Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa
File:                     3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa (raw, json)
Hash identifier:          el9GeBSQglo9oDc0Jg97tVelA5EhEEWCh4TNGYR8oGI=
Subject key identifier:   8C:4C:3C:0C:89:5F:13:5F:33:C8:32:AD:7C:EB:36:C9:75:A0:4D:62
Certificate issuer:       /CN=07053F341797B440E2F5E390A793D5B0CBAD5D7E
Certificate serial:       4BA8198E73762B39A1603BCDD81B611D0E1DB8EB
Authority key identifier: 07:05:3F:34:17:97:B4:40:E2:F5:E3:90:A7:93:D5:B0:CB:AD:5D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa
Signing time:             Tue 17 Mar 2026 17:27:09 +0000
ROA not before:           Tue 17 Mar 2026 17:22:09 +0000
ROA not after:            Tue 16 Mar 2027 17:27:09 +0000
asID:                     262594
IP address blocks:        177.84.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.crl
                          rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a8:19:8e:73:76:2b:39:a1:60:3b:cd:d8:1b:61:1d:0e:1d:b8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07053F341797B440E2F5E390A793D5B0CBAD5D7E
        Validity
            Not Before: Mar 17 17:22:09 2026 GMT
            Not After : Mar 16 17:27:09 2027 GMT
        Subject: CN=8C4C3C0C895F135F33C832AD7CEB36C975A04D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:ad:91:c4:3d:f3:9d:b1:fd:12:f3:b7:e0:
                    2d:bd:ee:1e:5b:50:2c:33:f9:56:37:99:88:e7:21:
                    c7:b2:39:47:30:93:a0:af:25:3a:92:1c:f1:6c:19:
                    be:6e:d9:f0:e1:ef:11:e8:ac:56:76:92:72:e1:83:
                    73:56:0b:dc:05:b5:59:82:6d:b4:e5:72:ae:e2:4d:
                    b7:1f:c7:b3:71:33:a7:d9:8a:02:44:0e:b7:05:c3:
                    00:a9:6a:e8:09:7b:e3:99:6e:9f:4b:91:5a:30:b4:
                    10:45:6b:91:c5:b6:35:ac:b0:c6:be:89:c5:47:cf:
                    fd:e4:82:29:3b:fc:de:98:5b:a0:19:76:73:8d:14:
                    3d:be:45:65:b2:38:8f:db:f0:c8:5a:bd:f0:74:88:
                    f0:5b:ea:c1:a6:09:1e:3a:2c:1b:2d:40:19:50:b3:
                    8d:ec:19:c2:6a:52:9c:25:93:70:01:02:c9:cf:74:
                    f5:8f:ca:2f:fb:1d:c3:b0:77:32:a9:09:48:dc:e8:
                    7c:86:d3:d2:87:5f:41:64:b0:7f:a8:85:3f:9a:4d:
                    17:c9:27:7e:9e:0f:6e:cd:57:82:71:56:f4:a4:76:
                    d7:84:b2:76:78:08:2a:be:83:bb:8a:2e:5d:9b:e1:
                    ee:c9:b1:2b:96:dd:27:b6:da:4d:d5:52:9d:68:6a:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:3C:0C:89:5F:13:5F:33:C8:32:AD:7C:EB:36:C9:75:A0:4D:62
            X509v3 Authority Key Identifier:
                keyid:07:05:3F:34:17:97:B4:40:E2:F5:E3:90:A7:93:D5:B0:CB:AD:5D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:06:dc:b3:33:c9:e7:2a:b0:13:f3:e0:30:e0:de:9a:6c:
         96:b0:1b:2a:b1:b6:06:1a:b3:00:5f:4a:83:fd:80:49:82:ac:
         55:31:bc:7a:56:6c:22:8c:29:b6:10:61:f3:79:b8:00:d3:6c:
         a9:36:35:ad:9a:2f:c4:c5:f7:4a:f5:52:da:ad:e6:cd:10:a1:
         5c:db:da:55:ec:59:23:81:4c:65:9a:5a:fe:8f:63:b1:63:9f:
         27:9f:74:1f:34:80:d6:d5:b4:c2:21:6c:f9:38:d0:95:c0:c1:
         5f:cb:50:f1:64:8d:94:8a:2e:12:fa:cb:f0:c3:ca:b7:a6:96:
         50:16:5f:6b:4a:56:6f:bd:30:c8:17:dd:e7:d2:1a:9e:02:c8:
         7c:92:12:24:d5:e2:ff:b0:e4:cb:e7:56:d4:32:32:8d:29:9b:
         d5:0c:d7:7f:55:77:49:fe:db:76:88:d2:d2:61:73:56:9d:96:
         b1:87:b9:a1:f0:7d:b0:94:ca:cd:04:5f:bb:96:fe:56:10:14:
         8b:de:88:c6:2e:93:40:e9:03:f0:89:ad:ad:c2:a5:c4:26:d2:
         0b:b8:2d:5c:c2:4b:1d:02:4c:95:ad:cd:ed:a6:fc:ae:3b:48:
         19:3e:b3:4e:48:8b:cf:8a:1c:8d:75:70:f0:53:0c:af:b4:7e:
         1b:c0:d8:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS6gZjnN2KzmhYDvN2BthHQ4duOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcwNTNGMzQxNzk3QjQ0MEUyRjVFMzkwQTc5M0Q1QjBD
QkFENUQ3RTAeFw0yNjAzMTcxNzIyMDlaFw0yNzAzMTYxNzI3MDlaMDMxMTAvBgNV
BAMTKDhDNEMzQzBDODk1RjEzNUYzM0M4MzJBRDdDRUIzNkM5NzVBMDRENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkla2RxD3znbH9EvO34C297h5b
UCwz+VY3mYjnIceyOUcwk6CvJTqSHPFsGb5u2fDh7xHorFZ2knLhg3NWC9wFtVmC
bbTlcq7iTbcfx7NxM6fZigJEDrcFwwCpaugJe+OZbp9LkVowtBBFa5HFtjWssMa+
icVHz/3kgik7/N6YW6AZdnONFD2+RWWyOI/b8MhavfB0iPBb6sGmCR46LBstQBlQ
s43sGcJqUpwlk3ABAsnPdPWPyi/7HcOwdzKpCUjc6HyG09KHX0FksH+ohT+aTRfJ
J36eD27NV4JxVvSkdteEsnZ4CCq+g7uKLl2b4e7JsSuW3Se22k3VUp1oajsvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjEw8DIlfE18zyDKtfOs2yXWgTWIwHwYDVR0j
BBgwFoAUBwU/NBeXtEDi9eOQp5PVsMutXX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZGaHhCSjU1SnI3eEpTa3JhM3NUdGp6RkJzcFdrcXhHNkxBdFB5eUs0
Z28vMC8wNzA1M0YzNDE3OTdCNDQwRTJGNUUzOTBBNzkzRDVCMENCQUQ1RDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3MDUzRjM0MTc5N0I0NDBF
MkY1RTM5MEE3OTNENUIwQ0JBRDVEN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGRmh4Qko1NUpyN3hKU2tyYTNzVHRqekZCc3BXa3F4RzZMQXRQeXlLNGdvLzAv
MzEzNzM3MmUzODM0MmUzMjM0MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVPAwDQYJKoZIhvcNAQELBQADggEBABwtBtyz
M8nnKrAT8+Aw4N6abJawGyqxtgYaswBfSoP9gEmCrFUxvHpWbCKMKbYQYfN5uADT
bKk2Na2aL8TF90r1Utqt5s0QoVzb2lXsWSOBTGWaWv6PY7FjnyefdB80gNbVtMIh
bPk40JXAwV/LUPFkjZSKLhL6y/DDyremllAWX2tKVm+9MMgX3efSGp4CyHySEiTV
4v+w5MvnVtQyMo0pm9UM139Vd0n+23aI0tJhc1adlrGHuaHwfbCUys0EX7uW/lYQ
FIveiMYuk0DpA/CJra3CpcQm0gu4LVzCSx0CTJWtze2m/K47SBk+s05Ii8+KHI11
cPBTDK+0fhvA2FM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:55:59 2026 by rpki-client