Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3132382e302f32322d3332203d3e20323639353534.roa
File:                     3137372e3132392e3132382e302f32322d3332203d3e20323639353534.roa (raw, json)
Hash identifier:          uG4POu7oHP4bih9xfBScpXzyxc9BOWL67ZYBqbXy06U=
Subject key identifier:   72:67:88:12:04:2B:52:4E:CB:16:82:B7:B5:59:E8:69:E7:25:DA:EF
Certificate issuer:       /CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
Certificate serial:       2ABBFDBBFFB91923711B88072D0C4AAB54B38BDE
Authority key identifier: 73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3132382e302f32322d3332203d3e20323639353534.roa
Signing time:             Fri 02 Oct 2026 18:30:04 +0000
ROA not before:           Fri 02 Oct 2026 18:25:04 +0000
ROA not after:            Fri 01 Oct 2027 18:30:04 +0000
asID:                     269554
IP address blocks:        177.129.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl
                          rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bb:fd:bb:ff:b9:19:23:71:1b:88:07:2d:0c:4a:ab:54:b3:8b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
        Validity
            Not Before: Oct  2 18:25:04 2026 GMT
            Not After : Oct  1 18:30:04 2027 GMT
        Subject: CN=72678812042B524ECB1682B7B559E869E725DAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:32:be:0d:e3:7e:52:16:1c:97:91:a0:8e:
                    26:47:91:be:5a:2c:f4:86:7d:e4:f6:45:66:dc:29:
                    17:cb:58:d2:0e:33:08:e2:c0:6e:0f:60:c6:d6:81:
                    c0:33:ac:96:b7:9a:7c:8f:9b:07:c6:65:c6:5b:e2:
                    d7:90:cd:5d:4b:bf:6c:81:97:36:2c:9e:f1:1a:de:
                    d5:8b:79:00:a9:a3:59:8a:ad:3d:2b:07:0e:87:22:
                    b4:90:af:5b:e0:9b:33:5b:5f:73:f0:f2:57:2b:ef:
                    73:c1:ef:46:71:51:11:f0:e9:3d:7b:a6:2c:bf:1d:
                    de:4b:39:5a:a6:ce:30:27:a8:86:42:e2:e7:0b:b9:
                    57:1f:57:fc:a5:7f:0b:f5:a2:a6:53:a0:ac:4d:24:
                    bc:2e:20:6f:3d:79:1d:74:61:33:5e:70:2c:48:a6:
                    8a:32:8c:90:c8:63:ca:06:90:29:93:10:f4:e4:5d:
                    71:55:4c:1a:d4:d5:b0:cc:b3:d9:65:c4:01:32:17:
                    97:7e:4b:2c:ff:78:95:08:cd:00:8d:12:44:76:04:
                    06:50:88:19:ed:ac:3d:cc:9b:07:7e:81:2a:10:de:
                    48:e0:61:f3:7e:43:25:eb:e8:ea:77:30:4c:21:11:
                    80:f3:ca:b6:6f:d6:62:7b:59:88:f0:b2:9d:19:4f:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:88:12:04:2B:52:4E:CB:16:82:B7:B5:59:E8:69:E7:25:DA:EF
            X509v3 Authority Key Identifier:
                keyid:73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3132382e302f32322d3332203d3e20323639353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:35:e3:a9:a9:23:68:b1:90:6f:3c:c0:26:2b:c8:a8:4c:
         9d:64:53:5e:7a:38:05:0d:02:be:48:12:fe:27:3e:e8:b5:ae:
         b7:32:46:0d:f2:a3:f4:70:3e:04:77:c3:5e:25:1d:3e:bc:cc:
         f2:68:ee:f1:1e:87:df:aa:62:f6:3a:08:fb:40:48:15:3f:25:
         a7:31:7a:02:3d:c9:62:48:45:89:09:b2:86:95:31:fb:34:f6:
         b4:4a:b1:97:ad:95:f9:cf:9b:38:b7:96:95:f8:a3:fb:63:1b:
         77:f0:fa:ff:82:98:7a:7d:19:4c:8c:4f:63:57:b6:47:88:73:
         eb:ab:71:12:4a:79:cb:99:8a:36:24:a8:88:47:ad:04:1b:da:
         ca:73:80:a2:c7:2e:48:c9:c5:73:b3:e4:49:09:d8:c6:7c:6e:
         e2:db:cf:f5:bb:89:b3:6a:78:61:be:63:0d:f5:de:b4:81:21:
         31:33:4d:04:f2:15:56:cd:73:67:24:36:63:ba:f7:0b:6f:87:
         84:d1:89:d0:ad:b8:f0:ff:f5:36:de:19:0e:62:33:aa:4a:26:
         21:7b:93:48:73:ad:33:d4:11:ea:00:96:c7:68:05:4a:8d:38:
         42:7b:eb:11:00:3f:4a:01:63:0f:14:66:9e:4f:6d:83:4e:7b:
         be:db:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:06 2026 by rpki-client