Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32302d3230203d3e203533303437.roa (raw, json)
Hash identifier:          AR25MYFcAStigdD/HOkR+WN90F0vnaP0RqEvzAra/SE=
Subject key identifier:   C9:E6:9B:BE:39:9B:FF:ED:75:96:14:4C:BB:B2:8F:9B:69:90:84:EB
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       616DD77DEA811CEE547CBE93723C0B9F0C252945
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:44 +0000
ROA not before:           Thu 08 Oct 2026 13:34:44 +0000
ROA not after:            Thu 07 Oct 2027 13:39:44 +0000
asID:                     53047
IP address blocks:        177.101.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 23:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6d:d7:7d:ea:81:1c:ee:54:7c:be:93:72:3c:0b:9f:0c:25:29:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:44 2026 GMT
            Not After : Oct  7 13:39:44 2027 GMT
        Subject: CN=C9E69BBE399BFFED7596144CBBB28F9B699084EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:cf:da:f4:56:f8:bd:b1:10:03:77:67:ca:
                    08:62:48:b0:1c:f3:50:bb:55:dc:ad:af:bf:9d:31:
                    2c:d1:06:f3:51:2b:b0:00:10:f5:21:00:4b:48:47:
                    85:83:65:eb:1e:18:c9:3f:4f:4b:45:c6:96:f8:77:
                    7e:15:c4:9f:92:cb:80:a9:d5:eb:bf:5c:00:26:a1:
                    0b:d8:65:9f:e3:be:8e:d2:03:80:af:35:88:98:d3:
                    b2:f3:35:2c:5e:86:8e:84:fe:58:92:aa:39:bd:c2:
                    58:8a:25:ab:41:21:13:14:f0:1c:62:92:88:a3:17:
                    fa:6e:35:63:04:25:23:72:89:ec:5b:39:14:25:e6:
                    11:7a:68:e8:69:76:67:0d:c8:97:df:31:8b:27:86:
                    58:c6:15:72:ad:da:8a:c8:14:0a:f4:d6:a1:ed:08:
                    70:91:33:1f:85:ec:39:f6:55:47:45:02:8d:ec:0b:
                    39:b5:7a:4e:62:46:78:36:bb:b4:0d:b3:c8:0f:a2:
                    08:8d:dc:ed:5c:d8:12:1c:1d:16:8d:ca:92:35:42:
                    c0:1c:f8:eb:b6:0c:5e:f0:1c:5b:47:9d:a3:6c:f8:
                    76:13:a5:a4:60:49:86:42:0c:38:4f:b4:b8:9d:93:
                    47:3e:ab:56:da:2f:89:8c:14:fc:b1:7a:84:96:ef:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:9B:BE:39:9B:FF:ED:75:96:14:4C:BB:B2:8F:9B:69:90:84:EB
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32302d3230203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:20:da:51:5b:df:8f:46:72:1b:52:1f:fa:8b:20:0a:db:82:
         76:03:f4:38:3c:ef:82:35:73:bc:a7:26:f4:29:ee:bb:c4:c2:
         e8:6a:42:3e:ae:79:9c:af:dd:12:be:b0:48:54:36:46:36:98:
         c1:98:38:a1:70:90:b3:5e:64:46:d5:e8:eb:fc:7b:c8:8e:06:
         60:ef:a0:d7:7e:cc:85:7c:44:93:c0:fa:ca:f5:94:0b:ab:03:
         aa:08:81:9c:8c:a4:b8:b6:ff:e3:ff:b6:45:c7:db:e1:d4:c2:
         e8:e6:4d:c6:9c:f8:3d:d3:d9:46:39:ac:b8:3f:da:5e:79:38:
         c8:ee:51:8b:c1:cd:e7:36:e4:86:ab:53:d3:0b:ae:7a:56:cf:
         77:b1:23:40:f0:26:16:42:ac:2f:23:78:ce:fa:36:d2:e1:90:
         c3:e8:04:c6:77:ac:13:98:c6:8a:bc:6f:04:f4:1b:ec:02:6e:
         28:a6:b3:ea:30:bb:06:71:68:6d:fc:f2:1f:3a:ec:ea:7e:37:
         47:8c:1f:e9:cb:49:a4:ff:b2:b0:20:33:1f:10:f0:bc:67:9b:
         08:1e:1f:d1:61:23:3b:98:f0:ac:47:4e:ce:c9:a8:85:ea:2a:
         c5:4f:ca:06:31:99:16:70:da:80:fe:70:8c:4c:e5:6a:c1:6e:
         d6:7f:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:23:15 2026 by rpki-client