Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3138382e302f32342d3234203d3e20323632373733.roa
File:                     3137372e37302e3138382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          HLJjAwA0nigTpYHwPqIi2JRkf1857XhNxt4/eZO24NU=
Subject key identifier:   A4:D9:A1:24:30:2F:4F:09:55:BC:88:F3:66:1E:16:14:FE:5D:16:41
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       5FBFBB30DB6DC5A5CA828CB290E5CAE85E392756
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3138382e302f32342d3234203d3e20323632373733.roa
Signing time:             Thu 15 Oct 2026 20:30:59 +0000
ROA not before:           Thu 15 Oct 2026 20:25:59 +0000
ROA not after:            Thu 14 Oct 2027 20:30:59 +0000
asID:                     262773
IP address blocks:        177.70.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 03:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:bb:30:db:6d:c5:a5:ca:82:8c:b2:90:e5:ca:e8:5e:39:27:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Oct 15 20:25:59 2026 GMT
            Not After : Oct 14 20:30:59 2027 GMT
        Subject: CN=A4D9A124302F4F0955BC88F3661E1614FE5D1641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:8a:ef:11:4b:ef:ec:5a:29:14:70:b9:da:
                    12:8d:a0:c3:fa:da:a1:bd:15:4b:1b:82:7b:b0:09:
                    dd:0e:40:b9:6e:51:30:57:a3:a5:cf:98:9b:2c:cb:
                    c1:71:32:5f:82:90:07:2c:c5:81:b2:f1:0b:4b:29:
                    75:ea:d5:0e:0b:86:65:a1:99:28:9a:08:c4:aa:ab:
                    81:fb:cb:be:a0:16:eb:84:8f:8d:ad:9b:fc:7e:f3:
                    15:9f:c8:2b:a5:b1:26:58:11:e9:c2:ff:d1:96:db:
                    90:7b:f6:cd:5f:aa:40:9f:c4:02:f2:f7:32:23:56:
                    23:8d:e2:a3:82:71:f2:16:78:76:18:c9:a6:5d:09:
                    7a:f8:11:a3:1a:e6:6d:cc:23:04:ba:81:2e:b4:9b:
                    ff:61:61:98:41:eb:04:ca:5b:f8:81:ff:34:16:8d:
                    d0:61:0b:9a:67:1e:c2:b8:d4:07:4b:31:99:fc:0f:
                    d5:69:c2:16:e9:bf:ab:08:3b:10:8f:48:a1:e2:d9:
                    09:b0:65:8c:bd:c7:3c:b9:e3:2e:25:3e:29:28:54:
                    9f:94:4f:bb:4b:51:6f:18:dd:31:0a:56:3d:88:ed:
                    5a:49:79:98:ec:12:a6:c5:07:c6:53:bf:60:86:58:
                    6a:c7:4d:aa:68:13:a7:89:36:c3:1d:56:64:9a:62:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:A1:24:30:2F:4F:09:55:BC:88:F3:66:1E:16:14:FE:5D:16:41
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3138382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:a2:7f:e9:58:af:7d:51:81:9e:e7:b9:91:ff:2d:51:ec:26:
         15:9a:8c:e3:c7:78:8c:a7:12:68:46:d6:fe:ce:ae:f7:d5:41:
         dd:6e:65:61:66:cf:93:ca:9f:bf:86:2a:9d:3f:05:c9:cc:49:
         fb:e9:e0:88:48:f5:f0:61:fc:d8:6d:64:70:b9:8e:03:de:5d:
         59:e7:f4:56:0f:3f:3a:5d:64:70:28:74:f3:74:ab:24:7b:91:
         33:3c:91:54:dd:4c:ed:98:f5:e1:24:fb:80:a8:b2:49:94:35:
         ef:0c:19:2d:9d:9f:ab:92:bb:91:74:15:07:a4:45:27:91:20:
         3b:4f:50:74:89:fc:b4:5b:da:e2:ed:30:ef:95:a5:dc:09:9d:
         6b:8a:3b:56:40:36:7b:ea:47:ea:76:21:5c:d4:da:f1:6c:2e:
         cb:ac:93:5f:c3:15:fd:3c:a1:8f:f3:ca:62:50:59:cc:81:ed:
         c4:b3:3c:8a:27:0d:03:72:bf:91:7b:c9:f5:92:a5:e1:b9:c6:
         b5:01:dc:41:cd:51:e2:b4:97:21:7e:dc:e5:2f:7a:ad:5a:bf:
         90:c7:92:aa:e0:0e:66:28:eb:54:a8:bf:21:59:76:43:76:f0:
         bf:83:55:b8:a7:8d:47:f8:b1:70:93:50:71:86:9d:3f:fc:fc:
         b2:03:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:54:14 2026 by rpki-client