Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa
File:                     3137372e3132352e38382e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier:          1Kt9w1NoeI3yFphRIWh/Dchf2algbNq1Ayu8BNv4tR8=
Subject key identifier:   20:26:D4:0A:34:15:90:05:57:87:16:34:C7:BB:41:9E:1A:8C:47:14
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       6FE487169F0DEC3828267085CA561605AF3A715C
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:55 +0000
ROA not before:           Sat 04 Jul 2026 13:38:55 +0000
ROA not after:            Sat 03 Jul 2027 13:43:55 +0000
asID:                     28201
IP address blocks:        177.125.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:87:16:9f:0d:ec:38:28:26:70:85:ca:56:16:05:af:3a:71:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:55 2026 GMT
            Not After : Jul  3 13:43:55 2027 GMT
        Subject: CN=2026D40A3415900557871634C7BB419E1A8C4714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:96:0b:2d:1d:5d:b8:37:20:57:d4:fd:cc:
                    6c:4c:7d:57:5d:0f:81:a5:8f:f9:83:31:f4:ca:19:
                    fb:09:14:23:73:90:d9:32:b1:88:43:78:05:86:52:
                    70:32:1d:1c:fb:03:86:61:83:60:47:25:0a:b6:44:
                    2f:e0:1d:1f:82:c8:72:12:9b:2b:dd:f4:fd:79:31:
                    be:90:3c:6c:b4:2e:28:ca:f6:ce:79:7d:cc:6d:b1:
                    a2:5b:b4:7c:5d:bb:7c:cf:81:ee:8a:09:85:87:ef:
                    09:0b:26:11:dd:6e:71:2b:d3:88:3a:8f:03:79:9e:
                    6f:cf:72:f1:11:77:2a:29:6c:cf:09:88:2c:9f:64:
                    2e:15:14:d7:c0:83:87:78:ef:5f:2e:05:22:08:30:
                    6b:e5:46:92:9d:1a:ad:ef:6d:32:31:9e:e7:6b:54:
                    5a:65:a5:35:39:84:80:28:8b:f7:b2:2e:6a:7c:b1:
                    f8:2c:ff:2a:ea:c4:a3:76:cb:73:0b:27:08:9a:1c:
                    06:ec:c2:1b:83:b2:23:ab:2a:19:3b:42:de:bf:91:
                    4f:54:dd:6a:8a:6d:6e:92:a6:21:be:ae:f2:5c:3d:
                    4f:35:ce:bd:9e:5c:13:89:8f:51:eb:14:69:14:20:
                    96:55:85:2e:e5:5a:ea:5f:71:77:7e:ed:83:28:ff:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:D4:0A:34:15:90:05:57:87:16:34:C7:BB:41:9E:1A:8C:47:14
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:78:7d:18:bd:12:82:f0:10:0d:61:23:75:5e:68:92:49:37:
         fc:55:dc:2c:57:66:7c:0e:bf:79:e3:55:b4:e7:0d:b4:ba:44:
         dc:e1:65:05:c0:36:0b:84:b9:79:8d:b5:27:7f:b3:36:00:f1:
         66:19:82:6f:e8:11:37:34:b1:32:7f:61:55:0f:b0:fd:00:8d:
         7d:87:82:e9:e3:cb:76:b2:88:a6:19:7c:36:21:21:e4:78:97:
         1b:53:8f:80:d9:9e:35:06:49:fc:30:d4:3d:3b:14:d2:ac:d8:
         27:75:e7:ff:85:01:f2:e8:af:62:68:1c:e8:84:06:48:e5:b2:
         e3:c0:41:52:8a:c0:f6:14:0d:4e:5e:32:a1:92:33:42:fd:e7:
         60:5c:77:86:20:8f:43:34:37:61:e2:05:df:ec:10:91:fa:c2:
         fb:56:52:82:de:cf:1b:5a:62:0d:e0:be:d0:7f:d3:e0:42:cf:
         4d:57:8f:ab:17:b6:31:9e:6a:9a:d2:93:9f:0b:8f:b4:86:5c:
         23:e3:c1:0b:92:9b:37:86:95:a9:71:7c:62:ed:3e:b5:23:08:
         d5:a7:35:a7:f6:a9:57:44:3a:58:ef:b0:11:dc:22:97:33:aa:
         7a:a8:a4:6e:06:5f:37:30:83:d7:06:09:a6:0f:62:b1:53:3f:
         44:f1:99:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb+SHFp8N7DgoJnCFylYWBa86cVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNjA3MDQxMzM4NTVaFw0yNzA3MDMxMzQzNTVaMDMxMTAvBgNV
BAMTKDIwMjZENDBBMzQxNTkwMDU1Nzg3MTYzNEM3QkI0MTlFMUE4QzQ3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYO5YLLR1duDcgV9T9zGxMfVdd
D4Glj/mDMfTKGfsJFCNzkNkysYhDeAWGUnAyHRz7A4Zhg2BHJQq2RC/gHR+CyHIS
myvd9P15Mb6QPGy0LijK9s55fcxtsaJbtHxdu3zPge6KCYWH7wkLJhHdbnEr04g6
jwN5nm/PcvERdyopbM8JiCyfZC4VFNfAg4d4718uBSIIMGvlRpKdGq3vbTIxnudr
VFplpTU5hIAoi/eyLmp8sfgs/yrqxKN2y3MLJwiaHAbswhuDsiOrKhk7Qt6/kU9U
3WqKbW6SpiG+rvJcPU81zr2eXBOJj1HrFGkUIJZVhS7lWupfcXd+7YMo/0ojAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUICbUCjQVkAVXhxY0x7tBnhqMRxQwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNzM3MmUzMTMyMzUyZTM4MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsX1YMA0GCSqGSIb3DQEBCwUAA4IBAQBWeH0YvRKC
8BANYSN1XmiSSTf8VdwsV2Z8Dr9541W05w20ukTc4WUFwDYLhLl5jbUnf7M2APFm
GYJv6BE3NLEyf2FVD7D9AI19h4Lp48t2soimGXw2ISHkeJcbU4+A2Z41Bkn8MNQ9
OxTSrNgndef/hQHy6K9iaBzohAZI5bLjwEFSisD2FA1OXjKhkjNC/edgXHeGII9D
NDdh4gXf7BCR+sL7VlKC3s8bWmIN4L7Qf9PgQs9NV4+rF7Yxnmqa0pOfC4+0hlwj
48ELkps3hpWpcXxi7T61IwjVpzWn9qlXRDpY77AR3CKXM6p6qKRuBl83MIPXBgmm
D2KxUz9E8Zkk
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:05 2026 by rpki-client