Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32312e302f32342d3234203d3e20323636313239.roa
File:                     3137372e33362e32312e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          ih9FOxd0dpfJ3+Xmcn2PWk+OZUPFQxmK7UBdQ4U1QNA=
Subject key identifier:   14:EA:4D:DF:58:3D:DB:06:BC:A9:A4:48:E9:AC:8C:05:78:BA:53:F3
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       3AAF1A7F79F79B9A004A64FD8EBF7DCD1E8AB139
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32312e302f32342d3234203d3e20323636313239.roa
Signing time:             Tue 22 Sep 2026 18:00:00 +0000
ROA not before:           Tue 22 Sep 2026 17:55:00 +0000
ROA not after:            Tue 21 Sep 2027 18:00:00 +0000
asID:                     266129
IP address blocks:        177.36.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:af:1a:7f:79:f7:9b:9a:00:4a:64:fd:8e:bf:7d:cd:1e:8a:b1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Sep 22 17:55:00 2026 GMT
            Not After : Sep 21 18:00:00 2027 GMT
        Subject: CN=14EA4DDF583DDB06BCA9A448E9AC8C0578BA53F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:30:92:13:e7:35:84:b3:45:3f:c1:db:db:48:
                    71:00:c4:03:37:c5:69:6c:c3:22:87:d3:23:d4:7d:
                    c9:22:24:ea:a4:79:ba:e6:4b:75:9d:08:30:de:96:
                    cf:26:0e:31:a0:4f:5e:08:b7:f8:ea:fb:1c:e4:71:
                    dc:d7:14:52:76:bd:80:52:f3:ab:d9:22:5f:db:56:
                    92:19:63:06:a7:0b:00:c2:69:2e:13:a9:eb:16:57:
                    75:57:ce:a5:29:0c:86:27:5a:22:3f:2a:eb:ee:45:
                    e9:6f:8f:d5:44:09:35:4d:80:d0:0f:5a:91:fe:8e:
                    a1:cc:9f:a8:64:9f:95:56:e1:9d:aa:03:64:42:34:
                    d2:9a:a3:34:1b:a3:01:62:c8:7e:31:1f:ab:64:91:
                    7b:e6:45:1c:d5:c3:2c:e9:e5:7e:30:fa:5a:49:f1:
                    f5:37:44:41:f7:58:57:da:9a:b1:b3:ef:b8:b0:96:
                    7b:fc:89:74:36:46:ec:1d:47:a2:b7:aa:40:b3:56:
                    32:6c:07:5c:a5:44:d4:18:89:4f:1a:35:54:4d:4d:
                    34:d0:a9:bb:11:26:ff:bd:d1:db:a4:b4:9b:d4:78:
                    20:42:47:fd:36:df:a6:8d:c5:4a:b4:cb:7a:08:71:
                    13:02:17:d3:e5:83:84:a6:d5:27:8f:5d:d7:e9:12:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:4D:DF:58:3D:DB:06:BC:A9:A4:48:E9:AC:8C:05:78:BA:53:F3
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32312e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:11:4e:e8:cd:e9:e4:1c:14:28:c5:9c:e4:db:cd:1f:3c:
         79:3e:72:ad:75:8d:50:d9:1d:28:17:59:24:e1:67:58:bd:4d:
         20:51:26:29:72:f4:48:14:01:61:97:9e:fa:3d:69:27:dd:f4:
         53:06:69:ba:bd:47:1c:d6:ef:34:32:55:9d:2a:bf:24:ba:c2:
         ab:df:a0:dd:f2:a6:ce:2a:61:50:46:4c:0c:37:2e:34:70:a9:
         0d:2c:e5:03:87:d3:37:18:ce:c4:57:64:18:99:59:59:4b:5b:
         51:3e:23:55:f2:ff:ad:3e:3c:9e:da:2d:82:a9:b4:9f:9c:6f:
         23:00:06:81:0d:e8:17:d9:84:da:9d:52:d4:c6:3d:13:25:b3:
         e9:64:30:e2:ee:4f:72:5d:bb:1f:7e:80:08:60:f8:ce:2c:67:
         37:e9:c5:19:0c:81:49:a3:ed:f7:3c:1a:43:11:32:d2:42:a6:
         53:cf:f4:18:bd:89:6f:6b:45:10:90:3f:84:56:02:ef:79:bf:
         6e:37:b2:ce:f2:cf:ed:fe:6e:8e:56:a5:33:77:a6:53:45:50:
         b9:5d:59:3e:44:b2:59:66:10:8f:f5:a0:4a:79:18:2b:10:75:
         0d:d7:01:c7:0a:70:5c:72:60:72:a7:a9:d2:fe:08:ed:6c:cf:
         7f:48:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----