Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3332203d3e20323632333338.roa
File:                     3137372e3132362e36342e302f32302d3332203d3e20323632333338.roa (raw, json)
Hash identifier:          WvdqQZmoLAUxR8fGaS234VZkSb8+1+6hlCEoNf4IUMk=
Subject key identifier:   7F:86:C7:F0:BD:26:B6:83:C4:9D:C6:2A:DC:E8:81:D3:70:4E:68:80
Certificate issuer:       /CN=AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3
Certificate serial:       327C09AE70D939E880425DAB747D468B3F3A0B2E
Authority key identifier: AE:DE:DF:6F:CA:C5:70:4B:DD:F8:3F:0B:1E:60:F2:19:29:83:8D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3332203d3e20323632333338.roa
Signing time:             Fri 20 Mar 2026 12:59:57 +0000
ROA not before:           Fri 20 Mar 2026 12:54:57 +0000
ROA not after:            Fri 19 Mar 2027 12:59:57 +0000
asID:                     262338
IP address blocks:        177.126.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7c:09:ae:70:d9:39:e8:80:42:5d:ab:74:7d:46:8b:3f:3a:0b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3
        Validity
            Not Before: Mar 20 12:54:57 2026 GMT
            Not After : Mar 19 12:59:57 2027 GMT
        Subject: CN=7F86C7F0BD26B683C49DC62ADCE881D3704E6880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:fe:36:fe:eb:23:22:6a:80:9a:b9:d7:0f:
                    aa:fe:a9:9b:58:3c:bb:53:44:c0:42:c8:d6:a3:34:
                    69:6e:39:19:2a:76:d0:1d:de:42:82:3e:ae:3b:a6:
                    ea:c5:14:dc:f9:11:f5:88:a0:0a:cb:74:2d:eb:ee:
                    da:10:0a:47:eb:1c:88:34:a1:6c:50:ab:4d:40:84:
                    15:5f:1d:d7:f6:fe:31:50:dc:d1:66:36:92:52:dd:
                    8e:39:6f:f7:98:72:f2:a0:b9:19:da:44:de:19:07:
                    50:27:24:0c:3c:59:3c:01:a7:0c:1e:19:b6:bc:67:
                    fc:b4:a1:6d:f3:25:de:dc:df:be:5d:06:a1:46:8a:
                    f1:fe:28:79:65:ce:dc:a2:d8:49:08:4b:0f:29:b8:
                    7b:5e:3a:38:66:00:30:34:3d:70:fb:fc:6b:06:ab:
                    67:6e:ab:61:5b:8f:60:f9:47:14:bf:d3:19:94:92:
                    02:2b:7e:f1:22:b4:84:96:3b:67:5f:7c:a8:d2:48:
                    35:63:b7:4d:c9:90:83:03:60:04:f8:6c:15:e4:17:
                    1e:c6:5c:ef:19:3d:c9:ba:da:bf:64:7f:9d:9b:82:
                    53:08:3f:da:68:be:ae:fc:c1:78:6e:ae:27:1a:9c:
                    ea:8e:a0:e3:12:da:4e:b7:a5:59:97:a8:ef:44:48:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:C7:F0:BD:26:B6:83:C4:9D:C6:2A:DC:E8:81:D3:70:4E:68:80
            X509v3 Authority Key Identifier:
                keyid:AE:DE:DF:6F:CA:C5:70:4B:DD:F8:3F:0B:1E:60:F2:19:29:83:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36342e302f32302d3332203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:53:00:f4:8e:82:cd:91:0b:f1:9a:2d:64:5e:f1:66:62:
         da:68:72:92:f4:3c:51:6a:fe:fb:e6:1d:35:77:c2:4f:5c:74:
         68:af:5f:68:32:74:cf:4e:c7:3a:f7:33:31:c5:ea:45:5b:e7:
         a1:9a:c8:17:64:e0:76:31:d8:c8:dd:fa:2e:a5:0a:03:55:15:
         da:31:ea:ff:92:3a:85:00:94:45:64:42:70:0e:f4:d4:bf:15:
         64:c4:13:3d:86:5a:e0:dc:04:a0:55:e0:6e:cd:b8:36:09:a1:
         7b:8d:e8:4d:0f:8e:b6:d8:01:a0:91:f2:21:91:18:1a:a4:11:
         dd:f8:b9:50:37:a7:7a:d6:c6:b5:4a:04:8f:4b:37:0c:02:f8:
         c5:32:26:d4:2a:39:ee:2b:70:34:af:a3:0c:87:a5:97:26:73:
         0e:5b:85:83:13:84:1a:e0:f3:f0:74:b5:40:7a:02:90:4d:d9:
         66:08:c6:b0:cc:c6:ad:05:e5:ef:d8:97:d4:c3:ae:06:25:34:
         f9:dd:28:ec:f5:e8:28:82:36:e2:00:f1:7d:1d:bd:2f:77:2a:
         03:d1:e1:7c:81:d4:4d:31:d8:e7:f8:3e:66:f0:2c:62:c1:55:
         3f:fb:b5:f1:7e:0a:43:43:12:69:b5:b4:84:7b:85:bb:43:83:
         c5:2b:07:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMnwJrnDZOeiAQl2rdH1Giz86Cy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVERURGNkZDQUM1NzA0QkRERjgzRjBCMUU2MEYyMTky
OTgzOERDMzAeFw0yNjAzMjAxMjU0NTdaFw0yNzAzMTkxMjU5NTdaMDMxMTAvBgNV
BAMTKDdGODZDN0YwQkQyNkI2ODNDNDlEQzYyQURDRTg4MUQzNzA0RTY4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhP42/usjImqAmrnXD6r+qZtY
PLtTRMBCyNajNGluORkqdtAd3kKCPq47purFFNz5EfWIoArLdC3r7toQCkfrHIg0
oWxQq01AhBVfHdf2/jFQ3NFmNpJS3Y45b/eYcvKguRnaRN4ZB1AnJAw8WTwBpwwe
Gba8Z/y0oW3zJd7c375dBqFGivH+KHllztyi2EkISw8puHteOjhmADA0PXD7/GsG
q2duq2Fbj2D5RxS/0xmUkgIrfvEitISWO2dffKjSSDVjt03JkIMDYAT4bBXkFx7G
XO8ZPcm62r9kf52bglMIP9povq78wXhuricanOqOoOMS2k63pVmXqO9ESPMlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf4bH8L0mtoPEncYq3OiB03BOaIAwHwYDVR0j
BBgwFoAUrt7fb8rFcEvd+D8LHmDyGSmDjcMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC9BRURFREY2RkNBQzU3MDRCRERGODNGMEIxRTYwRjIxOTI5ODM4REMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFREVERjZGQ0FDNTcwNEJE
REY4M0YwQjFFNjBGMjE5Mjk4MzhEQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlva3NmM3NMeG5icWd4UGVDUGhDTWFzOXQ3alJBa1Y4MnZuOFRrTFJ4R3N2LzAv
MzEzNzM3MmUzMTMyMzYyZTM2MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxfkAwDQYJKoZIhvcNAQELBQADggEBABvEUwD0
joLNkQvxmi1kXvFmYtpocpL0PFFq/vvmHTV3wk9cdGivX2gydM9Oxzr3MzHF6kVb
56GayBdk4HYx2Mjd+i6lCgNVFdox6v+SOoUAlEVkQnAO9NS/FWTEEz2GWuDcBKBV
4G7NuDYJoXuN6E0PjrbYAaCR8iGRGBqkEd34uVA3p3rWxrVKBI9LNwwC+MUyJtQq
Oe4rcDSvowyHpZcmcw5bhYMThBrg8/B0tUB6ApBN2WYIxrDMxq0F5e/Yl9TDrgYl
NPndKOz16CiCNuIA8X0dvS93KgPR4XyB1E0x2Of4PmbwLGLBVT/7tfF+CkNDEmm1
tIR7hbtDg8UrB6Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:19:57 2026 by rpki-client