Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          WtQifflAquhZxBI7x9uWqinjxQBHsZSPCmJxa0jy+kA=
Subject key identifier:   40:EE:F1:12:5E:4D:71:C6:FF:20:E9:05:21:2C:7A:8E:90:9D:28:58
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       586D947A5DC2B028A1C329F07FC35998003C5F7E
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
Signing time:             Mon 11 May 2026 04:46:15 +0000
ROA not before:           Mon 11 May 2026 04:41:15 +0000
ROA not after:            Mon 10 May 2027 04:46:15 +0000
asID:                     262393
IP address blocks:        177.129.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6d:94:7a:5d:c2:b0:28:a1:c3:29:f0:7f:c3:59:98:00:3c:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May 11 04:41:15 2026 GMT
            Not After : May 10 04:46:15 2027 GMT
        Subject: CN=40EEF1125E4D71C6FF20E905212C7A8E909D2858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:a7:ae:2b:25:47:96:3d:ad:1c:83:86:72:
                    9d:1d:8c:6f:32:24:99:00:7f:9e:0e:7f:0d:8f:8c:
                    5b:aa:41:28:b3:92:39:83:a9:b0:81:bd:a4:ce:97:
                    c5:19:49:56:02:c9:54:47:06:bc:e2:1f:f7:94:6d:
                    3a:0d:78:ca:1c:9a:fc:c5:84:63:05:96:02:22:c9:
                    81:1a:9f:af:0a:d7:c8:2d:55:6f:af:69:81:12:5e:
                    d6:ee:58:bf:0a:2e:73:3b:cd:ce:e3:67:06:e3:b9:
                    e0:c8:0b:a1:f6:e5:06:83:70:5b:ac:80:3e:75:88:
                    5c:83:f6:9c:ee:1a:96:ae:b4:f3:f7:31:69:28:33:
                    7d:b4:66:49:c6:96:e2:f5:84:2e:f9:f4:38:d4:28:
                    f8:db:d7:15:52:49:aa:21:03:ef:bf:4d:a2:4e:01:
                    39:b5:b3:53:61:84:76:c9:80:e1:e3:86:98:7a:2d:
                    b5:0d:30:65:c0:c5:24:3d:7a:7b:1e:b5:9b:12:7d:
                    b6:3b:80:de:9a:ba:5a:bb:22:8a:bc:15:cf:c8:20:
                    75:25:f2:ec:3d:ed:95:dc:cd:a2:d1:3e:5f:09:d5:
                    dc:62:64:b6:ad:33:97:f8:fc:94:4a:64:2c:fa:6a:
                    71:5d:f1:72:59:7b:7d:6f:ad:95:37:86:16:e9:3a:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EE:F1:12:5E:4D:71:C6:FF:20:E9:05:21:2C:7A:8E:90:9D:28:58
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:f6:6f:43:bf:1a:27:b4:b1:e3:ca:89:27:39:8c:85:ef:15:
         3e:f1:c0:73:16:27:50:37:59:41:60:ee:7e:7e:62:c4:7d:31:
         76:72:bd:99:af:04:02:1e:7c:da:f0:6d:58:33:fc:a9:60:01:
         a2:e1:5d:cd:b9:af:b4:1d:1c:d6:35:a4:01:b3:19:d9:b5:9a:
         ec:97:8a:bf:e2:5f:ac:e7:a7:4e:14:1d:16:ab:17:f5:93:8c:
         33:da:f0:8c:ed:d0:af:f9:47:a4:82:02:e1:cd:fa:72:e4:0b:
         5a:8f:e0:11:d9:70:27:94:0c:1e:9b:7b:e9:88:f5:f2:c3:bf:
         73:f8:0d:82:c0:6d:0e:e3:c4:3c:d2:c4:49:23:59:fd:76:9e:
         5a:d3:39:ab:be:bf:ae:b0:cd:df:24:0b:ce:11:3f:3c:ea:19:
         5d:ca:14:06:c6:e1:6e:80:e3:b5:be:d0:1f:a1:1d:c7:a8:c0:
         69:e1:b8:78:a9:cc:fe:98:f6:54:9e:22:dd:e4:3e:3f:30:3f:
         5b:d5:ce:45:19:d3:3f:7d:7d:40:1f:a1:3c:54:24:c7:1d:67:
         cf:f4:33:d3:0e:ee:92:13:92:ba:d3:2e:5a:f6:80:6d:f1:fa:
         f9:a4:6a:f7:3d:ff:41:71:01:c4:e5:82:8f:ac:b4:41:19:33:
         01:a5:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:41:47 2026 by rpki-client