Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35332e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          +voTlaiPqKszLi5DbHKsdObRQqJ8x3BxdQi9ztRQuJA=
Subject key identifier:   99:4A:B8:9F:55:C7:17:73:40:E8:E3:97:97:67:64:09:E2:30:74:81
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       1B005E2865279C579DDD32F62488F11B6DB4D434
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 18 Oct 2026 13:33:45 +0000
ROA not before:           Sun 18 Oct 2026 13:28:45 +0000
ROA not after:            Sun 17 Oct 2027 13:33:45 +0000
asID:                     262503
IP address blocks:        177.91.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 17:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:5e:28:65:27:9c:57:9d:dd:32:f6:24:88:f1:1b:6d:b4:d4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Oct 18 13:28:45 2026 GMT
            Not After : Oct 17 13:33:45 2027 GMT
        Subject: CN=994AB89F55C7177340E8E39797676409E2307481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:ae:3e:42:06:fe:b7:52:18:d2:a0:93:10:
                    b7:8f:37:18:20:64:64:b8:fb:36:57:d5:05:13:f5:
                    65:4b:77:9f:7a:22:1b:06:2e:df:cd:40:2a:05:f6:
                    f2:46:eb:0c:52:51:1d:a6:14:41:fb:1a:fa:ba:60:
                    b6:1c:ca:3b:93:30:00:79:25:af:66:5f:73:87:74:
                    b1:a7:5d:fa:66:0d:ce:52:1e:8b:e3:61:b8:fb:a7:
                    06:47:91:c7:f5:08:34:54:dd:9c:81:88:93:19:a2:
                    21:e9:9a:18:5b:c2:b6:20:9a:b4:61:98:39:2a:74:
                    f9:b1:de:23:2a:f3:d3:76:8b:30:8f:19:8c:29:87:
                    4a:e7:44:4e:a5:fc:8a:de:08:d0:99:95:1e:00:82:
                    64:a9:6b:2d:dd:62:c4:aa:16:40:cc:b1:df:2a:90:
                    13:5f:67:07:da:13:d9:f2:c0:c6:36:7c:06:b4:21:
                    fd:79:c3:6b:09:3a:da:fc:61:7c:4f:56:7c:32:91:
                    f7:48:d5:a2:66:e2:3d:7e:77:42:d9:ec:f7:74:83:
                    95:92:ac:6c:85:72:52:bf:c9:65:af:d2:d7:3e:0f:
                    11:3d:7f:bc:1f:57:d7:97:f0:c0:dc:8e:fc:82:6e:
                    44:3a:1a:05:12:cc:d6:73:bc:1f:b3:65:cd:f3:42:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:B8:9F:55:C7:17:73:40:E8:E3:97:97:67:64:09:E2:30:74:81
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:55:29:74:c2:11:7a:b7:ea:db:4c:69:66:f0:2d:d5:05:6a:
         fc:b9:8b:94:47:22:37:35:fe:a9:42:25:e0:a7:91:89:be:26:
         0c:4a:3b:ae:9f:bd:13:d3:cc:a4:90:c0:ee:84:1a:81:64:f2:
         72:c3:f3:84:9e:47:81:0b:d9:ce:9e:9d:5a:f6:3e:70:6d:8b:
         a5:e5:e9:c7:65:ac:63:3b:03:04:6e:d0:b1:bd:18:9f:61:70:
         34:49:3b:8a:73:c5:24:b1:61:fe:5e:ef:98:60:84:dd:fc:2e:
         c6:21:83:1d:72:68:25:de:87:b7:3e:c3:29:04:a8:a2:89:31:
         24:a8:b8:5e:dc:02:36:f9:08:9c:cd:df:6c:a4:d5:9d:6e:e0:
         08:f4:a4:85:bc:fe:d7:a4:8d:a1:64:58:bd:e3:38:c4:89:37:
         ce:35:37:61:80:41:c0:3d:cb:be:d7:d5:17:80:e3:69:5e:02:
         25:93:56:ff:8d:de:b8:f6:7f:5d:3c:52:2e:10:e6:97:62:b1:
         d5:8f:18:30:b4:2b:65:7d:bd:b4:f1:a2:78:1f:2e:71:db:ae:
         cc:4a:5a:cb:0f:dd:7c:3a:38:17:91:f3:07:d8:ab:0c:b0:94:
         54:c4:f6:6f:35:08:41:3b:a1:f2:d2:2d:c8:ad:3d:4d:21:ac:
         eb:3d:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:30:45 2026 by rpki-client