Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38392e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          6YmG2h+dgZe+IS9sdCNbfFo5A4EAosn2co4XPywVis0=
Subject key identifier:   45:E9:C0:D9:8F:E6:94:11:E6:D6:27:60:F0:A3:B3:74:B1:1E:62:E2
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       538D72962931605CD8C3DBC7D0A662A55C77FBA5
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:43 +0000
ROA not before:           Thu 08 Oct 2026 13:34:43 +0000
ROA not after:            Thu 07 Oct 2027 13:39:43 +0000
asID:                     53047
IP address blocks:        177.101.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8d:72:96:29:31:60:5c:d8:c3:db:c7:d0:a6:62:a5:5c:77:fb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:43 2026 GMT
            Not After : Oct  7 13:39:43 2027 GMT
        Subject: CN=45E9C0D98FE69411E6D62760F0A3B374B11E62E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:2f:ff:e5:1f:06:a6:ea:42:a0:b9:50:7f:
                    5a:b9:d8:42:57:a0:f7:55:8d:a8:1a:77:10:3b:01:
                    23:df:8d:fc:60:49:76:c9:b9:70:d0:9f:95:fc:cf:
                    06:5a:d4:3a:b9:0e:08:e4:42:40:2f:04:ef:2b:b1:
                    19:47:65:f3:3c:c5:2d:eb:5e:81:c2:8c:e8:ca:64:
                    32:87:f8:b4:12:88:f0:a8:6e:31:da:c3:26:02:37:
                    f3:2b:9a:1d:5c:a3:cc:1c:81:bd:66:a5:32:ca:23:
                    c5:51:e7:6f:4e:49:8d:76:d2:5a:69:1b:98:18:6d:
                    6c:8c:6d:09:1b:a2:7d:89:01:f1:d2:cb:1b:3b:c5:
                    03:d6:9b:b6:97:e8:ba:30:66:8a:18:f0:2c:f2:8d:
                    ae:ed:ab:d7:dc:1a:e1:6a:5b:f2:28:bb:8d:5d:64:
                    57:dc:8c:5b:11:4c:9e:fa:2f:90:1a:51:bf:1b:11:
                    20:b3:e7:7d:b5:f8:7e:d9:77:bf:7b:70:9d:9b:ca:
                    30:86:0d:74:97:44:37:6c:1d:b9:64:99:f5:ac:86:
                    7c:91:f5:ed:1b:b6:5f:eb:5c:e1:af:75:da:af:ab:
                    f0:48:c7:ad:45:ba:3e:ef:0f:cd:a1:bb:59:b0:e9:
                    de:60:85:2b:9e:73:b8:6e:3d:92:36:91:17:86:cc:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E9:C0:D9:8F:E6:94:11:E6:D6:27:60:F0:A3:B3:74:B1:1E:62:E2
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:fa:26:db:b3:de:29:79:40:55:7e:a3:f5:c1:25:27:a2:
         96:ed:44:d0:74:cd:f7:5c:1b:af:bc:36:78:11:04:fc:4d:89:
         4d:2f:27:bb:87:d4:ea:17:59:dd:d9:a7:f0:04:b9:c6:dc:07:
         b3:a2:43:9b:7f:c3:a3:f1:07:54:3b:b3:09:11:66:0f:a6:0c:
         f6:00:1e:61:4d:39:04:51:56:2b:f9:06:a3:4a:04:23:ab:47:
         c9:58:e4:39:d5:93:2f:0b:54:31:80:e5:ca:07:48:ec:6c:e8:
         34:aa:80:7e:94:90:62:dc:af:b5:23:1d:0c:67:8a:fa:fe:1d:
         26:59:32:fe:c6:f7:16:b2:02:fb:5b:53:34:a6:0d:8b:a7:2c:
         0d:97:f5:d2:23:12:b8:3a:13:8c:9d:a8:e1:d6:82:ff:fe:2e:
         3d:ac:4f:b0:cc:c4:dc:49:0a:e1:58:ad:1f:41:84:77:ce:b7:
         0b:f3:db:45:22:e9:af:41:3e:1f:45:0d:91:5f:c3:7c:c4:bc:
         bf:5a:9d:c9:89:ee:10:f7:96:af:22:85:41:d5:ae:55:cc:bb:
         57:a5:a9:bd:60:db:9a:71:4d:cf:7b:da:73:17:db:05:ca:cb:
         43:ad:e5:fe:b5:bb:35:15:76:c6:13:aa:7f:82:bf:ad:5f:37:
         f5:8b:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:58:10 2026 by rpki-client