Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33332e302f32342d3234203d3e20323634393532.roa
File:                     3137302e3234372e33332e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          dfh6H8lZv/lXuy3auxfUvu32yGP0BtQyiKD70jWt51s=
Subject key identifier:   31:47:1B:01:54:FC:94:69:29:46:59:31:34:CA:04:6B:1D:88:6B:52
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       387690B2DA23400BED61EC64A8679F10F3A083A8
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33332e302f32342d3234203d3e20323634393532.roa
Signing time:             Sat 26 Sep 2026 15:22:40 +0000
ROA not before:           Sat 26 Sep 2026 15:17:40 +0000
ROA not after:            Sat 25 Sep 2027 15:22:40 +0000
asID:                     264952
IP address blocks:        170.247.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 16:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:90:b2:da:23:40:0b:ed:61:ec:64:a8:67:9f:10:f3:a0:83:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Sep 26 15:17:40 2026 GMT
            Not After : Sep 25 15:22:40 2027 GMT
        Subject: CN=31471B0154FC94692946593134CA046B1D886B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:66:c4:93:ca:55:72:fd:59:f5:72:03:1f:
                    3d:7a:c7:7a:e0:82:99:2a:b3:6c:b6:ac:95:47:16:
                    19:a8:24:26:d8:cc:29:f9:b4:5b:56:66:b1:78:3b:
                    3f:72:9c:92:30:cb:bb:38:0c:ee:75:56:a1:7a:bc:
                    48:30:b2:94:b5:4a:df:23:b4:86:8f:79:b2:5f:ae:
                    d2:c7:e1:a6:ba:f4:63:6d:f3:3b:11:84:a5:de:48:
                    7e:50:02:f6:07:2e:ae:ad:78:0e:25:5b:f4:66:fd:
                    4d:1f:0b:1c:d0:44:3d:e7:cb:64:ae:47:67:4b:54:
                    56:2b:88:aa:b8:5a:39:22:e6:a4:bc:5a:c2:eb:5d:
                    09:24:d5:06:b1:dc:40:bb:b2:30:84:85:33:5c:d2:
                    b6:bb:50:77:ec:e5:84:72:df:60:f6:c0:06:9b:39:
                    24:f9:68:c6:10:87:1c:b6:1b:34:1a:fd:20:67:bd:
                    cd:b3:93:a7:e7:05:f5:6c:83:27:b4:84:3c:99:e7:
                    0f:f2:e5:03:0a:04:e8:fe:3e:70:b2:0f:ea:ca:34:
                    dd:ba:6c:97:db:1e:ce:65:d5:ad:91:23:f1:96:19:
                    66:8e:8c:19:0b:33:3e:2e:00:f4:fa:0c:3f:55:cd:
                    7a:ce:18:13:13:d0:ec:90:61:f2:c0:67:03:08:97:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:1B:01:54:FC:94:69:29:46:59:31:34:CA:04:6B:1D:88:6B:52
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33332e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:f5:a6:86:13:bf:c9:f1:16:6c:96:e0:c5:2c:e2:d5:7b:
         dd:e2:47:61:99:f4:ef:82:e4:be:56:14:0c:e9:9d:8e:69:a9:
         ed:da:96:f6:b1:b3:59:01:91:e2:0d:b1:e2:f8:73:0d:b2:09:
         1e:c5:98:36:e1:4b:88:1c:d1:27:63:83:b0:18:96:24:ff:6c:
         60:4f:fe:9c:27:58:65:43:f0:6d:d9:be:fe:69:47:21:76:11:
         51:34:71:0e:cc:ee:70:d1:bb:b5:44:bd:b3:38:a2:95:d0:f1:
         de:58:47:11:3a:b9:f3:1d:52:80:91:24:91:41:18:0c:6d:ac:
         d8:33:d2:12:c2:2d:6a:bb:5d:ef:e7:0a:f5:39:c9:b2:8a:64:
         6e:eb:b2:90:f2:a6:5e:b1:fe:6a:70:92:a9:d0:88:69:24:64:
         5a:6e:39:e3:c9:cf:4f:a7:af:09:85:b2:7d:29:d2:40:ee:07:
         e1:8b:fb:33:98:2e:f9:67:f3:61:62:f0:ea:1d:cc:d7:b9:c9:
         59:96:a1:07:11:9f:11:1f:1d:de:dd:0f:3d:1b:c6:3c:7f:9e:
         3e:9e:99:39:30:7b:04:80:82:93:67:b9:78:59:1d:4a:9b:6a:
         e7:98:2e:a7:15:be:18:d9:74:87:f9:bb:09:ea:54:0e:a6:dc:
         8a:f7:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----