Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235322e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          Hxio2mHP6sgYQuq9XIhX0updrTgtUdi/lm485Fw9cPo=
Subject key identifier:   3B:8C:8A:10:72:FB:68:41:35:35:AB:BC:54:AE:1A:29:AD:72:90:90
Certificate issuer:       /CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
Certificate serial:       42139BD14D51A32B293566AB609DB0A739B99C52
Authority key identifier: B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 16 Jul 2026 15:07:01 +0000
ROA not before:           Thu 16 Jul 2026 15:02:01 +0000
ROA not after:            Thu 15 Jul 2027 15:07:01 +0000
asID:                     52556
IP address blocks:        177.85.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl
                          rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:13:9b:d1:4d:51:a3:2b:29:35:66:ab:60:9d:b0:a7:39:b9:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
        Validity
            Not Before: Jul 16 15:02:01 2026 GMT
            Not After : Jul 15 15:07:01 2027 GMT
        Subject: CN=3B8C8A1072FB68413535ABBC54AE1A29AD729090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:4d:09:7b:eb:10:18:7c:34:b8:81:7a:3e:
                    f2:be:20:6d:45:62:7d:b1:f7:95:23:bb:96:d3:bc:
                    49:33:bc:d1:07:82:56:47:98:df:02:c6:cc:5b:f7:
                    bf:b9:9e:d9:4d:9e:1a:8e:cd:a6:48:df:6b:dd:a3:
                    06:bd:2d:46:86:ac:84:8e:17:26:e5:74:4f:f2:2c:
                    05:d7:c4:48:d8:17:c0:a8:0f:fe:cd:d5:2b:ed:10:
                    06:95:da:b0:8d:81:4c:88:4f:37:d7:da:3d:90:52:
                    0f:c0:b8:d7:39:2e:fa:9f:9b:4c:f9:77:05:b4:b1:
                    b0:cb:eb:52:29:0b:0c:ee:5f:c1:5a:60:79:5c:89:
                    33:86:e3:cd:81:c6:78:db:38:ab:e6:ff:85:e1:55:
                    f2:ac:d3:36:e9:e6:d3:b7:d3:bb:77:47:23:4e:e3:
                    7f:6b:db:61:60:03:61:83:75:2f:1a:84:73:68:e6:
                    90:cb:f1:e8:d8:76:ff:9c:9a:b1:a6:0f:69:58:bd:
                    72:d5:03:24:31:18:81:bf:53:dc:52:21:e7:2e:9c:
                    59:dc:9c:73:39:cf:18:e4:f2:76:5a:e5:04:b0:df:
                    a5:68:6b:ba:91:5d:6b:0b:16:65:01:8a:68:09:8c:
                    4b:05:be:83:67:a1:ff:3d:ff:0b:e0:25:16:86:6c:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8C:8A:10:72:FB:68:41:35:35:AB:BC:54:AE:1A:29:AD:72:90:90
            X509v3 Authority Key Identifier:
                keyid:B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:34:97:b2:a4:04:ad:55:8e:58:85:e3:bd:c6:e7:ec:b7:
         55:06:19:18:58:3b:28:b0:87:64:ec:fc:d7:71:91:7c:7f:26:
         f5:20:dd:79:c2:a3:f5:9e:b2:aa:3b:b9:07:44:38:a4:d8:9e:
         a0:24:81:14:c0:ee:5a:13:3e:68:1d:72:5c:d3:e3:17:ee:7b:
         a4:45:58:ac:a9:f0:c1:cc:c2:02:58:1d:17:ba:db:a8:6a:ce:
         91:a4:17:d8:cc:b7:98:26:fb:58:26:22:27:ff:d8:7e:cb:4e:
         b6:66:12:56:40:cb:b6:b1:9a:6d:cc:97:14:bf:d5:19:70:d3:
         76:cb:63:54:ee:0c:b7:f0:af:d4:49:80:ac:66:3e:7e:ec:dc:
         53:9a:88:21:39:22:8c:ce:74:a6:d2:92:c1:c7:97:8a:ae:c2:
         e6:eb:10:97:bf:83:e8:76:fa:5e:df:dd:1d:a8:88:08:8e:bb:
         d5:09:70:39:21:2a:7d:1a:f1:3f:61:7e:8b:25:1f:7e:88:5b:
         c1:3f:91:88:ca:53:d3:42:4d:57:7b:4d:1e:19:87:dc:78:26:
         89:93:bf:40:a5:9c:f8:77:15:0c:be:8e:4e:88:14:0b:41:5e:
         c9:60:6c:35:b8:59:76:82:f3:e2:bb:32:1f:8f:10:43:04:35:
         28:4a:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:43:04 2026 by rpki-client