Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32312d3332203d3e20323636313630.roa (raw, json)
Hash identifier:          wYEBCMeRmvSAF26mQShopOaUih/zfBFoxqnvWnZrMK0=
Subject key identifier:   15:D6:C9:85:EA:7F:F5:58:57:6D:C8:B7:15:A2:F7:B0:A0:43:FB:FB
Certificate issuer:       /CN=A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA
Certificate serial:       01F9208C608FC4817084B53FC725B0F28FEBA4F8
Authority key identifier: A0:F0:F1:9E:3D:87:6E:9F:88:92:49:A3:E2:D7:FC:21:BA:92:98:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
Signing time:             Thu 12 Mar 2026 17:29:43 +0000
ROA not before:           Thu 12 Mar 2026 17:24:43 +0000
ROA not after:            Thu 11 Mar 2027 17:29:43 +0000
asID:                     266160
IP address blocks:        177.85.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.crl
                          rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:20:8c:60:8f:c4:81:70:84:b5:3f:c7:25:b0:f2:8f:eb:a4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA
        Validity
            Not Before: Mar 12 17:24:43 2026 GMT
            Not After : Mar 11 17:29:43 2027 GMT
        Subject: CN=15D6C985EA7FF558576DC8B715A2F7B0A043FBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:f1:6e:c3:cf:bf:20:32:82:49:fb:e6:95:
                    dd:89:e4:df:91:9b:82:83:35:1c:99:49:30:99:ac:
                    61:24:fa:6a:ea:3c:5a:02:cd:b4:91:f2:7a:0b:54:
                    e8:65:18:32:f1:66:b7:95:d3:7b:5d:ad:ff:ee:f0:
                    65:32:f7:1f:f3:ba:ee:fb:fe:71:00:85:9a:74:f5:
                    b8:0c:cb:d6:b9:44:35:d5:24:79:2c:5f:e0:1f:5e:
                    14:86:58:c5:58:3b:d5:c4:6d:b6:5b:b7:b6:26:77:
                    ff:ef:16:81:74:94:57:d5:03:f4:57:be:99:d1:41:
                    50:29:55:fd:56:32:78:d7:76:64:fa:35:9b:1d:7f:
                    4a:7d:79:f7:1f:7a:88:b6:7f:1e:0c:a2:f6:4d:59:
                    50:c0:0a:ee:21:8f:2f:64:74:32:fa:fe:00:1a:b0:
                    43:93:ce:2d:60:54:9b:b3:24:ea:c0:9e:ef:ee:21:
                    3c:a5:50:81:92:94:64:e9:a4:e0:96:a8:a5:03:42:
                    5f:2b:a0:ac:ff:55:5f:19:ac:2d:07:c1:a2:b5:44:
                    03:fb:16:c5:7d:af:64:4d:7f:8c:f6:c7:37:f2:06:
                    05:b2:3f:9c:b5:5b:41:81:bb:24:96:6d:8d:eb:30:
                    6b:71:89:e8:4f:4b:7a:86:35:ad:88:47:ad:b7:33:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:C9:85:EA:7F:F5:58:57:6D:C8:B7:15:A2:F7:B0:A0:43:FB:FB
            X509v3 Authority Key Identifier:
                keyid:A0:F0:F1:9E:3D:87:6E:9F:88:92:49:A3:E2:D7:FC:21:BA:92:98:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0F0F19E3D876E9F889249A3E2D7FC21BA9298AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c2:38:09:53:90:cf:b3:b2:91:18:8d:14:77:69:42:1d:70:ed:
         56:d5:60:2b:d5:2d:87:b1:9e:ef:d6:30:ff:89:7d:63:cd:90:
         3c:a6:90:a6:a6:21:75:da:aa:f3:3e:ec:ca:ea:14:58:7f:3e:
         db:06:18:43:4a:f9:54:1b:6e:59:8e:33:2c:e8:ba:b2:37:8b:
         16:7c:31:cd:8f:e7:28:ae:16:36:9a:4c:6b:d5:cd:18:3c:92:
         ff:31:00:fc:2f:a6:17:b4:10:46:8e:08:18:ce:1b:36:de:98:
         29:90:33:8e:67:02:96:ac:22:a3:6d:cc:80:6a:d7:08:87:07:
         fe:d4:2c:b1:37:c6:02:0b:34:0e:62:51:59:53:c4:d0:21:21:
         e9:d8:7d:eb:10:45:66:92:50:ab:19:11:c7:36:b1:5b:6e:a2:
         99:6f:03:9a:e5:29:67:0d:69:81:fd:90:a0:9f:64:4a:0f:ab:
         c2:16:c4:56:cd:da:5f:f5:97:17:c2:73:6d:eb:0b:cb:0f:e6:
         6b:fe:14:f6:d0:e9:02:d7:a2:8b:c9:29:e3:4d:03:b7:a3:91:
         9e:71:fb:ee:69:d2:eb:28:38:71:00:a9:41:f8:d6:3d:02:4f:
         54:f6:34:6f:32:ae:a5:98:b4:c6:e0:86:c8:09:c2:5a:fc:1e:
         15:31:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:22 2026 by rpki-client