Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa
File:                     3137372e38352e392e302f32342d3234203d3e20323731323633.roa (raw, json)
Hash identifier:          jzPgHnllTxbaoKCqPyeM7XIACrqnXo8YeKLfJMac4K4=
Subject key identifier:   24:CE:AE:4F:FF:90:9E:0C:03:A6:BE:C6:CF:D1:72:65:B6:75:40:F1
Certificate issuer:       /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial:       7FEAD0CA5E86A55E4F33DD047CD2247824CE7EB3
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa
Signing time:             Thu 15 Oct 2026 19:00:40 +0000
ROA not before:           Thu 15 Oct 2026 18:55:40 +0000
ROA not after:            Thu 14 Oct 2027 19:00:40 +0000
asID:                     271263
IP address blocks:        177.85.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:d0:ca:5e:86:a5:5e:4f:33:dd:04:7c:d2:24:78:24:ce:7e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Validity
            Not Before: Oct 15 18:55:40 2026 GMT
            Not After : Oct 14 19:00:40 2027 GMT
        Subject: CN=24CEAE4FFF909E0C03A6BEC6CFD17265B67540F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:fc:9e:3b:6a:64:6f:c4:cc:74:3f:37:c8:
                    70:78:c5:3c:a2:c4:c8:66:55:98:2a:c1:b0:25:a6:
                    db:fd:0b:e0:e0:91:7e:1d:25:1e:76:2d:61:40:a9:
                    32:38:f4:55:0a:12:6e:fd:9b:aa:39:b2:86:00:ae:
                    ed:2e:f8:35:bf:dc:69:7c:d3:ca:76:87:f0:29:a2:
                    2d:a5:ad:4c:9a:4e:e1:6c:89:65:b2:42:a0:39:4c:
                    cf:7f:8c:2d:c0:16:ec:93:e6:81:6b:ba:2e:93:ff:
                    d4:5d:62:83:f2:09:bc:43:1d:07:cd:65:89:ad:7a:
                    e9:b9:3f:29:bd:49:33:02:04:68:cf:96:2f:b8:f3:
                    19:43:bb:03:80:af:c3:ec:06:46:3c:0e:54:5f:2e:
                    d2:c9:74:ec:46:42:3d:f9:95:26:7b:bf:28:5e:b8:
                    19:36:b7:df:a6:b6:2b:14:42:b3:6f:96:2a:a0:c5:
                    12:48:83:50:2c:fb:54:a1:19:22:bd:94:20:ab:32:
                    3e:a7:50:39:16:e7:51:f8:94:c7:74:c4:75:c7:f2:
                    06:5c:bf:bb:f0:98:d5:81:59:b4:d4:81:ab:61:3c:
                    1b:96:8c:6d:6c:f4:95:c5:84:06:9d:f1:73:e5:01:
                    59:16:62:85:80:ed:33:54:7e:f9:c3:13:16:f5:06:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:AE:4F:FF:90:9E:0C:03:A6:BE:C6:CF:D1:72:65:B6:75:40:F1
            X509v3 Authority Key Identifier:
                keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e392e302f32342d3234203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:de:cf:b2:dc:62:b4:07:36:25:f8:ed:34:92:b0:aa:f1:4c:
         86:00:56:1f:25:0f:6d:ef:be:c6:ef:2c:25:2c:4e:10:53:99:
         87:00:3e:16:3a:de:0e:63:86:45:1b:0e:6a:15:ca:51:3e:9f:
         93:e0:5a:37:a8:0d:d4:b9:fa:45:21:71:82:8c:79:e8:ea:13:
         9a:66:15:96:53:c6:6b:8e:fb:13:d8:0b:26:8a:3c:a6:e4:d5:
         15:7d:d6:49:2c:d6:38:94:cc:ae:2b:5d:fe:42:0a:36:a1:7a:
         6f:1d:c9:8d:9d:e6:60:86:9c:53:f2:a8:0d:86:b1:eb:7e:10:
         75:36:44:04:1c:53:50:95:d2:c1:12:7e:11:c3:eb:0d:86:94:
         a0:6c:67:b8:3e:06:d7:79:21:a0:3c:3f:fd:ca:a1:41:1e:5d:
         ca:6c:ea:a0:01:db:dd:82:4c:84:84:f6:9b:65:e8:80:5a:e7:
         92:0b:bc:7e:f6:1e:75:34:4a:2b:53:47:d8:9c:f1:35:37:48:
         f3:f3:5e:83:12:2a:c5:63:3c:92:d1:e4:b4:99:0f:e3:56:ad:
         20:23:99:db:2d:8d:8c:32:b5:84:3e:bc:13:c8:ea:4e:af:2e:
         a8:63:bb:bc:38:00:ea:35:a5:a8:07:15:57:66:69:f2:c3:be:
         9d:f2:6b:f0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUf+rQyl6GpV5PM90EfNIkeCTOfrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0QzhDQTNGREE4QkYzMDY5NDlGODk3OEY2OTA0MUZF
NTVCQTk5NDAeFw0yNjEwMTUxODU1NDBaFw0yNzEwMTQxOTAwNDBaMDMxMTAvBgNV
BAMTKDI0Q0VBRTRGRkY5MDlFMEMwM0E2QkVDNkNGRDE3MjY1QjY3NTQwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94/yeO2pkb8TMdD83yHB4xTyi
xMhmVZgqwbAlptv9C+DgkX4dJR52LWFAqTI49FUKEm79m6o5soYAru0u+DW/3Gl8
08p2h/Apoi2lrUyaTuFsiWWyQqA5TM9/jC3AFuyT5oFrui6T/9RdYoPyCbxDHQfN
ZYmteum5Pym9STMCBGjPli+48xlDuwOAr8PsBkY8DlRfLtLJdOxGQj35lSZ7vyhe
uBk2t9+mtisUQrNvliqgxRJIg1As+1ShGSK9lCCrMj6nUDkW51H4lMd0xHXH8gZc
v7vwmNWBWbTUgathPBuWjG1s9JXFhAad8XPlAVkWYoWA7TNUfvnDExb1BucbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJM6uT/+QngwDpr7Gz9FyZbZ1QPEwHwYDVR0j
BBgwFoAUj0yMo/2ovzBpSfiXj2kEH+VbqZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4
eksvMC84RjRDOENBM0ZEQThCRjMwNjk0OUY4OTc4RjY5MDQxRkU1NUJBOTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNEM4Q0EzRkRBOEJGMzA2
OTQ5Rjg5NzhGNjkwNDFGRTU1QkE5OTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR0UG5McnREdHFBaUJyQWNucU5Oa294VkoyZ3Y1dmY3RjVzR0Z6WGJzOHpLLzAv
MzEzNzM3MmUzODM1MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMy
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFVCTANBgkqhkiG9w0BAQsFAAOCAQEABt7PstxitAc2
JfjtNJKwqvFMhgBWHyUPbe++xu8sJSxOEFOZhwA+FjreDmOGRRsOahXKUT6fk+Ba
N6gN1Ln6RSFxgox56OoTmmYVllPGa477E9gLJoo8puTVFX3WSSzWOJTMritd/kIK
NqF6bx3JjZ3mYIacU/KoDYax634QdTZEBBxTUJXSwRJ+EcPrDYaUoGxnuD4G13kh
oDw//cqhQR5dymzqoAHb3YJMhIT2m2XogFrnkgu8fvYedTRKK1NH2JzxNTdI8/Ne
gxIqxWM8ktHktJkP41atICOZ2y2NjDK1hD68E8jqTq8uqGO7vDgA6jWlqAcVV2Zp
8sO+nfJr8A==
-----END CERTIFICATE-----
Generated at Fri Oct 16 20:11:50 2026 by rpki-client