Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
File:                     3137372e33392e31322e302f32322d3232203d3e203532373930.roa (raw, json)
Hash identifier:          MQChAOm406GZj8fMibYkt2GKUlmAXUx/ETOzAKZwfAg=
Subject key identifier:   86:C8:96:19:8C:FB:5B:9A:50:45:59:70:82:6F:79:32:89:24:E7:D2
Certificate issuer:       /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
Certificate serial:       076B8F2A0F1633911FA81988433F31BE21B835C8
Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
Signing time:             Thu 26 Mar 2026 02:46:54 +0000
ROA not before:           Thu 26 Mar 2026 02:41:54 +0000
ROA not after:            Thu 25 Mar 2027 02:46:54 +0000
asID:                     52790
IP address blocks:        177.39.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl
                          rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6b:8f:2a:0f:16:33:91:1f:a8:19:88:43:3f:31:be:21:b8:35:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
        Validity
            Not Before: Mar 26 02:41:54 2026 GMT
            Not After : Mar 25 02:46:54 2027 GMT
        Subject: CN=86C896198CFB5B9A50455970826F79328924E7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:43:8c:97:b4:0c:08:32:ec:84:5c:c4:36:
                    78:0b:31:04:39:c9:4b:7b:72:07:89:67:30:20:bb:
                    b1:52:28:58:ad:54:07:7b:fd:23:8a:07:7f:49:79:
                    5e:ad:13:32:37:30:04:a2:3f:84:ab:75:13:48:93:
                    ba:64:37:84:08:4b:e5:36:4c:56:83:b8:e2:23:83:
                    a3:fb:45:a5:31:ab:24:a7:fe:e1:67:2b:ef:29:23:
                    e6:bc:10:8e:22:c9:2a:57:09:b9:4a:b4:28:ac:31:
                    70:f2:56:5a:60:ae:23:2d:76:84:67:5d:e1:cf:2c:
                    79:89:70:5a:22:f6:70:a3:9c:f1:21:d8:2c:66:9c:
                    18:dc:68:4f:08:96:b6:41:8d:bd:c2:58:e6:b5:67:
                    85:1d:94:c7:2f:84:34:e0:be:49:13:35:68:fb:e6:
                    57:8c:85:d0:3f:72:eb:ac:8a:13:c4:04:93:ad:a5:
                    14:57:e1:a8:e3:96:ca:fc:ae:0b:7c:3e:7d:83:f2:
                    63:b7:a8:3b:f9:0e:07:2a:9f:e8:15:50:d9:67:40:
                    69:6b:96:77:e4:34:78:7a:67:09:33:7e:9d:98:52:
                    63:2e:87:65:1a:99:e3:0c:2f:04:41:b4:f2:53:09:
                    57:f0:2a:66:d6:95:28:a5:78:d3:59:b6:bd:64:e5:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C8:96:19:8C:FB:5B:9A:50:45:59:70:82:6F:79:32:89:24:E7:D2
            X509v3 Authority Key Identifier:
                keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:a3:9b:1c:26:9f:35:83:ed:3e:a0:c9:f1:31:4c:98:e6:
         18:86:fc:64:62:50:55:07:b5:e0:e5:88:cf:77:71:3d:41:4e:
         55:9c:bc:62:c8:12:c4:dc:79:b9:c1:39:b4:b6:ed:17:55:bb:
         22:5b:ef:44:ea:fb:9d:ba:ea:91:08:ac:99:05:86:e2:02:f9:
         ae:b5:91:a4:7d:f7:cf:97:26:96:32:a7:ac:70:a4:15:6c:1a:
         08:71:af:5c:77:8e:b7:f3:c7:97:45:ce:e5:15:ba:07:71:3a:
         91:74:5b:12:53:54:7b:ff:48:b2:dd:0d:00:00:b5:cb:fb:f4:
         cf:83:40:89:b2:34:a0:3e:1a:01:80:25:97:43:78:a4:b3:6a:
         28:05:6f:6a:29:f5:62:33:a0:17:bd:b8:39:0b:65:75:36:22:
         fc:81:00:25:9f:a9:21:30:23:d2:a5:78:a0:f4:51:dd:71:e4:
         57:71:db:52:b9:df:14:ff:b4:78:9e:b3:fb:ef:a4:07:1b:26:
         4b:68:ec:c8:f9:f9:0c:27:6a:14:42:95:0c:de:e7:ad:72:24:
         c9:09:d8:e0:47:37:46:c7:98:c5:ef:cd:94:96:62:71:94:9e:
         7c:30:03:77:ad:a5:a4:0b:05:8d:1c:b8:50:7e:ea:05:16:9a:
         d8:f2:21:c2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUB2uPKg8WM5EfqBmIQz8xviG4NcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhDNDIyRjRFN0RFQjIyQkY4NDQ5QTQ4OTZEQTVCNjA1
OERGNjVBRDAeFw0yNjAzMjYwMjQxNTRaFw0yNzAzMjUwMjQ2NTRaMDMxMTAvBgNV
BAMTKDg2Qzg5NjE5OENGQjVCOUE1MDQ1NTk3MDgyNkY3OTMyODkyNEU3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgekOMl7QMCDLshFzENngLMQQ5
yUt7cgeJZzAgu7FSKFitVAd7/SOKB39JeV6tEzI3MASiP4SrdRNIk7pkN4QIS+U2
TFaDuOIjg6P7RaUxqySn/uFnK+8pI+a8EI4iySpXCblKtCisMXDyVlpgriMtdoRn
XeHPLHmJcFoi9nCjnPEh2CxmnBjcaE8IlrZBjb3CWOa1Z4UdlMcvhDTgvkkTNWj7
5leMhdA/cuusihPEBJOtpRRX4ajjlsr8rgt8Pn2D8mO3qDv5Dgcqn+gVUNlnQGlr
lnfkNHh6Zwkzfp2YUmMuh2UameMMLwRBtPJTCVfwKmbWlSileNNZtr1k5V0zAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhsiWGYz7W5pQRVlwgm95Mokk59IwHwYDVR0j
BBgwFoAUuMQi9Ofesiv4RJpIltpbYFjfZa0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj
dU4vMC9COEM0MjJGNEU3REVCMjJCRjg0NDlBNDg5NkRBNUI2MDU4REY2NUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QzQyMkY0RTdERUIyMkJG
ODQ0OUE0ODk2REE1QjYwNThERjY1QUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZiUWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAv
MzEzNzM3MmUzMzM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM3
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArEnDDANBgkqhkiG9w0BAQsFAAOCAQEAG6qjmxwmnzWD
7T6gyfExTJjmGIb8ZGJQVQe14OWIz3dxPUFOVZy8YsgSxNx5ucE5tLbtF1W7Ilvv
ROr7nbrqkQismQWG4gL5rrWRpH33z5cmljKnrHCkFWwaCHGvXHeOt/PHl0XO5RW6
B3E6kXRbElNUe/9Ist0NAAC1y/v0z4NAibI0oD4aAYAll0N4pLNqKAVvain1YjOg
F724OQtldTYi/IEAJZ+pITAj0qV4oPRR3XHkV3HbUrnfFP+0eJ6z+++kBxsmS2js
yPn5DCdqFEKVDN7nrXIkyQnY4Ec3RseYxe/NlJZicZSefDADd62lpAsFjRy4UH7q
BRaa2PIhwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:56:04 2026 by rpki-client