Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e302e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          zIIVrS36pI5cWIHlWXOlM/dk4f3BQlWE0UbHFz6F9XQ=
Subject key identifier:   90:81:E2:54:EE:2A:05:17:58:9D:14:C3:C2:DE:4A:1C:5C:54:1B:AB
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       20D26D24F0F3E2F625E32B1B90C3FC17854AE428
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:01 +0000
ROA not before:           Fri 28 Aug 2026 17:01:01 +0000
ROA not after:            Fri 27 Aug 2027 17:06:01 +0000
asID:                     262642
IP address blocks:        177.87.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:6d:24:f0:f3:e2:f6:25:e3:2b:1b:90:c3:fc:17:85:4a:e4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:01 2026 GMT
            Not After : Aug 27 17:06:01 2027 GMT
        Subject: CN=9081E254EE2A0517589D14C3C2DE4A1C5C541BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:8d:de:01:16:97:1d:4a:b5:df:ea:34:45:
                    03:72:0e:5b:2a:e3:0c:2f:f9:38:e8:80:00:2a:7e:
                    e4:2a:a0:09:fc:c9:b1:84:39:49:e8:b1:4f:7a:93:
                    7a:67:25:03:0d:54:08:7f:12:8a:83:6f:86:73:9a:
                    f1:36:94:89:dc:8e:8f:cd:87:bc:5d:01:b5:62:4a:
                    b0:98:18:c1:72:ef:d0:a1:06:e2:41:c1:d0:8b:98:
                    a2:ab:bd:b9:40:86:26:c0:39:5f:72:de:9d:cf:58:
                    29:76:e1:df:ae:55:03:22:a5:34:4f:90:fa:58:6e:
                    3a:c9:c1:62:71:43:35:ca:dd:52:50:e5:75:53:65:
                    bb:b7:a4:d8:dd:65:01:c5:51:ad:29:99:88:ca:8e:
                    db:95:c7:8b:4e:3c:8b:13:56:2b:a6:68:4c:d3:4d:
                    0f:ac:d2:45:a5:b3:02:59:17:91:88:0d:bd:10:2e:
                    6c:fd:b7:ab:e9:4b:70:40:b7:7b:5e:a9:ce:d9:ad:
                    96:56:95:89:50:0f:6c:e2:79:da:65:7d:13:92:82:
                    b2:7d:8b:c1:40:8e:dc:12:71:4f:06:29:7a:1e:ca:
                    05:47:da:26:69:06:d0:7e:4a:67:93:ad:88:78:ea:
                    37:43:3e:3a:cb:31:78:7f:57:92:78:24:32:1d:ee:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:81:E2:54:EE:2A:05:17:58:9D:14:C3:C2:DE:4A:1C:5C:54:1B:AB
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:95:07:43:d7:6f:e9:56:ce:40:09:5f:b1:c5:05:1f:9a:99:
         ab:99:c1:8b:6e:61:cc:61:d7:d6:e2:33:a4:17:65:e2:84:3e:
         1c:7d:ba:f3:ce:a4:16:66:88:c6:80:73:d1:a3:51:d7:60:2d:
         00:56:62:43:ef:88:3e:bb:45:00:b7:ef:d6:91:a9:f7:27:62:
         29:2b:6c:9c:12:ca:37:42:77:47:a4:51:ee:d2:c3:74:b9:d2:
         36:04:aa:7c:ec:2f:ad:5f:ba:b9:02:94:df:06:3c:e8:21:23:
         0f:08:59:db:62:b0:c3:04:e3:74:e7:d9:85:7f:49:bc:b9:20:
         61:da:af:a6:a1:82:46:d4:06:60:c3:4a:5d:29:23:19:4a:41:
         91:cd:8c:f8:42:58:ef:6e:92:1b:f4:59:8e:1e:71:13:aa:22:
         72:c0:5d:63:8e:22:32:ed:f3:65:ba:30:cc:72:76:9d:3c:44:
         28:00:f1:49:11:2d:85:d7:98:1d:85:32:60:8f:66:01:00:c1:
         a1:99:3c:2f:bb:7e:70:a8:fc:af:6a:a7:52:cf:d4:48:61:63:
         3e:0d:a9:c6:f0:33:5c:41:ae:32:c3:53:f9:f7:1b:e3:d0:ae:
         c7:10:45:4a:71:98:f9:ff:e6:fa:12:85:66:e5:53:78:9e:52:
         59:e3:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:05:50 2026 by rpki-client