Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235352e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235352e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          rfxEOdvyC2LZYLhBtvq8aKGwtL987ZqzY2TfVlSsqqg=
Subject key identifier:   C5:0F:69:81:BF:54:D9:75:0F:46:B4:9E:1B:A6:77:BE:FC:03:E1:5F
Certificate issuer:       /CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
Certificate serial:       73D2AF17D6871B7E658A214260DC5BAE383BD235
Authority key identifier: B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235352e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 16 Jul 2026 15:07:02 +0000
ROA not before:           Thu 16 Jul 2026 15:02:02 +0000
ROA not after:            Thu 15 Jul 2027 15:07:02 +0000
asID:                     52556
IP address blocks:        177.85.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl
                          rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d2:af:17:d6:87:1b:7e:65:8a:21:42:60:dc:5b:ae:38:3b:d2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
        Validity
            Not Before: Jul 16 15:02:02 2026 GMT
            Not After : Jul 15 15:07:02 2027 GMT
        Subject: CN=C50F6981BF54D9750F46B49E1BA677BEFC03E15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:47:fb:96:f8:47:84:ae:3a:11:d0:80:c5:
                    ed:60:29:ea:d2:a9:38:22:ab:ed:12:aa:9a:54:5c:
                    74:56:8b:91:2e:fb:dc:13:81:62:aa:61:f0:c7:ca:
                    37:0d:9b:73:c7:0e:41:be:b6:0b:1f:70:74:fe:54:
                    99:df:48:da:ab:99:a2:cf:4c:ca:ec:bf:db:a5:3a:
                    ca:6f:98:ce:62:7b:62:9d:ae:58:ec:01:95:be:26:
                    25:8f:6d:8e:e3:50:77:48:71:8c:63:6e:fd:31:62:
                    f5:de:b2:5a:8d:01:b3:3b:a0:6f:14:8f:33:6d:e8:
                    72:0f:9e:25:5f:ad:71:d5:d1:51:53:66:e7:7b:ef:
                    5b:bd:aa:9b:43:6c:df:c0:07:70:54:a4:2e:c4:72:
                    05:48:c8:2f:c0:08:fe:ca:90:cb:9a:3d:5d:d2:b5:
                    7a:43:30:0d:0f:ac:f2:5f:94:97:e3:34:61:90:3c:
                    f3:2d:a5:6a:cf:73:1b:a1:7e:83:72:16:c8:5b:34:
                    3a:84:0e:a3:be:2b:cd:97:fe:e8:08:21:94:70:52:
                    3b:85:65:da:57:aa:75:02:31:6f:cc:ec:4c:41:37:
                    00:30:15:f0:41:77:c3:26:c1:20:ac:1b:eb:71:68:
                    99:2c:ef:38:09:27:41:a9:8c:0f:c7:16:76:8f:2a:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:69:81:BF:54:D9:75:0F:46:B4:9E:1B:A6:77:BE:FC:03:E1:5F
            X509v3 Authority Key Identifier:
                keyid:B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235352e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:6d:af:95:d3:8c:61:e2:0d:8e:dd:bf:90:8f:3a:6b:cb:
         48:f2:aa:48:5d:d5:8c:c4:4b:d9:74:39:74:37:91:0a:50:aa:
         db:2c:68:74:4e:3e:96:d8:8d:22:f6:c5:b9:24:bb:8e:2a:11:
         b7:55:45:85:55:74:eb:4b:f9:68:59:c1:3a:04:6b:6f:2a:92:
         da:17:80:38:c0:b1:52:af:db:1f:d8:50:b2:71:d3:39:c9:4c:
         8a:bc:97:b0:18:ba:8b:f5:4b:2d:5c:ac:03:db:e2:a0:f0:f0:
         55:e5:ee:f7:c4:52:e6:10:44:96:94:98:d3:42:47:38:e6:7a:
         6e:e5:66:31:a5:ca:dd:98:af:4c:67:13:ba:96:38:09:f2:1d:
         e8:b6:db:a6:bf:04:5b:9c:39:a7:ee:10:6c:be:9d:4b:7b:33:
         72:45:a6:2b:a6:41:9c:fa:b1:e3:17:ed:4f:ac:2c:8b:47:98:
         57:03:57:0f:b7:33:28:08:ad:06:1c:84:9c:f4:72:99:1f:e9:
         49:14:e3:d1:26:26:4e:2f:31:ed:b3:d5:e9:e5:b9:78:46:24:
         40:22:80:e8:fb:b5:a9:c2:96:df:e9:6c:56:46:47:88:1e:7e:
         ad:2e:cf:af:6e:8c:b2:e8:3c:e1:4e:66:6d:02:c0:b5:23:4b:
         64:bd:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:43:00 2026 by rpki-client