Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3137372e31302e3136302e302f32312d3332203d3e203533323338.roa
File:                     3137372e31302e3136302e302f32312d3332203d3e203533323338.roa (raw, json)
Hash identifier:          YNXUvlvCFd6lQu0tKSCSoT9VwKuTw70rNhnubx56Uao=
Subject key identifier:   08:0F:25:AB:A5:9B:96:7C:F6:F7:FE:33:27:27:5B:B9:B4:8C:67:6C
Certificate issuer:       /CN=413AC88212333C28246B2D35C853E50D0EAA55DC
Certificate serial:       36CBA4B56BD4C8806374531B3A7311D2985A9CD3
Authority key identifier: 41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3137372e31302e3136302e302f32312d3332203d3e203533323338.roa
Signing time:             Mon 20 Apr 2026 15:28:48 +0000
ROA not before:           Mon 20 Apr 2026 15:23:48 +0000
ROA not after:            Mon 19 Apr 2027 15:28:48 +0000
asID:                     53238
IP address blocks:        177.10.160.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.crl
                          rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:a4:b5:6b:d4:c8:80:63:74:53:1b:3a:73:11:d2:98:5a:9c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413AC88212333C28246B2D35C853E50D0EAA55DC
        Validity
            Not Before: Apr 20 15:23:48 2026 GMT
            Not After : Apr 19 15:28:48 2027 GMT
        Subject: CN=080F25ABA59B967CF6F7FE3327275BB9B48C676C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:47:d3:f1:b0:e1:27:b0:b8:41:9f:79:ff:
                    8c:be:9b:ae:92:55:b6:c8:7d:71:4e:0b:82:35:e9:
                    90:d6:0b:19:70:22:43:d3:a5:26:ca:d9:e6:90:ba:
                    1f:cc:8c:94:75:97:1a:f1:2d:f5:54:5e:77:98:77:
                    dd:c1:7b:d3:d0:be:cc:1e:b0:49:77:e3:6c:a9:85:
                    f8:8e:e0:e7:30:2e:24:67:1a:79:a4:ee:f8:4d:af:
                    a2:37:7f:48:7f:10:5a:43:42:50:4a:c1:fc:98:20:
                    eb:cf:b7:c7:61:72:04:ca:de:5b:1c:64:53:e3:fa:
                    5b:c4:54:64:09:bf:54:fc:5c:ac:e0:85:ed:a5:af:
                    df:cf:e5:77:f5:6d:cb:70:f6:1b:e9:fe:d7:27:29:
                    28:f4:78:e7:50:fd:1e:41:dd:7b:d1:95:a9:a1:45:
                    ed:a1:c7:84:3a:e9:27:0d:d8:ec:28:ef:1b:be:d2:
                    e6:a2:25:f7:ec:2c:8e:7b:a7:c5:f4:05:a4:42:3f:
                    ee:ba:b8:f8:4a:1c:ed:20:43:04:32:3b:01:c7:7a:
                    4d:77:cd:d5:56:0e:fb:f4:fe:1a:0a:7c:e9:92:09:
                    76:dd:f2:34:de:35:18:92:54:18:76:31:1f:43:0b:
                    d1:17:5f:49:cd:29:02:8f:04:75:36:a4:17:d8:5d:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:25:AB:A5:9B:96:7C:F6:F7:FE:33:27:27:5B:B9:B4:8C:67:6C
            X509v3 Authority Key Identifier:
                keyid:41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3137372e31302e3136302e302f32312d3332203d3e203533323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:8f:37:bb:6e:17:91:ca:d4:3d:62:14:bb:84:4c:28:5c:
         9c:84:55:9c:ba:28:0a:b1:b4:4a:96:86:16:b2:2e:b6:b8:1c:
         ac:2e:d6:2e:93:29:70:f6:af:1a:5e:27:09:1d:6e:1f:06:6f:
         33:3c:12:e8:75:ef:fa:95:ab:63:49:41:d3:89:96:99:42:21:
         87:bd:1a:6b:1e:76:8a:3a:5a:5a:d5:b5:8b:ac:fa:60:be:d8:
         85:98:d0:bf:ba:1f:55:82:25:a9:93:f1:d8:84:95:50:a3:c0:
         13:bc:d7:50:9b:43:fd:0a:5e:8e:e2:49:86:2d:7d:58:39:d7:
         ad:d5:b3:4b:23:b3:95:9b:ae:2d:6a:37:d3:98:79:21:f0:d3:
         b8:0a:44:eb:4d:74:d6:af:db:eb:29:d4:38:53:ed:7a:0d:89:
         01:3f:be:86:35:33:d0:4e:2a:da:b0:5f:19:cd:22:d6:4b:ce:
         5d:66:3c:e1:6c:07:d2:57:93:31:2b:ef:81:8b:c3:20:3d:86:
         b7:19:f9:4f:52:0c:77:00:81:7c:86:62:7b:cb:8c:1e:66:d3:
         fb:cd:17:85:89:ce:00:43:65:58:be:05:71:27:66:6b:b4:db:
         32:9a:a2:fa:64:16:34:57:fa:74:53:d5:c1:a4:6f:2f:da:ed:
         d1:23:0d:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNsuktWvUyIBjdFMbOnMR0phanNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzQUM4ODIxMjMzM0MyODI0NkIyRDM1Qzg1M0U1MEQw
RUFBNTVEQzAeFw0yNjA0MjAxNTIzNDhaFw0yNzA0MTkxNTI4NDhaMDMxMTAvBgNV
BAMTKDA4MEYyNUFCQTU5Qjk2N0NGNkY3RkUzMzI3Mjc1QkI5QjQ4QzY3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSX0fT8bDhJ7C4QZ95/4y+m66S
VbbIfXFOC4I16ZDWCxlwIkPTpSbK2eaQuh/MjJR1lxrxLfVUXneYd93Be9PQvswe
sEl342yphfiO4OcwLiRnGnmk7vhNr6I3f0h/EFpDQlBKwfyYIOvPt8dhcgTK3lsc
ZFPj+lvEVGQJv1T8XKzghe2lr9/P5Xf1bctw9hvp/tcnKSj0eOdQ/R5B3XvRlamh
Re2hx4Q66ScN2Owo7xu+0uaiJffsLI57p8X0BaRCP+66uPhKHO0gQwQyOwHHek13
zdVWDvv0/hoKfOmSCXbd8jTeNRiSVBh2MR9DC9EXX0nNKQKPBHU2pBfYXX51AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCA8lq6Wblnz29/4zJydbubSMZ2wwHwYDVR0j
BBgwFoAUQTrIghIzPCgkay01yFPlDQ6qVdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFXOU15VHZXaUtDdERQYjNKNHBhMUUyeG9EVzhvTnU5OGpVN0F3cDRx
WTEvMC80MTNBQzg4MjEyMzMzQzI4MjQ2QjJEMzVDODUzRTUwRDBFQUE1NURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0FDODgyMTIzMzNDMjgy
NDZCMkQzNUM4NTNFNTBEMEVBQTU1REMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhVzlNeVR2V2lLQ3REUGIzSjRwYTFFMnhvRFc4b051OThqVTdBd3A0cVkxLzAv
MzEzNzM3MmUzMTMwMmUzMTM2MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNTMz
MzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQqgMA0GCSqGSIb3DQEBCwUAA4IBAQDDEo83u24X
kcrUPWIUu4RMKFychFWcuigKsbRKloYWsi62uBysLtYukylw9q8aXicJHW4fBm8z
PBLode/6latjSUHTiZaZQiGHvRprHnaKOlpa1bWLrPpgvtiFmNC/uh9VgiWpk/HY
hJVQo8ATvNdQm0P9Cl6O4kmGLX1YOdet1bNLI7OVm64tajfTmHkh8NO4CkTrTXTW
r9vrKdQ4U+16DYkBP76GNTPQTirasF8ZzSLWS85dZjzhbAfSV5MxK++Bi8MgPYa3
GflPUgx3AIF8hmJ7y4weZtP7zReFic4AQ2VYvgVxJ2ZrtNsymqL6ZBY0V/p0U9XB
pG8v2u3RIw1l
-----END CERTIFICATE-----
Generated at Wed May 13 18:07:34 2026 by rpki-client