Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3234382e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          7Os8npHAxQNK+JgteQ7qI0qmMLdZUJ9MJ1E+uVuYxTk=
Subject key identifier:   DC:56:99:F9:CD:5A:CE:46:76:32:E6:5C:1D:C0:B5:A0:3F:F0:C8:9F
Certificate issuer:       /CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
Certificate serial:       03368E4A9A8EFC8D86EE9C17FE8757F1F9665316
Authority key identifier: B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 16 Jul 2026 15:07:02 +0000
ROA not before:           Thu 16 Jul 2026 15:02:02 +0000
ROA not after:            Thu 15 Jul 2027 15:07:02 +0000
asID:                     52556
IP address blocks:        177.85.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl
                          rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:8e:4a:9a:8e:fc:8d:86:ee:9c:17:fe:87:57:f1:f9:66:53:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
        Validity
            Not Before: Jul 16 15:02:02 2026 GMT
            Not After : Jul 15 15:07:02 2027 GMT
        Subject: CN=DC5699F9CD5ACE467632E65C1DC0B5A03FF0C89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:9c:19:43:f2:2a:88:d0:63:71:c1:75:35:
                    51:e5:c6:05:db:c2:d6:7c:4e:17:3a:a6:f2:87:d6:
                    6a:d3:42:6f:3b:f7:a4:23:1f:64:09:79:80:ce:3f:
                    1d:38:04:23:32:5c:57:ed:5a:6d:e5:af:33:70:b7:
                    a6:53:c8:e8:11:2f:28:53:5b:95:63:e0:28:a0:50:
                    fa:bc:1a:7a:98:c3:60:62:c8:02:e4:16:f1:6c:2e:
                    d6:88:a9:b6:cd:4b:20:d3:7f:5b:a9:3b:32:c0:73:
                    ce:ed:85:1e:52:ab:22:10:c1:d4:a1:1b:53:c5:0c:
                    6e:33:49:3c:10:01:85:27:33:92:7f:a7:9a:e4:01:
                    c6:15:7d:3e:94:e2:1e:92:52:7b:29:ff:5c:e2:b8:
                    b8:3d:eb:bb:b4:89:76:42:8d:f2:1e:ea:05:92:12:
                    95:a1:b6:21:dc:8d:ac:42:89:88:90:24:3c:aa:67:
                    b0:ce:18:57:f0:cb:42:d3:3c:9b:23:a6:02:9a:ad:
                    79:c4:15:74:be:da:67:8a:3a:f9:16:d4:8d:3d:03:
                    eb:77:b1:cf:0f:10:69:1f:92:1f:a2:c7:50:ff:98:
                    ca:38:a0:93:39:27:2a:79:45:0b:2c:c3:a6:f3:8f:
                    87:67:c4:50:31:89:e7:1a:5b:5c:16:14:83:b1:71:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:99:F9:CD:5A:CE:46:76:32:E6:5C:1D:C0:B5:A0:3F:F0:C8:9F
            X509v3 Authority Key Identifier:
                keyid:B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:d8:d2:53:f2:d4:b5:25:30:07:06:04:44:60:83:6c:60:
         3a:72:64:fc:9a:64:59:6f:0c:0d:da:a4:95:57:6e:4a:af:be:
         58:52:54:50:e4:98:34:55:15:c2:17:d8:ae:78:80:8b:f0:16:
         cd:5d:14:98:bd:de:38:0e:9c:f7:28:42:2b:4f:47:2e:87:1b:
         ef:4c:8f:6f:9f:b7:ff:76:25:7e:b2:10:76:17:a9:cc:c3:de:
         9d:41:75:0d:9e:80:a0:41:93:fc:b1:fc:1f:e2:62:52:06:3b:
         9d:eb:f0:ee:7f:44:53:4b:5c:61:22:bc:41:15:32:44:72:8e:
         a5:18:d9:b2:7c:90:b0:53:bb:6b:65:6f:cd:15:1e:f1:ef:ba:
         10:46:0f:84:51:3b:92:30:8c:93:89:28:b8:aa:0d:b8:59:39:
         02:de:da:65:66:d9:3e:e3:90:d4:8a:2e:25:26:4f:41:59:c4:
         7f:f6:61:d8:f5:ff:e6:2c:b6:7a:ca:4c:ac:8b:3c:e8:e0:1f:
         05:08:df:ad:33:a7:b8:16:ae:cb:c9:77:6d:df:75:f6:c9:c3:
         b3:2b:65:96:cb:1c:8e:a2:60:4b:e0:25:8e:66:54:6a:e5:6e:
         ba:d2:a0:87:a6:92:3c:b5:76:78:ff:53:88:44:17:69:df:89:
         3a:9f:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:25 2026 by rpki-client