93:44:e8:6d:66:f9:59:14:22:c2:60:d0:af:
                    f1:95:c9:64:b9:07:d2:44:fd:3c:3e:e3:bd:97:e5:
                    af:1d:4e:47:f7:80:57:9e:27:78:e0:a0:7d:f6:63:
                    58:0b:3a:fc:64:b9:d2:ba:fd:ab:29:c3:44:1b:05:
                    42:32:8b:17:ff:b7:a7:d7:1c:4f:db:ca:27:be:c9:
                    d8:62:d4:18:ef:ad:88:0e:7a:98:ab:48:27:4f:f5:
                    3f:5b:f3:40:0e:8b:42:b6:44:83:81:29:82:db:4f:
                    dd:87:90:97:99:7c:c1:04:7a:82:a1:57:8d:b8:67:
                    76:7b:12:ba:12:15:a1:4e:43:aa:4e:55:25:3d:01:
                    e6:e8:ce:e3:a1:f5:95:67:8c:f3:c4:4e:47:cb:a1:
                    3d:05:2d:5f:4b:a9:3a:5c:00:24:bc:17:5b:d9:40:
                    b9:68:3b:15:66:7f:7e:1a:75:32:f1:4d:3a:5b:14:
                    b4:81:0a:4b:f4:87:f3:10:4a:29:ec:56:bc:2b:26:
                    2d:6c:af:98:ac:1f:e0:a7:00:c6:b4:5a:76:73:34:
                    21:af:1f:d9:8e:f4:fb:fd:17:ff:8a:f1:51:45:fc:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:80:72:3B:56:0E:2C:7B:DF:36:2B:00:9B:A8:48:7F:5D:7E:D6:BF
            X509v3 Authority Key Identifier:
                keyid:12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3332203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:61:25:00:8d:ee:82:3d:2b:e2:7e:d9:69:30:09:24:35:
         08:8d:cf:52:42:a9:72:50:ca:34:96:c9:48:64:b4:52:b0:10:
         cc:ff:f5:50:09:7f:df:09:36:f7:eb:df:f4:c0:34:0e:47:fa:
         a4:49:0a:e0:01:aa:28:5b:04:39:2c:17:71:0e:33:a7:9f:35:
         76:11:ac:71:29:bd:87:4b:ec:f4:2a:02:d9:de:db:c2:fe:ed:
         c4:49:43:37:a0:ab:12:5e:8d:d8:38:35:01:81:bd:14:1d:2b:
         03:39:47:45:ab:10:9b:5a:4c:26:7a:a6:c1:2c:bc:cb:0a:c9:
         0f:0c:67:ca:11:55:70:18:4f:10:dd:cf:78:2f:d7:0f:ac:c4:
         b5:a1:ba:92:bf:43:99:a6:f8:f2:c4:ef:31:88:ba:6b:df:98:
         1c:44:5f:2f:ce:2f:3d:a3:7a:82:29:f9:9b:29:1c:60:bb:a4:
         95:77:32:51:44:aa:0e:c5:8c:9a:12:bb:e6:fa:11:07:0b:60:
         24:e1:79:a7:d9:7e:06:cb:39:37:7a:86:32:24:56:bf:77:70:
         c1:e0:59:29:88:39:b1:36:49:8a:fc:a9:db:15:a4:3c:15:80:
         b7:cb:4f:31:ae:74:49:15:49:f5:32:63:02:71:cc:2a:23:f4:
         98:4c:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:19 2025 by rpki-client