Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134302e302f32342d3234203d3e20323730383337.roa
File:                     3137372e35322e3134302e302f32342d3234203d3e20323730383337.roa (raw, json)
Hash identifier:          02+33HLnsIk4WExvGDNNK/rBFQ00Q8VFKSPIJ1cHdxg=
Subject key identifier:   CF:A0:28:2A:F5:CF:AA:A4:29:64:71:1E:DF:BF:F5:BC:64:C2:FD:11
Certificate issuer:       /CN=637D8AA9E8D9DB10D9378313C9F712FFF258C7A9
Certificate serial:       5F3223C681FA285CBC7EB537414C3A105071A6C1
Authority key identifier: 63:7D:8A:A9:E8:D9:DB:10:D9:37:83:13:C9:F7:12:FF:F2:58:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134302e302f32342d3234203d3e20323730383337.roa
Signing time:             Mon 05 Oct 2026 15:27:58 +0000
ROA not before:           Mon 05 Oct 2026 15:22:58 +0000
ROA not after:            Mon 04 Oct 2027 15:27:58 +0000
asID:                     270837
IP address blocks:        177.52.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.crl
                          rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:32:23:c6:81:fa:28:5c:bc:7e:b5:37:41:4c:3a:10:50:71:a6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637D8AA9E8D9DB10D9378313C9F712FFF258C7A9
        Validity
            Not Before: Oct  5 15:22:58 2026 GMT
            Not After : Oct  4 15:27:58 2027 GMT
        Subject: CN=CFA0282AF5CFAAA42964711EDFBFF5BC64C2FD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:5f:dc:03:b2:a8:56:a7:b0:d7:86:b1:cf:
                    fa:9a:fa:e9:ec:1b:78:37:e2:e0:0f:77:86:1e:b1:
                    a1:27:52:dd:5f:a0:1f:99:0c:2c:a3:f6:ff:00:d9:
                    65:08:5d:ff:a7:67:f7:3b:f9:db:dc:50:3e:1c:f6:
                    e0:d4:7d:00:d3:11:39:16:9e:7f:64:0a:8c:73:60:
                    ad:5d:c1:82:f4:63:6a:00:ed:7c:17:20:03:31:59:
                    11:b6:ec:57:dd:bf:0c:20:4c:48:59:43:38:f4:a9:
                    5d:0f:b4:63:34:94:0f:5b:39:f7:9d:33:d3:02:98:
                    47:69:13:f0:43:22:e8:c1:d9:04:62:f1:be:17:95:
                    aa:b5:fa:67:48:63:64:a1:04:78:57:43:a8:1a:6d:
                    b4:7b:61:b4:1e:69:e4:66:66:6b:5a:06:76:8a:15:
                    4a:e3:f8:a8:56:bb:97:ef:ba:13:a5:ed:c7:89:2d:
                    9d:bc:43:08:bd:d9:3a:4e:e4:94:33:a9:cc:b4:ea:
                    73:c2:4d:2b:89:59:ca:53:8a:7c:d8:d4:e9:eb:81:
                    b2:16:cb:a3:e0:fd:72:1b:08:87:27:a4:97:21:12:
                    3d:d7:5c:46:7c:d1:c6:fc:34:be:58:f7:94:f3:5d:
                    6f:f7:f3:59:14:86:41:b2:ad:0d:09:1c:5e:6c:5c:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A0:28:2A:F5:CF:AA:A4:29:64:71:1E:DF:BF:F5:BC:64:C2:FD:11
            X509v3 Authority Key Identifier:
                keyid:63:7D:8A:A9:E8:D9:DB:10:D9:37:83:13:C9:F7:12:FF:F2:58:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134302e302f32342d3234203d3e20323730383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:6b:3b:13:8c:51:89:84:7c:58:51:73:24:79:e2:56:f6:
         15:f4:3c:6e:55:b7:08:fb:97:a5:28:57:81:79:69:8b:cd:60:
         a6:50:33:c0:22:d2:0d:25:32:7f:34:fd:ee:f1:45:21:b3:22:
         e4:32:99:29:d9:94:ff:28:03:24:87:2f:19:fd:f4:42:48:ef:
         84:a2:4f:ff:ec:5a:97:70:fa:34:40:87:a6:31:f6:c1:03:98:
         5c:be:82:fb:fe:af:f2:25:90:05:03:4a:f9:fc:d6:59:32:3f:
         92:32:58:3f:12:ff:2b:98:b9:89:03:90:f5:22:ab:69:85:1f:
         65:fb:ee:81:13:63:b3:71:99:ba:02:c5:b3:15:cf:7b:53:c1:
         db:6a:06:34:a2:f3:66:64:c4:ec:f2:2b:ff:8a:80:d3:fb:a5:
         2f:18:50:06:5e:d4:94:31:ef:4e:e1:94:a1:bf:03:49:b5:e0:
         06:27:03:35:3f:5e:3b:93:a3:6e:ef:26:51:d8:16:87:31:17:
         57:e7:f0:73:b7:95:76:de:75:4c:d3:71:a3:46:e5:b5:4b:01:
         3d:d3:54:5b:9e:94:0f:4e:1b:01:84:18:ae:27:2e:41:5b:a3:
         ee:09:58:08:fc:58:bd:93:22:6f:49:86:6c:41:0c:81:63:08:
         78:28:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:53 2026 by rpki-client