Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          0OAR6JNXLSne9gGf1digVdhkqaVUYT5Kw7OAMeceKcw=
Subject key identifier:   2F:74:AE:2E:B7:83:51:44:F7:D3:ED:6B:2A:CB:CF:F6:2C:BB:36:03
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       4C66C3049D76577D40E11BD8BA3847CB12315D50
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 27 Oct 2026 15:46:36 +0000
ROA not before:           Tue 27 Oct 2026 15:41:36 +0000
ROA not after:            Tue 26 Oct 2027 15:46:36 +0000
asID:                     52861
IP address blocks:        177.93.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 23:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:c3:04:9d:76:57:7d:40:e1:1b:d8:ba:38:47:cb:12:31:5d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Oct 27 15:41:36 2026 GMT
            Not After : Oct 26 15:46:36 2027 GMT
        Subject: CN=2F74AE2EB7835144F7D3ED6B2ACBCFF62CBB3603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:b9:78:09:39:db:b8:11:e3:15:11:25:d4:
                    cb:e3:15:34:44:17:c1:38:c6:a1:df:5b:94:22:fd:
                    67:50:4f:78:ff:d3:13:90:67:00:74:6b:0e:be:c0:
                    65:dd:c8:80:63:29:64:e0:4c:1d:4c:46:74:4c:d7:
                    08:f8:6f:f1:bf:51:e7:56:d7:f9:c0:87:e3:02:0b:
                    19:f9:c4:fc:7e:9d:48:bf:61:09:5b:3e:4c:e6:72:
                    83:80:e2:b7:af:84:94:37:d9:a4:78:c3:ea:a6:49:
                    57:d4:7b:01:9b:e1:eb:8f:af:4a:da:74:ad:42:f5:
                    eb:68:85:ac:6b:b3:d9:1e:b2:fe:f3:28:1b:ec:31:
                    74:78:6e:d9:bc:64:71:27:d1:6e:66:f4:11:31:b0:
                    75:88:37:82:68:2c:57:5b:1d:53:60:d4:e2:3e:91:
                    06:dc:24:a7:9a:aa:ca:24:1b:eb:60:12:f3:4d:6f:
                    f5:5f:f5:b9:5e:4b:54:65:d2:93:12:f3:cf:3b:39:
                    49:bb:55:54:4a:fb:ff:13:d7:0b:91:ca:4a:48:72:
                    16:72:3f:f0:48:54:72:fc:3d:43:01:b7:a7:e6:4d:
                    38:47:de:f1:76:24:be:56:77:26:5d:e0:72:60:0f:
                    6a:ed:97:eb:ab:25:c8:f6:9b:fa:e6:b2:66:c3:20:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:74:AE:2E:B7:83:51:44:F7:D3:ED:6B:2A:CB:CF:F6:2C:BB:36:03
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:c9:68:28:c8:c9:4a:09:ec:b0:de:4c:df:45:8f:54:2d:
         13:41:0a:26:c6:c9:cb:5f:28:b4:bb:1d:10:2a:15:94:13:6c:
         40:4a:d3:46:b1:40:b3:6a:87:fa:bc:e8:25:8e:5a:e1:98:40:
         6a:9d:a8:9f:36:fd:ad:ea:96:b8:8d:71:f0:d1:c5:e1:08:29:
         e5:01:12:16:f9:21:4c:4d:cd:9d:04:29:1b:46:6a:db:59:be:
         4b:cf:cc:43:b7:ae:5a:ac:e8:9e:e2:f0:cf:c0:25:50:93:1a:
         7c:f0:19:5a:95:de:56:f8:84:46:4a:40:61:b2:2a:f8:d1:7d:
         0c:72:aa:e6:1a:23:e8:cb:25:19:02:34:9b:8f:6d:ce:0b:64:
         b9:79:d5:29:90:04:38:b3:ce:0f:b2:0e:2c:4d:5e:76:b6:05:
         a6:38:95:63:f4:6c:a6:2d:cb:c5:4a:11:99:09:b4:3b:89:1b:
         7f:d3:e1:0d:8b:64:aa:d3:c2:ce:f5:24:07:a3:2f:b1:4d:c7:
         fc:44:70:d9:b3:7c:e0:3a:fd:e0:07:d7:b1:e2:48:38:fc:25:
         65:77:a4:07:cc:70:f2:73:4c:82:07:a3:89:c2:74:1a:cb:f2:
         c3:e5:18:10:f7:be:ef:a7:19:06:3d:23:2a:bf:08:68:fc:54:
         55:46:40:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTGbDBJ12V31A4RvYujhHyxIxXVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVB
MjdERjI3MDAeFw0yNjEwMjcxNTQxMzZaFw0yNzEwMjYxNTQ2MzZaMDMxMTAvBgNV
BAMTKDJGNzRBRTJFQjc4MzUxNDRGN0QzRUQ2QjJBQ0JDRkY2MkNCQjM2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/rl4CTnbuBHjFREl1MvjFTRE
F8E4xqHfW5Qi/WdQT3j/0xOQZwB0aw6+wGXdyIBjKWTgTB1MRnRM1wj4b/G/UedW
1/nAh+MCCxn5xPx+nUi/YQlbPkzmcoOA4revhJQ32aR4w+qmSVfUewGb4euPr0ra
dK1C9etohaxrs9kesv7zKBvsMXR4btm8ZHEn0W5m9BExsHWIN4JoLFdbHVNg1OI+
kQbcJKeaqsokG+tgEvNNb/Vf9bleS1Rl0pMS8887OUm7VVRK+/8T1wuRykpIchZy
P/BIVHL8PUMBt6fmTThH3vF2JL5WdyZd4HJgD2rtl+urJcj2m/rmsmbDIIzlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUL3SuLreDUUT30+1rKsvP9iy7NgMwHwYDVR0j
BBgwFoAUCI++zD1zSHXNwjtVueUJLqJ98nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMC8wODhGQkVDQzNENzM0ODc1Q0RDMjNCNTVCOUU1MDkyRUEyN0RGMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZCRUNDM0Q3MzQ4NzVD
REMyM0I1NUI5RTUwOTJFQTI3REYyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv
MzEzNzM3MmUzOTMzMmUzMTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzgzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsV2SMA0GCSqGSIb3DQEBCwUAA4IBAQB4XMloKMjJ
SgnssN5M30WPVC0TQQomxsnLXyi0ux0QKhWUE2xAStNGsUCzaof6vOgljlrhmEBq
naifNv2t6pa4jXHw0cXhCCnlARIW+SFMTc2dBCkbRmrbWb5Lz8xDt65arOie4vDP
wCVQkxp88Blald5W+IRGSkBhsir40X0McqrmGiPoyyUZAjSbj23OC2S5edUpkAQ4
s84Psg4sTV52tgWmOJVj9GymLcvFShGZCbQ7iRt/0+ENi2Sq08LO9SQHoy+xTcf8
RHDZs3zgOv3gB9ex4kg4/CVld6QHzHDyc0yCB6OJwnQay/LD5RgQ977vpxkGPSMq
vwho/FRVRkAA
-----END CERTIFICATE-----
Generated at Fri Oct 30 03:39:13 2026 by rpki-client