Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa
File:                     3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (raw, json)
Hash identifier:          7sY+r6ZBnr2FBA2Fh/Oq4FCKydzaR+LgE3ibdN82w/E=
Subject key identifier:   D7:6C:92:00:27:C0:F0:CE:3E:A7:84:E0:63:C0:C6:CB:C8:59:D6:7B
Certificate issuer:       /CN=F17D17C337D4266F27A0E1D71DE1A364CE50F399
Certificate serial:       261412BEB33CEE425AD0E12973257885A028686A
Authority key identifier: F1:7D:17:C3:37:D4:26:6F:27:A0:E1:D7:1D:E1:A3:64:CE:50:F3:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa
Signing time:             Thu 23 Apr 2026 19:09:20 +0000
ROA not before:           Thu 23 Apr 2026 19:04:20 +0000
ROA not after:            Thu 22 Apr 2027 19:09:20 +0000
asID:                     264051
IP address blocks:        170.246.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:14:12:be:b3:3c:ee:42:5a:d0:e1:29:73:25:78:85:a0:28:68:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F17D17C337D4266F27A0E1D71DE1A364CE50F399
        Validity
            Not Before: Apr 23 19:04:20 2026 GMT
            Not After : Apr 22 19:09:20 2027 GMT
        Subject: CN=D76C920027C0F0CE3EA784E063C0C6CBC859D67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:fd:7a:92:62:cc:87:8f:f8:35:80:01:38:
                    3a:6c:d7:73:e7:06:6d:76:de:6f:bc:41:97:4a:3d:
                    cc:4c:8d:26:f6:71:9b:96:0e:c1:6c:99:58:20:d5:
                    8b:bd:2c:4c:a6:75:9b:87:f9:75:d4:40:04:a3:26:
                    fe:dd:2b:eb:f8:c4:67:84:ce:7b:8d:3b:2c:32:f4:
                    86:f5:4c:4c:0b:ab:27:15:55:c3:a1:94:de:3c:34:
                    c7:c9:d0:7c:e5:5a:60:e3:54:a7:d4:93:e7:a7:b0:
                    1f:67:5e:c8:e3:85:03:8a:a2:b9:87:5c:1b:96:20:
                    af:63:69:29:8d:aa:29:16:f9:87:e6:2b:4d:7a:cd:
                    74:15:3b:eb:c0:74:50:80:35:d5:73:c0:34:c6:d9:
                    e2:4e:d3:cc:51:04:f2:d7:12:36:fb:c7:bc:1c:31:
                    b4:04:17:9f:eb:83:f8:fb:10:3c:3c:24:c7:0e:85:
                    1e:ae:1a:8e:d6:93:1f:62:23:76:48:f5:cb:01:a6:
                    1f:12:97:c0:a6:28:c1:b6:c4:1e:32:0a:9c:70:46:
                    94:76:b3:dc:39:f4:c2:05:bf:54:59:91:7e:b1:90:
                    ea:e2:39:99:0f:b8:5d:19:e3:3c:96:d7:e5:c7:27:
                    cf:9b:1b:9c:f4:25:19:9d:f3:10:81:40:6a:b2:95:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:92:00:27:C0:F0:CE:3E:A7:84:E0:63:C0:C6:CB:C8:59:D6:7B
            X509v3 Authority Key Identifier:
                keyid:F1:7D:17:C3:37:D4:26:6F:27:A0:E1:D7:1D:E1:A3:64:CE:50:F3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:16:7e:4e:27:5b:0b:5d:50:6e:73:db:cb:7e:1d:ed:95:
         13:b9:9a:0a:5a:7e:ff:73:9b:2f:73:00:54:11:d1:02:5a:36:
         0b:31:5e:97:8b:47:76:e7:26:33:95:c1:8a:21:a6:d4:7a:62:
         87:79:09:51:75:f8:d1:ef:52:cb:ed:e6:e0:be:9c:39:0c:01:
         17:46:97:7a:38:43:99:42:79:a1:a9:6a:92:ae:ef:bd:a7:21:
         7f:fc:06:26:e5:17:7a:86:f0:01:86:a9:93:3a:e5:7b:07:26:
         49:5b:88:73:5c:a8:c0:01:45:93:f3:d3:37:6d:5e:9b:03:63:
         71:b6:62:b2:a6:b2:4f:a9:19:e1:95:1e:67:40:7c:1c:83:23:
         9b:2c:0b:74:ba:a8:ec:ba:57:0c:1b:8c:04:95:53:fb:78:28:
         08:9f:74:65:fd:ab:02:ae:07:a5:85:c7:aa:bf:7c:c9:44:fe:
         db:c2:34:15:ae:34:c3:34:d6:fe:43:66:ea:94:4f:16:ab:47:
         66:6c:cb:b5:12:27:9a:6c:46:70:41:98:1d:97:b6:12:22:81:
         dc:c4:f6:34:92:e4:76:76:38:4a:2c:3c:39:b3:43:27:29:b8:
         a7:8b:20:90:c9:79:e2:36:d8:f2:60:5e:97:4b:a0:1c:89:91:
         68:a9:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:54 2026 by rpki-client