Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa
File:                     3137372e31302e33322e302f32312d3231203d3e20323632383432.roa (raw, json)
Hash identifier:          rFKGOMm5GtIoTYEWSQ514Vl2cWGD5LbjfSxwVy3qskA=
Subject key identifier:   19:C5:65:EA:DE:3F:79:7F:11:C6:16:97:E3:A5:0B:88:C5:1D:4E:5D
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       34A4EE25FA67A849F11959DB0E243691B4111C75
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:22 +0000
ROA not before:           Fri 10 Jul 2026 14:18:22 +0000
ROA not after:            Fri 09 Jul 2027 14:23:22 +0000
asID:                     262842
IP address blocks:        177.10.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a4:ee:25:fa:67:a8:49:f1:19:59:db:0e:24:36:91:b4:11:1c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:22 2026 GMT
            Not After : Jul  9 14:23:22 2027 GMT
        Subject: CN=19C565EADE3F797F11C61697E3A50B88C51D4E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:f3:2a:2f:09:06:86:38:9a:24:52:14:39:
                    5f:18:14:28:5f:98:df:82:f6:35:8b:d5:5e:72:c1:
                    86:02:5d:3f:b9:45:7a:26:79:83:e4:20:c9:00:07:
                    da:5e:36:0f:f6:5c:cc:8a:b3:8d:b8:f5:37:e2:90:
                    e1:3f:17:fe:48:79:b6:50:60:24:61:47:3c:f4:7e:
                    44:2e:96:25:c7:3f:72:7b:9a:e9:9f:f9:ff:eb:75:
                    d2:70:b9:45:8e:55:e0:ff:6a:ec:42:de:d0:d8:56:
                    d4:7b:ec:9f:21:95:8c:65:bc:d9:bd:ce:c7:d8:1b:
                    45:a3:94:1c:fe:4a:14:f9:73:60:58:38:85:d9:d0:
                    c5:60:5b:a2:4c:6e:01:35:73:51:d2:c4:04:82:df:
                    af:9c:0a:f5:d1:68:43:8c:9a:db:15:19:25:35:f9:
                    cf:ed:29:75:89:73:e6:26:a7:5d:0e:2c:38:23:be:
                    5d:55:15:fb:92:eb:2f:14:7c:29:6a:90:56:0f:ac:
                    ba:2e:cd:a4:1b:41:6e:6d:3d:0d:fe:3a:f9:3f:d3:
                    91:8b:f6:9d:1e:86:ed:f3:50:03:00:c1:51:1c:92:
                    01:19:3d:4e:1a:3d:74:45:df:ab:62:17:3a:4a:c0:
                    8b:61:de:48:31:00:3e:25:28:c6:4e:ad:45:b2:cd:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:65:EA:DE:3F:79:7F:11:C6:16:97:E3:A5:0B:88:C5:1D:4E:5D
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:29:67:a6:6a:1a:f9:51:4a:d7:fc:cd:23:f5:f3:ee:55:33:
         cd:86:ef:f3:9f:28:ff:07:43:52:c6:dd:0b:0b:3f:d3:ff:cb:
         9c:82:87:57:b3:fe:79:b8:80:a4:61:6c:f8:1e:8c:58:27:bb:
         30:a0:e1:30:2b:f2:20:30:f4:c1:f9:8d:61:d2:f3:02:5e:9a:
         21:7c:8f:f9:a7:b3:06:f5:a6:82:74:76:35:0b:e5:8d:62:76:
         75:54:b2:0b:81:12:2f:b2:dd:c2:f1:2f:01:a7:43:22:48:5b:
         4d:75:db:c9:d4:1b:45:01:ec:a0:84:b6:f6:10:53:c3:c7:9b:
         22:32:0e:22:31:de:d8:67:4f:bb:47:bc:19:ad:af:9a:e0:e0:
         b4:f3:7a:f5:d5:74:fd:f4:61:ca:d2:e4:fc:5d:20:d3:3c:55:
         bb:2c:87:09:d0:20:9f:43:09:de:7f:dc:bc:06:86:3f:66:a9:
         01:78:4c:27:67:04:16:f1:12:4f:1a:f8:be:c0:09:65:6d:b5:
         d3:5d:71:0a:41:67:cb:ed:e1:ee:17:f3:5d:d7:29:13:02:de:
         ce:2c:ea:2d:f6:85:d2:53:0d:33:2a:34:99:27:18:f5:4f:af:
         dd:a0:13:b0:57:bf:8b:6d:03:eb:59:52:e3:69:ff:8c:f1:39:
         8c:82:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:54 2026 by rpki-client