Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38392e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38392e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          oYmIunM973ITfELPMolgqM9BPhdtSM1N30rj3ZUh8CE=
Subject key identifier:   C5:9C:25:1A:0B:12:54:72:2E:E9:C2:7D:49:53:37:AE:3F:BC:F1:B5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       13AC1D3592FB54935541814A257B764B7188C6D2
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38392e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 14:06:11 +0000
ROA not before:           Mon 29 Sep 2025 14:01:11 +0000
ROA not after:            Mon 28 Sep 2026 14:06:11 +0000
asID:                     262352
IP address blocks:        177.126.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ac:1d:35:92:fb:54:93:55:41:81:4a:25:7b:76:4b:71:88:c6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 14:01:11 2025 GMT
            Not After : Sep 28 14:06:11 2026 GMT
        Subject: CN=C59C251A0B1254722EE9C27D495337AE3FBCF1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:9c:3f:1f:47:b2:be:46:97:a4:9d:0b:99:
                    fd:7a:99:c9:ea:13:e9:dd:9e:e0:78:95:20:b2:5c:
                    a1:fb:ba:47:da:9f:b3:97:80:af:c0:21:fc:49:db:
                    b3:fc:11:79:36:b4:55:c5:c3:9b:dd:3e:b6:80:de:
                    75:d3:a6:fa:fa:ad:76:29:de:cf:cc:83:a1:92:a5:
                    38:e6:9d:e6:1c:41:47:b8:8b:d0:c5:46:84:eb:52:
                    7c:be:f5:08:33:08:3d:3d:21:04:02:7f:71:6a:81:
                    e9:a6:e2:db:49:a0:c4:ba:25:84:b0:df:0d:9a:6e:
                    9d:c2:e0:d7:d4:18:b1:a4:be:9f:59:cf:eb:b6:eb:
                    d7:71:9a:4f:d7:ca:cc:c6:41:60:0a:7a:6d:b7:3c:
                    a4:8d:ff:b4:a6:a4:fd:a6:f0:26:98:ea:a8:2d:ca:
                    cb:a4:9f:ce:26:7e:9e:02:44:e0:c8:98:22:98:5b:
                    80:29:9e:1a:a9:51:3f:03:4a:19:c0:79:72:19:65:
                    8f:73:ec:43:26:b8:36:46:85:45:8d:6f:eb:e2:f6:
                    01:bb:b9:b6:5d:a0:09:48:3a:cf:76:b9:cf:f6:64:
                    91:94:73:d9:d5:6f:81:35:fd:b4:09:4c:01:d6:1f:
                    89:d8:f0:1f:b0:3c:06:5e:4d:66:2f:2d:4a:02:68:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:25:1A:0B:12:54:72:2E:E9:C2:7D:49:53:37:AE:3F:BC:F1:B5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38392e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:86:9a:9b:e3:60:63:75:1c:ce:1a:a9:48:8d:6b:51:27:50:
         57:ea:2b:dd:f1:1f:7c:b1:ab:05:b5:dc:37:e5:22:13:8a:9e:
         2f:7e:7a:ca:f9:f3:7e:8e:86:da:a2:a5:35:39:0b:f1:9e:0c:
         22:01:1f:4d:c5:84:b7:3e:7e:3b:c1:8f:5e:8b:9c:09:f7:30:
         4b:aa:51:09:64:0b:9c:b1:d0:8a:63:b3:60:44:f1:64:aa:6c:
         4d:24:46:c5:fe:9f:62:a1:17:df:71:73:c9:2f:08:32:e5:80:
         84:b2:37:e7:6b:a6:a1:c1:e3:8f:71:e3:c7:f5:f4:c2:2c:60:
         1d:b5:b7:13:6d:ce:5c:64:b8:2a:da:13:87:33:54:0a:c4:ab:
         64:c4:4f:17:fc:36:70:03:55:07:9e:53:20:8d:3d:5e:24:6e:
         f3:93:7a:5b:71:f8:93:a7:ca:a4:a2:7c:82:1e:e9:ed:11:be:
         f2:40:86:7b:6f:31:0d:b6:00:17:7a:2a:be:d4:75:58:a1:9e:
         2e:6a:56:6d:ab:a5:3f:c5:2a:5d:4d:b1:6d:62:c2:a2:eb:e3:
         12:94:24:d4:fb:47:4e:33:fd:66:f8:f1:0a:34:89:2f:17:3a:
         a5:fc:89:e8:75:ca:aa:fb:d7:c0:17:b9:24:b1:6a:65:28:8a:
         f8:af:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:23:47 2025 by rpki-client