Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3137372e31322e3134322e302f32342d3234203d3e20323734363732.roa
File:                     3137372e31322e3134322e302f32342d3234203d3e20323734363732.roa (raw, json)
Hash identifier:          t3uGBo+vfRKx5NwNUjvqqjFF4bvRgJA1aAu8tNvCUis=
Subject key identifier:   BB:D8:41:A2:EC:DF:73:94:31:B9:10:4E:5B:7B:64:EF:D9:40:C7:31
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       638B528CB14FF18D345CF5CCEF17831F96BA6A9F
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3137372e31322e3134322e302f32342d3234203d3e20323734363732.roa
Signing time:             Fri 09 Oct 2026 14:34:16 +0000
ROA not before:           Fri 09 Oct 2026 14:29:16 +0000
ROA not after:            Fri 08 Oct 2027 14:34:16 +0000
asID:                     274672
IP address blocks:        177.12.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8b:52:8c:b1:4f:f1:8d:34:5c:f5:cc:ef:17:83:1f:96:ba:6a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Oct  9 14:29:16 2026 GMT
            Not After : Oct  8 14:34:16 2027 GMT
        Subject: CN=BBD841A2ECDF739431B9104E5B7B64EFD940C731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:93:ed:66:9f:f9:51:97:13:c1:df:b7:9e:
                    e5:5d:c4:58:70:78:a4:3e:52:fd:5d:f3:78:ef:02:
                    d2:62:a7:54:63:ff:9c:21:0d:95:43:c5:cc:f3:e7:
                    32:6d:ee:15:14:90:2b:b3:e8:ea:25:e6:db:33:45:
                    16:78:e0:b9:a9:58:63:43:d9:ba:ce:f0:10:91:a8:
                    c7:26:f1:d8:6b:d2:ad:15:02:b6:e2:e4:99:da:74:
                    8f:39:b3:e4:90:48:55:94:de:d1:9e:72:b6:ab:1a:
                    78:e5:54:0f:d2:80:3a:55:c3:fb:f6:08:fe:5e:01:
                    f1:a9:d0:8e:77:fa:aa:29:ec:ca:64:50:df:4b:a1:
                    76:94:8c:07:ab:20:30:70:2c:a2:fe:b3:18:2c:70:
                    b9:3f:0a:a0:b7:3c:48:b8:51:4d:a9:10:de:f2:72:
                    ab:a4:d5:8a:ad:f2:53:de:e1:4a:b7:9e:96:5c:84:
                    7c:80:93:9d:50:8f:05:36:be:de:af:be:23:5f:9c:
                    df:a7:d1:ac:60:a4:24:77:b3:fd:b3:5e:f1:e8:61:
                    21:7d:53:6f:f2:5e:82:e5:7d:b5:fe:87:6a:81:32:
                    48:0e:92:fe:1e:cc:f1:f6:94:7e:1f:ae:5c:15:d6:
                    8c:91:6d:89:24:87:a1:4b:b1:f0:14:1b:5e:dd:36:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D8:41:A2:EC:DF:73:94:31:B9:10:4E:5B:7B:64:EF:D9:40:C7:31
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3137372e31322e3134322e302f32342d3234203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:42:77:66:b0:3e:26:6b:7b:37:65:c4:0f:da:a0:63:b5:c6:
         9d:d2:e2:93:7e:be:de:8f:8f:6c:50:be:b5:8a:2c:4b:59:40:
         5b:84:66:05:16:8c:12:ea:16:5c:79:d7:66:83:6a:23:77:fe:
         39:7d:57:6d:43:d0:6a:ed:43:c3:0c:3e:87:c1:cd:ae:66:78:
         64:8b:72:d2:9d:d6:53:a8:ac:8d:31:19:4d:e3:83:87:76:20:
         f2:b0:95:bf:ee:24:81:d1:7a:a4:40:94:71:af:06:49:1e:d0:
         8a:d1:01:41:07:2f:82:31:d4:71:ec:e7:fe:86:b0:47:d8:b8:
         e0:fa:8b:c9:4c:bf:01:ff:46:24:98:af:03:d6:56:e2:7f:e8:
         fa:cd:99:a4:47:a3:c4:90:ed:be:cf:7d:fe:c0:28:60:34:fd:
         7c:fa:1a:5c:ed:eb:6a:a3:01:e2:23:65:88:a0:84:d4:b0:c8:
         c5:59:ad:ad:2d:42:3f:d1:80:71:68:2f:f5:b3:6d:35:ff:1c:
         84:c8:8b:a5:e2:4e:0e:7b:ad:fa:10:97:31:c6:54:49:8f:3d:
         54:90:59:37:d9:23:62:0e:fb:b1:a9:c8:71:8a:f6:a2:74:40:
         13:b9:87:cb:38:d4:06:ed:1b:d6:40:52:85:0f:1d:45:f8:08:
         e4:4b:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:14:17 2026 by rpki-client