Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20323633353739.roa
File:                     3137372e382e3234382e302f32322d3332203d3e20323633353739.roa (raw, json)
Hash identifier:          50jtAmhWQIE894x/zh+oC5VZJIiQxyhYwV5TAOxrEYA=
Subject key identifier:   54:4B:AB:28:1D:28:B1:49:38:7D:EA:22:8A:54:58:16:A6:D4:5F:2A
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       5F8A9F75FEB89DE3E6155705F44B4C62AECA9D33
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20323633353739.roa
Signing time:             Thu 23 Jul 2026 20:48:36 +0000
ROA not before:           Thu 23 Jul 2026 20:43:36 +0000
ROA not after:            Thu 22 Jul 2027 20:48:36 +0000
asID:                     263579
IP address blocks:        177.8.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:9f:75:fe:b8:9d:e3:e6:15:57:05:f4:4b:4c:62:ae:ca:9d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 23 20:43:36 2026 GMT
            Not After : Jul 22 20:48:36 2027 GMT
        Subject: CN=544BAB281D28B149387DEA228A545816A6D45F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:e3:8d:6a:01:3c:1d:d2:71:58:46:62:b8:
                    a7:b3:f0:fa:65:54:6e:97:e7:3c:83:be:67:15:ef:
                    1f:25:f4:6e:c0:b6:30:fc:72:9d:f2:db:32:22:67:
                    d9:79:50:d3:d5:ad:2b:83:a2:35:32:5b:54:d2:d7:
                    a2:80:c9:c7:bc:24:90:ce:78:84:65:35:d5:bd:80:
                    31:a5:f3:5a:f3:97:67:aa:aa:c8:53:56:15:1a:3a:
                    9c:2e:69:00:63:f5:48:a3:9a:2a:91:65:a1:2b:77:
                    3b:e5:11:63:68:1b:e1:43:00:91:20:8e:5a:3f:10:
                    ac:ef:23:18:e5:80:ae:5b:88:df:5e:f3:60:87:75:
                    31:3f:83:e0:19:60:86:c0:90:a8:28:0e:c7:35:95:
                    90:56:f3:c3:ab:8f:fd:95:7f:ea:b6:06:b6:15:86:
                    3d:63:0f:46:6b:19:92:1c:0a:9d:62:3e:33:28:37:
                    74:c6:ef:53:bd:b7:e8:53:69:dd:6b:74:71:56:8a:
                    13:66:1e:ae:4a:ce:90:d2:9b:09:6c:8a:3f:16:b4:
                    f5:1a:b0:69:d8:93:f6:b1:f5:3f:21:7b:98:f4:3e:
                    47:15:28:7b:26:98:49:74:97:e8:5f:5b:17:f1:92:
                    e4:7d:62:a3:25:76:4d:af:71:57:9e:b6:69:37:69:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:AB:28:1D:28:B1:49:38:7D:EA:22:8A:54:58:16:A6:D4:5F:2A
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20323633353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:67:bf:99:03:0a:e0:65:6e:85:ff:6c:6b:95:98:9d:18:
         b5:28:97:05:85:48:a3:65:e4:0b:00:ca:a9:8e:e7:9a:bb:ec:
         2f:8d:81:ae:23:5d:63:c7:c3:6d:89:71:9e:0b:f8:f1:01:6f:
         b1:fc:a7:c5:07:10:10:7f:9a:86:11:9c:44:83:ca:a7:e8:f2:
         1f:37:1c:97:9c:b1:31:30:19:45:c5:e9:0c:25:fa:f1:04:87:
         4d:41:2b:17:82:4b:89:71:07:34:2f:52:6c:c2:61:b3:b7:3f:
         ad:2c:18:76:9a:c0:9a:18:48:12:eb:3f:d5:72:49:95:c6:6f:
         34:45:64:2f:a0:27:0e:18:00:a1:98:79:cb:3e:b7:91:46:96:
         37:a0:b3:db:11:8a:ba:e5:24:39:8b:5a:ce:59:bb:6e:af:b9:
         96:6e:ca:46:9e:e8:99:b9:85:e6:00:80:2d:88:73:3f:3e:96:
         0c:df:ff:8a:27:71:86:74:4a:c0:44:50:83:78:d8:6a:73:be:
         6f:da:ad:b7:4c:f7:2f:71:f1:22:dd:fe:2a:81:a1:af:73:2b:
         22:55:b7:d6:8b:4f:6a:db:0f:c5:0d:4e:e9:04:1b:20:82:89:
         b5:86:e6:ba:2c:e6:c8:43:8d:4a:7c:35:a4:27:cb:ac:3f:6d:
         9a:ad:95:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX4qfdf64nePmFVcF9EtMYq7KnTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYzMTQ0RUYxM0M3MzIwMEZBQTEzQzhDOUMzNDZCNEE1
N0RCRDMyQzAeFw0yNjA3MjMyMDQzMzZaFw0yNzA3MjIyMDQ4MzZaMDMxMTAvBgNV
BAMTKDU0NEJBQjI4MUQyOEIxNDkzODdERUEyMjhBNTQ1ODE2QTZENDVGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrceONagE8HdJxWEZiuKez8Ppl
VG6X5zyDvmcV7x8l9G7AtjD8cp3y2zIiZ9l5UNPVrSuDojUyW1TS16KAyce8JJDO
eIRlNdW9gDGl81rzl2eqqshTVhUaOpwuaQBj9UijmiqRZaErdzvlEWNoG+FDAJEg
jlo/EKzvIxjlgK5biN9e82CHdTE/g+AZYIbAkKgoDsc1lZBW88Orj/2Vf+q2BrYV
hj1jD0ZrGZIcCp1iPjMoN3TG71O9t+hTad1rdHFWihNmHq5KzpDSmwlsij8WtPUa
sGnYk/ax9T8he5j0PkcVKHsmmEl0l+hfWxfxkuR9YqMldk2vcVeetmk3abB7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVEurKB0osUk4feoiilRYFqbUXyowHwYDVR0j
BBgwFoAUpjFE7xPHMgD6oTyMnDRrSlfb0ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHhiMkJwWWVKTVJSaXJYNlJHUHhtWjlzRnM4ZWVITUFBaDdwa0h2YVFE
d2EvMC9BNjMxNDRFRjEzQzczMjAwRkFBMTNDOEM5QzM0NkI0QTU3REJEMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MzE0NEVGMTNDNzMyMDBG
QUExM0M4QzlDMzQ2QjRBNTdEQkQzMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4YjJCcFllSk1SUmlyWDZSR1B4bVo5c0ZzOGVlSE1BQWg3cGtIdmFRRHdhLzAv
MzEzNzM3MmUzODJlMzIzNDM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQj4MA0GCSqGSIb3DQEBCwUAA4IBAQBy8We/mQMK
4GVuhf9sa5WYnRi1KJcFhUijZeQLAMqpjueau+wvjYGuI11jx8NtiXGeC/jxAW+x
/KfFBxAQf5qGEZxEg8qn6PIfNxyXnLExMBlFxekMJfrxBIdNQSsXgkuJcQc0L1Js
wmGztz+tLBh2msCaGEgS6z/VckmVxm80RWQvoCcOGAChmHnLPreRRpY3oLPbEYq6
5SQ5i1rOWbtur7mWbspGnuiZuYXmAIAtiHM/PpYM3/+KJ3GGdErARFCDeNhqc75v
2q23TPcvcfEi3f4qgaGvcysiVbfWi09q2w/FDU7pBBsggom1hua6LObIQ41KfDWk
J8usP22arZW4
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:24:45 2026 by rpki-client