Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa
File:                     3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (raw, json)
Hash identifier:          JqlARywD2HxUybxNMlwwzIf/oq3E7eUmY06ijzrFe0Y=
Subject key identifier:   98:40:34:B1:1C:64:1E:86:58:31:07:ED:B6:A7:5B:AB:6E:F5:48:E3
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       6BD7E02A30312F9268C11407E88CAA43D98F13D7
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa
Signing time:             Wed 17 Jun 2026 20:39:58 +0000
ROA not before:           Wed 17 Jun 2026 20:34:58 +0000
ROA not after:            Wed 16 Jun 2027 20:39:58 +0000
asID:                     263445
IP address blocks:        177.91.164.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl
                          rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d7:e0:2a:30:31:2f:92:68:c1:14:07:e8:8c:aa:43:d9:8f:13:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: Jun 17 20:34:58 2026 GMT
            Not After : Jun 16 20:39:58 2027 GMT
        Subject: CN=984034B11C641E86583107EDB6A75BAB6EF548E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:dc:d9:fe:fc:90:74:9b:f3:f6:90:5e:7e:
                    d3:99:f6:a7:62:56:3b:68:33:d4:0f:fc:48:0a:7b:
                    09:64:17:74:92:4a:6f:51:a3:04:cd:90:e9:ca:37:
                    7d:02:96:d7:a6:f3:18:1d:98:aa:79:2f:d5:da:bf:
                    1c:5a:e4:61:8b:29:41:a8:8c:e4:c4:14:fa:7c:4f:
                    48:2e:5d:6f:d4:84:f9:7e:ce:f8:ac:eb:5d:ba:1f:
                    66:bd:56:33:ab:44:9f:60:02:e9:79:3b:27:55:bf:
                    39:ed:0f:a7:eb:eb:db:86:16:c0:9a:84:e1:9f:fd:
                    f9:9e:96:1f:8b:90:9b:71:01:2c:e7:ae:49:78:e0:
                    82:0a:77:fa:77:49:42:4a:d0:9e:fa:75:cd:8a:71:
                    92:61:a0:64:e7:62:11:aa:ad:30:b2:9b:41:bc:ae:
                    fe:40:a7:2f:49:92:e4:41:1f:5e:f5:c8:f2:ee:1f:
                    6c:3a:e2:ef:93:1a:0d:3d:31:17:bd:e5:2f:ed:ce:
                    58:15:a7:94:26:ad:f2:e6:d7:03:8a:4b:bb:f3:f6:
                    44:1a:cc:4b:01:e5:4f:d3:a7:81:3f:c7:3c:98:16:
                    fd:ca:75:38:a3:07:00:05:22:77:ce:f7:2c:3a:b8:
                    f8:dc:92:35:f4:f1:8a:43:03:8f:2f:fc:9e:4b:22:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:34:B1:1C:64:1E:86:58:31:07:ED:B6:A7:5B:AB:6E:F5:48:E3
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:c7:95:d3:15:fd:8c:8f:4d:d0:4c:7b:73:2c:83:53:d1:
         2c:95:97:c1:3d:63:2d:53:fa:8f:42:c3:e7:4b:2f:99:2c:7a:
         66:e1:8b:4f:aa:20:05:19:e8:74:a1:ea:85:17:e8:ca:2f:8b:
         3e:5f:e1:27:aa:48:1d:6a:7e:df:0d:a1:11:8b:d8:86:f5:d1:
         4b:ed:1a:a3:dc:88:d9:42:a1:99:44:11:be:78:06:15:11:6b:
         56:a4:21:47:05:85:81:2a:7e:a6:41:96:4a:74:5c:b0:34:8f:
         0f:ba:71:0e:30:1c:c6:e4:d3:f6:4f:0b:c3:5a:d1:8a:4e:07:
         7a:46:3f:98:fb:f2:cc:6e:bf:6f:c2:91:f1:03:8e:2e:95:16:
         c4:ca:dd:ad:b7:7b:70:a8:50:f3:ae:d8:11:0e:9e:71:c3:4e:
         b9:55:e5:a4:84:2f:3a:49:57:d7:e2:5e:f1:89:36:63:5e:59:
         5c:8b:eb:c2:eb:7c:87:24:85:3e:07:94:0d:da:4e:51:d2:4c:
         52:6f:bf:8d:0e:03:e2:ca:6f:a1:82:95:76:41:88:f1:ed:2e:
         c1:20:37:1c:2b:a1:2c:65:85:12:fe:84:39:d0:db:5e:75:70:
         29:48:3e:33:ef:d5:e8:88:18:b0:d4:57:1b:ed:01:25:e7:22:
         f7:b3:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:07 2026 by rpki-client