Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20323633353739.roa
File:                     3137372e382e3235322e302f32322d3332203d3e20323633353739.roa (raw, json)
Hash identifier:          YodNg0mC34BcDpGzrloCQXwIJywFe5ejzcuVlzE0a7U=
Subject key identifier:   D5:9D:2E:B1:9E:E2:AE:2F:F0:5F:FE:0E:7A:BC:B7:73:30:84:B4:AE
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       0B5435268777A72D705F257BE8544FA914BF58A2
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20323633353739.roa
Signing time:             Thu 23 Jul 2026 20:48:36 +0000
ROA not before:           Thu 23 Jul 2026 20:43:36 +0000
ROA not after:            Thu 22 Jul 2027 20:48:36 +0000
asID:                     263579
IP address blocks:        177.8.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:35:26:87:77:a7:2d:70:5f:25:7b:e8:54:4f:a9:14:bf:58:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 23 20:43:36 2026 GMT
            Not After : Jul 22 20:48:36 2027 GMT
        Subject: CN=D59D2EB19EE2AE2FF05FFE0E7ABCB7733084B4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:95:a4:ce:cd:fe:4d:ac:34:d7:f4:f8:07:
                    6e:2d:40:84:a3:85:f9:e9:a5:dc:6a:65:1d:3d:b8:
                    1e:d4:3f:42:8c:75:b1:2b:dc:ab:04:5f:87:f9:bb:
                    aa:4f:61:31:ee:3f:32:76:53:bd:63:9f:a7:36:09:
                    af:18:6b:c9:04:86:bf:af:61:18:59:10:58:66:02:
                    07:96:26:94:c1:08:7b:f7:59:33:1c:f2:32:bd:21:
                    d8:b7:95:e1:33:3f:9f:d4:bb:58:84:54:8b:51:e7:
                    39:4a:04:87:f6:2c:19:ae:c4:5a:27:88:a3:25:f7:
                    7f:8c:24:00:f0:76:d7:a8:93:0b:ec:02:3d:8a:e5:
                    5e:4a:f5:96:f6:1e:78:0e:f8:4a:f1:48:82:20:37:
                    7e:8b:84:a4:9a:96:7d:34:73:a6:3a:a2:ae:57:fd:
                    a7:ae:fd:d5:38:6f:07:fc:3b:64:98:02:b6:5c:c3:
                    9a:50:5b:69:56:98:f7:47:79:06:6a:b7:e0:4f:85:
                    cd:8b:b4:1c:db:3b:14:79:8d:03:99:bd:3c:0d:35:
                    3f:eb:f4:26:a9:b9:49:b0:75:5f:7d:58:48:af:99:
                    5d:99:a8:16:cb:17:10:9e:45:67:de:e2:df:ef:77:
                    52:c1:2b:73:73:e6:43:40:a7:b0:6e:a7:e5:be:37:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9D:2E:B1:9E:E2:AE:2F:F0:5F:FE:0E:7A:BC:B7:73:30:84:B4:AE
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20323633353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:6e:82:41:c3:04:1b:08:b9:ac:51:cf:3f:14:df:dc:2e:
         d9:d2:6d:dc:f3:41:36:7c:f0:b2:11:e3:ad:94:4a:e5:94:12:
         e5:81:82:e7:68:c0:8d:00:40:e2:0b:c3:ab:f2:1d:89:6a:64:
         3b:3b:de:ad:69:06:d1:bd:a4:ff:b8:7c:f5:45:8f:00:27:b0:
         74:fb:94:11:7a:11:b5:4b:07:c8:44:c9:3c:64:b3:03:29:0e:
         54:31:17:3f:5c:b6:77:58:69:ee:0a:65:24:3a:7b:cb:1b:f9:
         71:73:23:39:1f:68:77:ab:e1:60:df:0f:36:2a:d4:fa:59:bb:
         84:3e:0a:aa:2e:ab:1c:37:e4:f1:28:a3:f7:2c:b0:19:44:c0:
         1a:4c:a9:36:7f:b9:d6:b4:44:c2:e6:e6:6b:86:b2:a6:d2:ea:
         94:e0:f5:f5:60:3b:82:8c:e1:85:9a:a8:7e:80:ae:88:4e:58:
         9f:8b:89:4a:e5:cf:31:89:34:c9:a7:5a:51:04:d3:4f:ce:28:
         eb:2a:81:c4:8e:7f:47:b5:30:0a:08:a4:55:0d:43:41:64:91:
         5d:a8:af:8e:66:8e:84:5a:95:0d:40:fc:40:58:01:0f:e7:fa:
         18:5b:75:2c:50:ab:c2:3f:ec:9f:f9:c9:3d:eb:f8:c7:86:a4:
         29:02:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:33:21 2026 by rpki-client