Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39302e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          T2j3qSGML0wThBk6zA2UUKvAmLyonX6nwkw7uATiJP0=
Subject key identifier:   0C:CC:2F:8E:61:70:A3:44:EF:74:9A:CB:FC:92:95:73:57:BC:90:58
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       750CEBA08E4ADDC52174111472D6DF333CEA8474
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:42 +0000
ROA not before:           Thu 08 Oct 2026 13:34:42 +0000
ROA not after:            Thu 07 Oct 2027 13:39:42 +0000
asID:                     53047
IP address blocks:        177.101.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:eb:a0:8e:4a:dd:c5:21:74:11:14:72:d6:df:33:3c:ea:84:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:42 2026 GMT
            Not After : Oct  7 13:39:42 2027 GMT
        Subject: CN=0CCC2F8E6170A344EF749ACBFC92957357BC9058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:8b:8d:a2:dd:d0:f2:21:99:2d:be:25:2b:
                    c4:18:ea:81:10:89:c1:ba:cb:04:84:7a:2e:7a:90:
                    4a:f8:13:25:5f:2d:41:ff:24:d5:9d:e0:5c:c0:6f:
                    00:f4:73:14:06:92:04:bc:6d:53:d3:33:0a:6f:2a:
                    7c:ac:17:6d:ba:b2:cb:25:b7:cf:61:93:0d:3e:40:
                    5c:00:a1:aa:94:70:50:ab:18:fd:c4:16:b0:18:7e:
                    d9:a6:e8:0e:0e:5e:59:09:24:95:0b:4f:b7:1f:fa:
                    74:6c:68:17:3e:aa:58:33:e3:4f:14:4d:9b:8f:1e:
                    0b:4c:e3:ff:1a:1d:83:5a:df:ef:c3:55:5e:7d:eb:
                    f5:6f:c4:a4:a6:c1:0a:c3:a9:1b:dd:2b:fe:b1:89:
                    82:91:0a:0f:73:37:92:e3:19:55:3b:bd:7f:92:cf:
                    00:55:b3:25:34:9a:3f:ca:0e:99:e7:08:0f:c2:01:
                    9f:42:b7:72:a4:df:ca:6f:c3:fd:66:15:a9:45:ab:
                    08:66:4d:be:df:b4:4c:a6:84:c2:b7:a8:61:20:43:
                    62:d5:cd:68:11:c0:c6:5e:73:b9:70:6d:69:b4:77:
                    2c:99:ab:db:a7:5b:b3:48:ca:6f:1b:af:dd:f3:8e:
                    a7:f2:52:61:2c:ce:fa:a3:0e:3d:09:eb:61:fd:85:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:2F:8E:61:70:A3:44:EF:74:9A:CB:FC:92:95:73:57:BC:90:58
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:8d:48:6a:fb:d6:e5:c8:2a:03:67:17:9f:f0:d7:6b:f7:ca:
         02:f9:7d:f5:8e:f6:90:68:06:ea:a4:35:ea:56:6b:8d:db:bc:
         1e:85:66:c2:26:27:da:18:53:7d:4d:7c:c6:7f:bc:de:43:ad:
         13:c1:b5:f1:9b:60:2f:08:a0:6e:a2:36:a4:28:79:b1:b6:ca:
         8b:e4:52:6c:53:7b:ce:0c:ca:50:70:71:38:98:ad:5e:6b:2d:
         b8:00:51:99:2a:9d:f7:5a:95:8c:a9:5c:7a:07:28:0a:13:a6:
         86:be:bd:b8:f8:bc:fe:e0:e5:51:97:84:ce:f6:38:ee:ea:1f:
         05:5b:f4:2d:04:9e:8c:44:7c:b3:c7:6b:ce:6d:b5:b2:6b:17:
         f4:d7:f6:45:0e:75:d2:0a:6b:14:00:c6:92:40:d1:45:db:3d:
         ca:aa:7a:ba:e4:a7:b2:86:49:49:2e:90:ac:3e:c1:b7:6b:44:
         02:cc:9d:d3:d5:4a:f9:06:5d:d8:e9:d5:44:ac:19:41:c7:f7:
         da:97:e2:63:e3:a8:8f:b8:bb:37:90:05:4c:c8:d9:1a:a3:d6:
         1a:fe:cb:f4:52:49:e9:c2:e4:58:c6:44:66:41:e8:0f:39:1f:
         e1:b1:d5:db:9b:89:54:f8:96:69:61:56:d6:77:f4:bf:01:b3:
         cd:7b:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:17:31 2026 by rpki-client