Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38322e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          bdbOWZLtmDup6qnX6uS0nALEFTLsnZlV8IyjnFQ0gdw=
Subject key identifier:   C3:E5:85:4E:E5:C2:AA:CD:1B:CE:9C:71:FC:EA:ED:52:FA:D3:76:F8
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       10CCEDD03E9E108FA388B7FF7252DA303253967F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:45 +0000
ROA not before:           Thu 08 Oct 2026 13:34:45 +0000
ROA not after:            Thu 07 Oct 2027 13:39:45 +0000
asID:                     53047
IP address blocks:        177.101.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 10:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cc:ed:d0:3e:9e:10:8f:a3:88:b7:ff:72:52:da:30:32:53:96:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:45 2026 GMT
            Not After : Oct  7 13:39:45 2027 GMT
        Subject: CN=C3E5854EE5C2AACD1BCE9C71FCEAED52FAD376F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:99:0c:f1:54:97:a4:6d:74:fa:03:72:a2:
                    b7:cd:bc:1e:d7:3a:a4:2b:6d:38:5b:91:51:ca:89:
                    1e:e1:1a:6d:2f:d2:dc:a8:b3:cb:15:ff:1b:1d:76:
                    0e:18:b7:3f:94:3e:43:66:cd:9a:cd:1f:10:cd:b8:
                    c8:08:df:9a:86:70:66:70:80:a4:19:9a:fc:e9:79:
                    c1:28:1f:d8:72:6d:d2:ef:38:d9:b2:e6:77:6f:51:
                    8d:3a:c6:3c:6e:a3:08:6b:57:ce:a5:c1:a2:e3:db:
                    de:22:82:17:e0:00:b8:c0:b4:e1:9f:20:a0:25:28:
                    17:3c:55:6c:15:f5:40:7f:62:d0:90:b8:02:17:21:
                    73:cc:07:45:05:89:9c:d9:e9:65:db:58:cf:9a:b7:
                    20:53:f5:a0:05:b8:76:a1:31:ac:b5:44:8a:9e:1b:
                    71:ac:82:fb:bd:3e:08:e2:85:32:9f:b6:34:4a:41:
                    17:ed:e9:ff:70:0e:90:e2:c2:f4:c9:2b:ba:4f:92:
                    c6:87:83:60:dd:b0:38:30:e7:51:20:82:c6:ca:16:
                    97:5e:21:e9:4d:7d:44:a8:57:4f:69:d1:88:92:b3:
                    5e:71:48:2f:cf:99:b8:2a:04:18:50:ed:b1:19:97:
                    91:64:54:40:8b:18:e4:61:ce:d2:a8:28:10:30:f4:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E5:85:4E:E5:C2:AA:CD:1B:CE:9C:71:FC:EA:ED:52:FA:D3:76:F8
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:99:56:43:a6:09:14:42:a3:8e:c2:d1:b4:c3:dc:74:c4:6c:
         b2:64:fe:75:ba:25:90:a3:1d:f8:72:9a:1d:47:a6:c1:e7:8f:
         79:ea:3e:83:cf:fc:1f:9b:35:1b:d7:61:47:95:2f:a9:a2:47:
         ad:7d:5b:4a:3d:e6:c4:2f:95:6c:10:6c:80:26:38:6f:da:35:
         ea:45:a5:8b:01:82:f7:aa:be:4a:31:91:21:39:b8:c6:54:95:
         6a:f2:87:be:cf:51:45:3d:14:63:8c:0d:2f:a6:7f:1f:a1:14:
         b3:eb:18:2c:4a:d0:a1:ec:a8:57:a6:65:f4:a1:7b:ca:df:40:
         34:1d:e3:44:68:e2:bc:1e:24:86:4d:66:f9:fc:2c:9b:cb:fc:
         14:8b:57:0f:b1:04:99:4f:d3:01:c2:80:79:90:0d:ec:24:f7:
         ba:05:00:34:62:12:73:dc:7f:df:12:b7:a9:1c:b9:36:f2:9a:
         17:69:a8:83:4d:89:52:c0:0d:93:80:a8:8e:17:62:a7:fe:79:
         59:1c:d5:bb:6d:f5:6a:c5:dd:c3:1c:f2:0c:1d:c7:4a:5e:3e:
         65:e8:11:1d:8e:e0:94:0f:7b:30:fd:93:7f:1b:94:82:f2:85:
         c0:8b:f5:dc:59:45:e6:61:59:92:50:eb:92:f9:d4:db:47:1a:
         e8:fd:8a:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEMzt0D6eEI+jiLf/clLaMDJTln8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNjEwMDgxMzM0NDVaFw0yNzEwMDcxMzM5NDVaMDMxMTAvBgNV
BAMTKEMzRTU4NTRFRTVDMkFBQ0QxQkNFOUM3MUZDRUFFRDUyRkFEMzc2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2JkM8VSXpG10+gNyorfNvB7X
OqQrbThbkVHKiR7hGm0v0tyos8sV/xsddg4Ytz+UPkNmzZrNHxDNuMgI35qGcGZw
gKQZmvzpecEoH9hybdLvONmy5ndvUY06xjxuowhrV86lwaLj294ighfgALjAtOGf
IKAlKBc8VWwV9UB/YtCQuAIXIXPMB0UFiZzZ6WXbWM+atyBT9aAFuHahMay1RIqe
G3Gsgvu9PgjihTKftjRKQRft6f9wDpDiwvTJK7pPksaHg2DdsDgw51EggsbKFpde
IelNfUSoV09p0YiSs15xSC/PmbgqBBhQ7bEZl5FkVECLGORhztKoKBAw9FmxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw+WFTuXCqs0bzpxx/OrtUvrTdvgwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVSMA0GCSqGSIb3DQEBCwUAA4IBAQAQmVZDpgkU
QqOOwtG0w9x0xGyyZP51uiWQox34cpodR6bB54956j6Dz/wfmzUb12FHlS+poket
fVtKPebEL5VsEGyAJjhv2jXqRaWLAYL3qr5KMZEhObjGVJVq8oe+z1FFPRRjjA0v
pn8foRSz6xgsStCh7KhXpmX0oXvK30A0HeNEaOK8HiSGTWb5/Cyby/wUi1cPsQSZ
T9MBwoB5kA3sJPe6BQA0YhJz3H/fErepHLk28poXaaiDTYlSwA2TgKiOF2Kn/nlZ
HNW7bfVqxd3DHPIMHcdKXj5l6BEdjuCUD3sw/ZN/G5SC8oXAi/XcWUXmYVmSUOuS
+dTbRxro/Yri
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:01:59 2026 by rpki-client