Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          MkR7MaryS5HRdLcSVyLUS3aAqiFJQHFqu2FrbRvQTCM=
Subject key identifier:   C6:9B:BF:B3:C5:B8:23:41:A5:E2:7A:D0:02:A3:07:39:92:F0:5C:7D
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       16F090E3BE520C6275ED08A4646A5B75BC044A8D
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 13:06:09 +0000
ROA not before:           Mon 29 Sep 2025 13:01:09 +0000
ROA not after:            Mon 28 Sep 2026 13:06:09 +0000
asID:                     262352
IP address blocks:        177.126.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f0:90:e3:be:52:0c:62:75:ed:08:a4:64:6a:5b:75:bc:04:4a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 13:01:09 2025 GMT
            Not After : Sep 28 13:06:09 2026 GMT
        Subject: CN=C69BBFB3C5B82341A5E27AD002A3073992F05C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:db:31:81:87:77:a1:2b:2f:60:15:9b:b4:
                    e5:ab:b5:ac:aa:cc:d3:b7:5c:5f:fb:1c:37:50:df:
                    10:8e:a5:b6:86:a0:76:72:02:64:34:26:9c:b5:b8:
                    54:9f:5d:88:52:16:f2:9b:ad:6a:e1:9a:f9:0c:e1:
                    e9:07:ee:f2:87:d2:91:31:db:7a:35:04:6d:4b:ec:
                    16:df:c1:90:42:22:3b:a5:c5:a2:a3:c0:51:33:36:
                    99:a5:3b:38:13:6c:e2:a5:77:5a:c7:12:2d:61:f3:
                    c0:6e:11:0e:71:1c:71:1f:26:61:8a:3a:10:18:14:
                    18:01:df:09:72:5f:75:82:54:20:db:e4:01:49:44:
                    9c:59:38:5f:d5:03:01:1d:10:93:54:37:64:8b:6a:
                    de:70:65:78:94:40:6e:b0:7f:75:ab:1b:29:21:68:
                    10:84:dc:82:d8:63:ed:09:63:45:8a:8c:bb:74:d3:
                    1d:60:b0:5b:c8:0a:cd:df:8a:ee:2b:54:ce:b0:57:
                    d9:8b:91:d0:17:70:05:24:ff:d1:dc:db:a1:0c:35:
                    28:dc:00:7c:36:0d:90:23:da:4f:20:26:96:65:d5:
                    67:7b:2f:2c:d0:a9:fb:a5:1a:c7:39:6b:8c:9d:ef:
                    fa:aa:49:fb:2b:32:0e:5d:f1:b0:bb:42:7d:73:f9:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:BF:B3:C5:B8:23:41:A5:E2:7A:D0:02:A3:07:39:92:F0:5C:7D
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:4d:84:b3:b1:25:92:49:c5:bb:b4:f7:50:b2:f1:ce:07:
         ea:72:7b:15:4d:c0:22:9a:d5:18:dd:c9:67:4b:41:1d:64:d1:
         c4:6e:e0:5c:7e:91:1f:80:0e:64:65:1d:24:f0:94:69:f1:e4:
         93:e9:d6:ff:92:49:1f:61:54:37:f0:e4:c3:6b:6b:e0:26:74:
         78:21:5c:f4:48:2a:d6:bc:c6:c4:08:93:da:23:eb:4a:6f:6b:
         b9:50:fd:d2:8a:e3:6d:8c:f4:4c:a4:1c:e6:d9:33:fd:21:59:
         ce:c3:ab:5a:d3:d0:e9:45:75:2d:4b:dd:93:1f:ff:89:22:1f:
         de:86:e9:36:d1:09:70:a7:ee:68:cb:b7:44:fc:d1:3b:00:96:
         36:fd:bf:b2:9c:6a:7b:bf:10:11:b7:3a:4e:00:6c:67:af:e4:
         bb:16:a4:72:a8:70:97:b9:73:0d:c5:8e:ca:67:5c:a9:b8:df:
         10:10:30:6b:46:04:4c:9c:29:bb:1c:c0:7e:1a:d2:8e:b4:fe:
         93:6e:69:7c:12:1d:fc:45:72:6f:89:bb:30:21:d4:06:ae:33:
         c9:91:39:b9:7a:be:9f:59:67:0f:f9:0d:74:44:83:2d:a4:74:
         35:21:a6:f9:8e:73:2c:7a:e0:a0:0f:92:c0:9c:3b:9b:37:90:
         c0:5b:7d:0f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFvCQ475SDGJ17QikZGpbdbwESo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNTA5MjkxMzAxMDlaFw0yNjA5MjgxMzA2MDlaMDMxMTAvBgNV
BAMTKEM2OUJCRkIzQzVCODIzNDFBNUUyN0FEMDAyQTMwNzM5OTJGMDVDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5tsxgYd3oSsvYBWbtOWrtayq
zNO3XF/7HDdQ3xCOpbaGoHZyAmQ0Jpy1uFSfXYhSFvKbrWrhmvkM4ekH7vKH0pEx
23o1BG1L7BbfwZBCIjulxaKjwFEzNpmlOzgTbOKld1rHEi1h88BuEQ5xHHEfJmGK
OhAYFBgB3wlyX3WCVCDb5AFJRJxZOF/VAwEdEJNUN2SLat5wZXiUQG6wf3WrGykh
aBCE3ILYY+0JY0WKjLt00x1gsFvICs3fiu4rVM6wV9mLkdAXcAUk/9Hc26EMNSjc
AHw2DZAj2k8gJpZl1Wd7LyzQqfulGsc5a4yd7/qqSfsrMg5d8bC7Qn1z+UrrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUxpu/s8W4I0Gl4nrQAqMHOZLwXH0wHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxflUwDQYJKoZIhvcNAQELBQADggEBAKolTYSzsSWS
ScW7tPdQsvHOB+pyexVNwCKa1RjdyWdLQR1k0cRu4Fx+kR+ADmRlHSTwlGnx5JPp
1v+SSR9hVDfw5MNra+AmdHghXPRIKta8xsQIk9oj60pva7lQ/dKK422M9EykHObZ
M/0hWc7Dq1rT0OlFdS1L3ZMf/4kiH96G6TbRCXCn7mjLt0T80TsAljb9v7Kcanu/
EBG3Ok4AbGev5LsWpHKocJe5cw3FjspnXKm43xAQMGtGBEycKbscwH4a0o60/pNu
aXwSHfxFcm+JuzAh1AauM8mRObl6vp9ZZw/5DXREgy2kdDUhpvmOcyx64KAPksCc
O5s3kMBbfQ8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:58:00 2025 by rpki-client