Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          aS1PvTPk9ruJ9QOxhVVSJav4zSkrlN9eup7bUuOFdXk=
Subject key identifier:   14:A2:87:DF:D7:99:A2:E5:62:3A:B2:87:3E:09:A9:12:9A:2D:6E:D5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5298FF8B86B78C58FB4B6B84434DDEF08DF4FDD2
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 13:06:09 +0000
ROA not before:           Mon 29 Sep 2025 13:01:09 +0000
ROA not after:            Mon 28 Sep 2026 13:06:09 +0000
asID:                     262352
IP address blocks:        177.126.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:98:ff:8b:86:b7:8c:58:fb:4b:6b:84:43:4d:de:f0:8d:f4:fd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 13:01:09 2025 GMT
            Not After : Sep 28 13:06:09 2026 GMT
        Subject: CN=14A287DFD799A2E5623AB2873E09A9129A2D6ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:11:e9:51:05:a3:6c:7b:ca:ad:f5:90:27:
                    b1:bf:76:b3:a2:85:da:0a:44:28:d9:7c:27:ed:a5:
                    a6:92:fd:2d:03:eb:a7:42:58:47:66:c9:f9:50:d4:
                    42:f0:f0:89:c3:7f:ab:54:7e:4a:5d:74:56:e7:35:
                    be:fb:25:56:4d:83:fd:84:60:b6:02:3b:ec:db:18:
                    5e:52:1e:59:ea:94:cb:67:18:ea:ee:d3:18:79:3b:
                    90:0f:c5:f6:b5:22:2d:e8:d6:6a:70:7f:c8:d5:1c:
                    2a:b4:f1:09:9c:31:8f:59:bf:d7:b0:de:e3:5e:c2:
                    b1:86:94:56:9d:ed:e5:a0:65:41:10:c6:83:3d:1b:
                    83:2b:77:4f:3c:ad:5b:11:65:68:15:a4:db:18:c9:
                    99:63:08:0f:96:f7:49:3c:58:95:d6:e5:73:7c:14:
                    26:94:a4:d9:4e:e6:7b:d4:43:95:3e:9a:15:c6:68:
                    cb:12:a8:2b:3d:3d:a7:2b:83:09:e8:f5:e8:cd:7d:
                    47:8b:7b:9c:6f:27:26:e6:22:eb:d8:15:30:35:fa:
                    84:c0:95:fa:42:1a:3c:74:92:e6:62:65:87:9b:13:
                    c6:0d:05:7c:1d:fc:48:05:5a:49:ba:36:86:f1:11:
                    31:91:5d:3d:6f:6e:9a:8c:5e:86:94:d2:52:a8:51:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:87:DF:D7:99:A2:E5:62:3A:B2:87:3E:09:A9:12:9A:2D:6E:D5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:84:ff:93:d0:7c:e3:43:1e:5b:b9:b7:ac:57:f3:22:4b:
         95:a9:9a:c3:78:82:e4:b2:d0:83:7f:15:00:28:0f:bc:da:5e:
         90:63:b1:ab:ef:8d:50:05:6b:b2:9c:cc:af:03:e5:83:59:58:
         fb:38:1e:42:c3:f4:2a:e9:bd:1b:22:83:59:dd:85:a4:1d:e4:
         f7:27:0f:2f:74:6c:1f:24:cb:ba:8d:22:df:9a:fb:12:73:fa:
         44:aa:3a:d9:5d:54:b2:4f:9c:ef:fc:45:4a:c0:ff:20:bd:8e:
         9b:14:1b:6a:0d:b8:c6:7c:a8:32:6e:d4:ff:3f:9d:ec:77:e8:
         26:f4:dc:8e:e6:2d:39:17:01:81:e4:ee:e6:05:c8:ff:84:1a:
         61:1b:e5:d8:5a:e3:c0:21:94:29:ae:4d:ed:fe:93:fc:f6:1a:
         c7:1c:10:f1:35:6d:a9:e0:e6:2e:58:bc:ba:d4:58:f7:2c:71:
         13:6a:eb:bd:71:d6:73:25:06:5f:20:4e:0e:b1:e8:7a:77:2a:
         a1:7d:80:fb:20:17:51:c9:e6:a4:3a:b8:fd:9a:fc:f0:55:1a:
         0d:0e:6d:f0:57:48:48:55:c4:a2:66:35:4e:cc:ba:91:d7:93:
         66:2f:0f:ea:7c:bb:db:51:de:ad:96:8f:de:77:0b:1a:90:f7:
         f7:2f:51:09
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUpj/i4a3jFj7S2uEQ03e8I30/dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNTA5MjkxMzAxMDlaFw0yNjA5MjgxMzA2MDlaMDMxMTAvBgNV
BAMTKDE0QTI4N0RGRDc5OUEyRTU2MjNBQjI4NzNFMDlBOTEyOUEyRDZFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnbhHpUQWjbHvKrfWQJ7G/drOi
hdoKRCjZfCftpaaS/S0D66dCWEdmyflQ1ELw8InDf6tUfkpddFbnNb77JVZNg/2E
YLYCO+zbGF5SHlnqlMtnGOru0xh5O5APxfa1Ii3o1mpwf8jVHCq08QmcMY9Zv9ew
3uNewrGGlFad7eWgZUEQxoM9G4Mrd088rVsRZWgVpNsYyZljCA+W90k8WJXW5XN8
FCaUpNlO5nvUQ5U+mhXGaMsSqCs9Pacrgwno9ejNfUeLe5xvJybmIuvYFTA1+oTA
lfpCGjx0kuZiZYebE8YNBXwd/EgFWkm6NobxETGRXT1vbpqMXoaU0lKoUaELAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFKKH39eZouViOrKHPgmpEpotbtUwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxflAwDQYJKoZIhvcNAQELBQADggEBADhNhP+T0Hzj
Qx5bubesV/MiS5WpmsN4guSy0IN/FQAoD7zaXpBjsavvjVAFa7KczK8D5YNZWPs4
HkLD9CrpvRsig1ndhaQd5PcnDy90bB8ky7qNIt+a+xJz+kSqOtldVLJPnO/8RUrA
/yC9jpsUG2oNuMZ8qDJu1P8/nex36Cb03I7mLTkXAYHk7uYFyP+EGmEb5dha48Ah
lCmuTe3+k/z2GsccEPE1bang5i5YvLrUWPcscRNq671x1nMlBl8gTg6x6Hp3KqF9
gPsgF1HJ5qQ6uP2a/PBVGg0ObfBXSEhVxKJmNU7MupHXk2YvD+p8u9tR3q2Wj953
CxqQ9/cvUQk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:10:37 2025 by rpki-client