Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33332e302f32342d3234203d3e20323632383432.roa
File:                     3137372e31302e33332e302f32342d3234203d3e20323632383432.roa (raw, json)
Hash identifier:          vXrzsMjU8JeX2OpYqKnVFYRbti7Y3GXRW6GfMbnUzDM=
Subject key identifier:   0D:C2:A9:C6:26:52:1B:A6:74:7A:BF:28:9A:8D:79:18:C1:DF:63:A7
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       01B18BBFB9BD566F2D79511F21DF1236AF409794
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33332e302f32342d3234203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:22 +0000
ROA not before:           Fri 10 Jul 2026 14:18:22 +0000
ROA not after:            Fri 09 Jul 2027 14:23:22 +0000
asID:                     262842
IP address blocks:        177.10.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:8b:bf:b9:bd:56:6f:2d:79:51:1f:21:df:12:36:af:40:97:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:22 2026 GMT
            Not After : Jul  9 14:23:22 2027 GMT
        Subject: CN=0DC2A9C626521BA6747ABF289A8D7918C1DF63A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:ea:cf:be:6b:f2:cf:48:09:cc:7f:8f:a8:
                    fa:01:df:06:c6:7c:83:d0:d8:1c:c2:cd:f8:98:ac:
                    4b:2e:34:f5:27:d5:6f:b1:57:3b:bd:be:51:d7:d9:
                    9f:3c:ee:62:30:dc:73:a4:9c:66:4a:ab:37:a2:aa:
                    88:54:3a:a3:cb:1e:3e:85:d7:17:0b:55:ce:70:39:
                    aa:38:76:de:1f:4e:7e:aa:b2:6d:cb:4e:e8:a5:32:
                    e9:08:05:25:49:26:ea:85:2b:66:b7:88:9b:48:b6:
                    12:93:b0:ef:62:b0:42:36:e0:64:52:7a:74:f0:d4:
                    8c:29:c8:27:a5:25:db:30:fa:b8:43:0a:35:46:b8:
                    a6:a3:2e:d5:07:fd:cd:dc:6a:a4:38:46:7a:1f:56:
                    1e:b8:0b:66:5a:12:e8:d8:c5:b8:25:f3:0f:05:14:
                    1a:22:22:9e:e7:47:91:ff:76:e8:53:4d:3b:72:5e:
                    af:6b:22:a3:67:c4:49:cb:43:72:09:06:53:16:72:
                    f3:0b:3c:d2:ed:f2:4e:09:a4:63:53:8d:1a:3e:0a:
                    c4:f4:6e:eb:35:20:f1:61:6f:e9:50:19:4d:45:aa:
                    84:ae:2e:5c:db:fd:aa:0b:f3:3a:5a:28:50:05:3d:
                    1a:56:b4:de:21:46:c6:88:83:7c:c4:b7:19:3b:07:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:A9:C6:26:52:1B:A6:74:7A:BF:28:9A:8D:79:18:C1:DF:63:A7
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33332e302f32342d3234203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:89:72:6d:6b:15:b4:15:94:35:d4:02:81:7b:f7:93:08:
         81:1a:e2:74:25:69:3d:c4:51:37:07:16:83:11:d2:de:de:dd:
         60:4d:11:62:24:1a:4e:be:6b:28:29:3f:fd:0d:97:c2:07:25:
         93:db:1b:79:03:db:82:b5:25:54:6d:37:b4:ba:99:2c:c4:38:
         34:d8:bb:c4:b2:8f:6f:16:aa:d4:39:ec:b0:20:f5:93:00:cd:
         02:d2:a2:33:e9:78:c2:30:13:40:33:8e:40:f4:1b:17:2a:2a:
         f4:c3:17:8e:38:d6:31:f5:82:a0:cd:ab:2b:82:ee:a6:0a:be:
         94:25:55:97:06:e1:61:a7:97:3c:82:94:77:dd:2f:6a:b5:32:
         b7:3f:fb:e5:4e:51:b1:4a:6f:97:92:53:39:20:10:22:2a:b8:
         01:4b:90:4d:a9:c2:21:e6:51:fd:62:3b:0e:0f:28:44:c6:9e:
         fe:9c:4c:a4:2f:de:95:ba:a7:70:a9:6c:c8:be:60:27:7a:79:
         fe:e8:c3:e8:71:ae:c3:35:8d:c9:a5:33:69:f0:9c:f4:9d:1f:
         20:24:12:0e:3a:ba:5b:9c:b0:02:2a:31:3c:61:a7:d1:ce:8b:
         3c:cd:90:e3:18:cc:98:2c:e0:94:06:70:3d:f4:89:78:6f:18:
         4d:c7:5b:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAbGLv7m9Vm8teVEfId8SNq9Al5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyNUVERkVDQzJBQTJCOEQwNzJDMDY4RTA0NDM5QUJD
NDBBQzVFODAeFw0yNjA3MTAxNDE4MjJaFw0yNzA3MDkxNDIzMjJaMDMxMTAvBgNV
BAMTKDBEQzJBOUM2MjY1MjFCQTY3NDdBQkYyODlBOEQ3OTE4QzFERjYzQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOkOrPvmvyz0gJzH+PqPoB3wbG
fIPQ2BzCzfiYrEsuNPUn1W+xVzu9vlHX2Z887mIw3HOknGZKqzeiqohUOqPLHj6F
1xcLVc5wOao4dt4fTn6qsm3LTuilMukIBSVJJuqFK2a3iJtIthKTsO9isEI24GRS
enTw1IwpyCelJdsw+rhDCjVGuKajLtUH/c3caqQ4RnofVh64C2ZaEujYxbgl8w8F
FBoiIp7nR5H/duhTTTtyXq9rIqNnxEnLQ3IJBlMWcvMLPNLt8k4JpGNTjRo+CsT0
bus1IPFhb+lQGU1FqoSuLlzb/aoL8zpaKFAFPRpWtN4hRsaIg3zEtxk7B9YTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDcKpxiZSG6Z0er8omo15GMHfY6cwHwYDVR0j
BBgwFoAUhiXt/swqorjQcsBo4EQ5q8QKxegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpUREhuaVc1SnU4d3lwaWVmdWlhS3Y2bW1pNk5QZnJaS01mMnBETG53
bjMvMC84NjI1RURGRUNDMkFBMkI4RDA3MkMwNjhFMDQ0MzlBQkM0MEFDNUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjVFREZFQ0MyQUEyQjhE
MDcyQzA2OEUwNDQzOUFCQzQwQUM1RTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaVERIbmlXNUp1OHd5cGllZnVpYUt2Nm1taTZOUGZyWktNZjJwRExud24zLzAv
MzEzNzM3MmUzMTMwMmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQohMA0GCSqGSIb3DQEBCwUAA4IBAQB46IlybWsV
tBWUNdQCgXv3kwiBGuJ0JWk9xFE3BxaDEdLe3t1gTRFiJBpOvmsoKT/9DZfCByWT
2xt5A9uCtSVUbTe0upksxDg02LvEso9vFqrUOeywIPWTAM0C0qIz6XjCMBNAM45A
9BsXKir0wxeOONYx9YKgzasrgu6mCr6UJVWXBuFhp5c8gpR33S9qtTK3P/vlTlGx
Sm+XklM5IBAiKrgBS5BNqcIh5lH9YjsODyhExp7+nEykL96VuqdwqWzIvmAnenn+
6MPoca7DNY3JpTNp8Jz0nR8gJBIOOrpbnLACKjE8YafRzos8zZDjGMyYLOCUBnA9
9Il4bxhNx1s9
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:54 2026 by rpki-client