Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e31302e34382e302f32322d3234203d3e20323632343539.roa
File:                     3137372e31302e34382e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          cbGuXCp/I/Yoe9iMTSw1Nhe7VO3ejQOXWLWR8YZaHAs=
Subject key identifier:   7A:82:8C:15:30:12:D7:48:E6:77:2B:78:70:4C:36:68:7C:56:24:DB
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       61F402C59D8DF4F4C082934FCDDC6F3629873F05
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e31302e34382e302f32322d3234203d3e20323632343539.roa
Signing time:             Mon 20 Jul 2026 17:18:20 +0000
ROA not before:           Mon 20 Jul 2026 17:13:20 +0000
ROA not after:            Mon 19 Jul 2027 17:18:20 +0000
asID:                     262459
IP address blocks:        177.10.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f4:02:c5:9d:8d:f4:f4:c0:82:93:4f:cd:dc:6f:36:29:87:3f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jul 20 17:13:20 2026 GMT
            Not After : Jul 19 17:18:20 2027 GMT
        Subject: CN=7A828C153012D748E6772B78704C36687C5624DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:e2:53:66:be:1b:ae:04:e2:66:f1:21:67:
                    a8:d8:7c:09:5f:b9:7d:a9:39:4a:ec:8e:10:0e:61:
                    5d:a3:ed:5f:f6:cc:3f:9f:7b:73:2a:7a:b9:a8:9b:
                    88:dd:02:56:b2:ee:69:ca:66:4a:5a:df:52:20:6a:
                    e4:42:0c:a7:ad:30:6d:7e:75:61:2b:16:63:6e:dd:
                    a0:53:f5:91:58:e9:6b:f7:8e:b4:c1:82:4b:74:d6:
                    fc:91:79:2c:ee:a3:c0:c5:92:46:b2:a3:4e:97:e0:
                    7b:45:fe:a4:6d:be:72:79:12:d8:32:f8:d2:76:a8:
                    7c:71:3d:24:98:69:88:d7:bf:48:57:f2:8c:23:4f:
                    5e:4d:17:83:bd:ac:71:12:3c:40:36:f6:23:a6:65:
                    df:fb:0f:52:e3:a9:2d:5b:ae:6d:b7:09:90:ce:e9:
                    2a:4e:f8:82:11:1a:63:74:02:37:aa:09:3c:da:82:
                    9e:fe:2a:7e:40:ed:7d:4e:67:b5:fa:20:72:a2:88:
                    56:2d:33:9b:25:00:be:05:7a:66:25:0e:72:d7:cd:
                    d0:eb:d0:a5:f3:f8:b6:8d:a0:80:d7:f6:51:f1:a4:
                    e8:d9:46:23:7a:13:e1:15:70:2b:a0:a5:1c:45:de:
                    ff:9b:1a:24:6c:30:52:d3:f2:1d:33:1c:66:9d:0f:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:8C:15:30:12:D7:48:E6:77:2B:78:70:4C:36:68:7C:56:24:DB
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e31302e34382e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:e5:ff:f2:13:b2:66:6c:f5:73:39:ca:19:77:e4:6f:fb:
         09:fe:f1:76:18:96:bf:33:4f:3d:cc:39:92:a1:f8:d6:44:94:
         74:40:73:42:92:1f:ed:16:92:ad:d7:81:d8:39:c1:20:61:23:
         91:23:4d:e0:47:f3:67:41:5a:cb:c9:97:f2:9c:72:59:e2:fe:
         fa:c8:4e:75:82:32:fd:7c:48:ea:13:83:f1:98:e8:7c:72:1c:
         fe:22:06:0a:98:df:6b:bf:a1:a6:89:01:1a:08:37:c9:3d:77:
         0a:68:2b:50:c6:b7:7d:dc:d7:15:ba:2d:61:12:46:eb:f2:b5:
         7f:3a:f2:4c:ca:6a:9e:cd:b5:d9:e2:f1:7b:21:10:e5:53:55:
         b8:ae:b7:c9:b6:5b:58:bd:d6:3d:6a:dc:7e:f8:2f:1c:b2:14:
         83:d8:e3:c1:92:69:e6:b1:cc:ed:8b:13:c4:b2:8f:2c:85:3d:
         f5:7d:90:d4:b0:12:90:6e:43:b2:41:11:9d:39:53:42:c5:df:
         c6:70:1e:9f:95:a3:1a:7f:51:c0:77:f3:7d:31:d7:2c:cb:3c:
         14:0d:1c:45:8e:61:77:68:c9:16:2c:e6:57:a8:39:9e:26:b0:
         7b:21:d1:84:27:04:37:78:6f:a7:b4:e3:32:ba:f4:c7:a3:10:
         73:61:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:51 2026 by rpki-client