Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e34362e302f32342d3234203d3e20323730363331.roa
File:                     3137372e3133362e34362e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          c6urFmVI+1334/eXN37yjv0sid82m/0xffYnwDi3i24=
Subject key identifier:   51:E7:B4:F3:E1:17:A0:9F:9C:F4:C8:A2:89:23:E5:73:3B:19:56:FD
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       49636937BCE454D6D768ACADC6221BCAC101B426
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e34362e302f32342d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:41 +0000
ROA not before:           Thu 27 Aug 2026 02:16:41 +0000
ROA not after:            Thu 26 Aug 2027 02:21:41 +0000
asID:                     270631
IP address blocks:        177.136.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:69:37:bc:e4:54:d6:d7:68:ac:ad:c6:22:1b:ca:c1:01:b4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:41 2026 GMT
            Not After : Aug 26 02:21:41 2027 GMT
        Subject: CN=51E7B4F3E117A09F9CF4C8A28923E5733B1956FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:77:00:47:a5:9c:b9:e5:00:c0:03:7e:81:
                    c3:48:9e:b7:05:de:75:e3:cc:a1:3d:4a:e2:28:53:
                    2f:7d:11:df:c6:cb:f2:fa:de:2d:7d:0c:9b:7f:13:
                    51:15:b2:d9:6d:ce:e4:ea:29:96:08:d0:23:f4:65:
                    51:c9:30:7f:93:e3:6f:79:c5:6d:e7:a9:ef:a5:2d:
                    30:70:2b:dd:29:ce:b4:a5:ce:5c:bd:c0:14:b6:72:
                    a9:e2:1f:b6:61:cd:be:1a:cc:61:a6:b7:c3:9a:ee:
                    ca:8e:97:21:10:49:36:b0:92:ad:ef:20:69:04:56:
                    01:0c:e0:85:95:5f:54:95:b3:a2:83:0e:b6:b5:b6:
                    8b:56:f5:1a:37:db:6a:1a:2d:a9:09:d8:48:b2:7a:
                    06:db:63:7d:47:bc:15:86:32:3e:49:6e:ac:fb:d6:
                    23:65:37:53:fb:15:d6:18:98:83:96:e5:53:d3:db:
                    c8:cf:d2:54:4a:4b:12:8a:8b:13:24:42:9b:72:d3:
                    ec:8c:b6:14:b3:4b:ae:5d:c3:ee:ef:0e:57:66:a2:
                    38:48:0a:bd:c9:53:98:57:39:fa:5b:69:40:2d:cc:
                    2f:46:4a:2f:ba:7d:90:fe:c7:fa:8c:1d:a0:c8:32:
                    ab:a9:e1:59:b8:9c:64:c6:a5:9d:64:e8:f0:c2:9e:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:B4:F3:E1:17:A0:9F:9C:F4:C8:A2:89:23:E5:73:3B:19:56:FD
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e34362e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:0d:09:92:d0:26:c3:ff:d7:f4:1d:50:b2:5a:f6:2c:71:
         98:eb:5f:24:98:2c:e0:08:9a:d8:51:06:bf:2a:d1:4d:10:24:
         ba:73:26:20:ef:03:1a:fb:75:be:4d:04:31:9d:10:47:2b:57:
         52:ca:93:f5:de:20:5b:39:ab:65:29:79:d4:aa:bf:5e:c4:6f:
         8f:ba:08:c1:77:14:dd:30:8f:59:26:fb:8d:56:1d:b8:ad:9b:
         b1:a1:bf:e7:26:0f:be:6f:7f:35:95:8a:f6:90:a4:b6:bb:39:
         9e:cc:99:12:ac:33:0f:3a:3d:ff:6f:fa:86:62:4b:76:66:b5:
         cf:68:21:d8:85:8a:09:d7:a7:9c:f3:e8:ed:dd:c4:ce:19:f4:
         c8:6f:90:6a:7f:cf:84:b5:60:93:ed:77:7e:9f:9d:7c:65:f4:
         5c:3e:52:58:8c:32:28:2e:39:1b:73:0a:4f:03:72:e6:6c:57:
         e1:f6:53:a5:ff:c0:de:40:16:bb:2c:34:26:24:f6:75:72:b5:
         8e:51:73:78:3d:9a:43:c5:95:c1:ea:20:06:8e:21:8e:6c:b7:
         06:07:6b:2f:56:d3:48:7d:db:90:84:3d:ba:90:87:12:f5:71:
         d5:9c:58:b9:59:af:4f:c3:f6:ee:a4:ec:a5:78:5c:2a:9e:d7:
         d3:57:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:17:01 2026 by rpki-client