Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3135372e302f32342d3234203d3e203237373135.roa
File:                     3137372e35322e3135372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          9UG3LyC9qdz/EXV+47EXHnjb90Zdsh8tmqENtb7jcd8=
Subject key identifier:   F8:FB:D6:71:1B:35:8F:BE:55:30:D2:6E:C4:FD:9F:92:0F:97:5B:33
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       5D361294A93906838F3FC8D5FAB5EBBCA9FAB1FE
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3135372e302f32342d3234203d3e203237373135.roa
Signing time:             Fri 19 Jun 2026 19:09:59 +0000
ROA not before:           Fri 19 Jun 2026 19:04:59 +0000
ROA not after:            Fri 18 Jun 2027 19:09:59 +0000
asID:                     27715
IP address blocks:        177.52.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:36:12:94:a9:39:06:83:8f:3f:c8:d5:fa:b5:eb:bc:a9:fa:b1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Jun 19 19:04:59 2026 GMT
            Not After : Jun 18 19:09:59 2027 GMT
        Subject: CN=F8FBD6711B358FBE5530D26EC4FD9F920F975B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:7f:25:42:5d:b2:b8:01:a2:5e:0f:ef:2a:
                    9f:7f:ae:a3:3a:2a:b2:33:b3:6d:41:04:74:03:59:
                    5e:d2:8d:cb:04:78:93:b8:e7:3a:13:51:f0:68:f2:
                    33:e1:0f:44:52:57:88:45:d0:0c:c1:76:3b:54:fa:
                    d8:1a:84:77:42:ed:00:fe:b5:a2:20:ea:57:59:49:
                    58:65:ee:3f:4f:cd:88:28:4d:19:87:57:ab:0f:4d:
                    fb:37:ae:b9:ef:62:7c:b9:e3:cc:88:38:59:2d:0c:
                    c8:07:85:b4:52:1b:3a:98:ea:04:26:3f:c4:ff:38:
                    ba:1e:2c:58:f5:59:64:e9:18:d0:90:fc:25:cc:ca:
                    10:45:8b:98:14:e4:77:eb:d4:6d:0f:0e:5e:a0:6c:
                    3b:af:3d:36:ad:91:23:77:5f:57:ac:f3:5b:b8:b8:
                    83:48:cc:70:66:f8:d1:4c:23:b9:1b:f8:b8:e6:46:
                    7a:1d:fb:fe:58:48:dd:4f:ad:62:61:d4:fd:6c:c7:
                    5f:50:71:e0:d2:ef:c4:a7:95:9a:d1:82:d9:b2:f8:
                    25:29:2f:48:a2:ca:b0:a8:ff:ce:38:42:3e:48:a2:
                    3c:49:37:6e:1f:76:dc:5a:58:11:ae:64:1d:43:b9:
                    a5:18:b3:95:b1:0d:c5:0f:f4:fb:4f:ed:a4:f1:b1:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:D6:71:1B:35:8F:BE:55:30:D2:6E:C4:FD:9F:92:0F:97:5B:33
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3135372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:6e:c3:36:65:c2:16:ca:5e:e5:a1:b7:65:3b:4d:74:d8:
         63:6b:a8:16:2a:62:5b:0e:9d:92:14:1b:75:23:46:59:c5:ec:
         4d:cd:34:15:cc:a4:f0:41:fd:7e:99:bb:b6:aa:e1:2b:34:ab:
         68:c0:96:bf:51:ab:68:40:94:03:8d:fb:97:16:82:41:bc:39:
         a5:9e:e3:e6:de:9c:5f:04:01:74:f8:06:d5:ea:71:38:9c:03:
         b6:a6:8f:e8:1d:3b:18:a1:bd:cb:93:68:fd:5f:cd:bb:b1:30:
         08:da:68:f1:1c:63:82:6f:0f:0f:e7:76:ed:f3:48:df:8f:34:
         72:a2:f6:92:bb:12:5a:a8:34:fc:43:ff:a8:60:35:c1:57:a1:
         1d:69:ca:d0:50:89:93:37:52:51:71:a9:5a:4e:f9:59:02:bb:
         80:3c:fb:a8:3e:4a:a4:c9:75:f2:27:7e:20:56:59:64:ff:24:
         97:56:03:84:21:22:a2:f1:35:bd:7d:7b:a2:96:c9:01:dd:2d:
         66:85:3b:b6:ea:f5:67:c0:15:b1:3b:f8:4b:33:80:37:e3:65:
         b3:4c:63:fb:17:ea:76:85:f3:9d:2d:e8:73:4e:cb:57:37:f4:
         ef:36:37:76:e0:60:c8:de:64:48:02:bf:fc:64:bf:cf:91:0f:
         3a:9f:a9:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXTYSlKk5BoOPP8jV+rXrvKn6sf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVBNzU3RTQ5QTNFRTYyQkVFNUYzMjE2M0RCQzE1NDI5
OUJERkJBNjAeFw0yNjA2MTkxOTA0NTlaFw0yNzA2MTgxOTA5NTlaMDMxMTAvBgNV
BAMTKEY4RkJENjcxMUIzNThGQkU1NTMwRDI2RUM0RkQ5RjkyMEY5NzVCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6n8lQl2yuAGiXg/vKp9/rqM6
KrIzs21BBHQDWV7SjcsEeJO45zoTUfBo8jPhD0RSV4hF0AzBdjtU+tgahHdC7QD+
taIg6ldZSVhl7j9PzYgoTRmHV6sPTfs3rrnvYny548yIOFktDMgHhbRSGzqY6gQm
P8T/OLoeLFj1WWTpGNCQ/CXMyhBFi5gU5Hfr1G0PDl6gbDuvPTatkSN3X1es81u4
uINIzHBm+NFMI7kb+LjmRnod+/5YSN1PrWJh1P1sx19QceDS78SnlZrRgtmy+CUp
L0iiyrCo/844Qj5IojxJN24fdtxaWBGuZB1DuaUYs5WxDcUP9PtP7aTxsXdrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+PvWcRs1j75VMNJuxP2fkg+XWzMwHwYDVR0j
BBgwFoAU9adX5Jo+5ivuXzIWPbwVQpm9+6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0M5N29FTEN6VzI4RXl1Z0phQVZIVXFoTmVvTjFZbXZNUXlIVE0zRGE3
UWcvMS9GNUE3NTdFNDlBM0VFNjJCRUU1RjMyMTYzREJDMTU0Mjk5QkRGQkE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1QTc1N0U0OUEzRUU2MkJF
RTVGMzIxNjNEQkMxNTQyOTlCREZCQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDOTdvRUxDelcyOEV5dWdKYUFWSFVxaE5lb04xWW12TVF5SFRNM0RhN1FnLzEv
MzEzNzM3MmUzNTMyMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzczMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTSdMA0GCSqGSIb3DQEBCwUAA4IBAQBoXG7DNmXC
Fspe5aG3ZTtNdNhja6gWKmJbDp2SFBt1I0ZZxexNzTQVzKTwQf1+mbu2quErNKto
wJa/UatoQJQDjfuXFoJBvDmlnuPm3pxfBAF0+AbV6nE4nAO2po/oHTsYob3Lk2j9
X827sTAI2mjxHGOCbw8P53bt80jfjzRyovaSuxJaqDT8Q/+oYDXBV6EdacrQUImT
N1JRcalaTvlZAruAPPuoPkqkyXXyJ34gVllk/ySXVgOEISKi8TW9fXuilskB3S1m
hTu26vVnwBWxO/hLM4A342WzTGP7F+p2hfOdLehzTstXN/TvNjd24GDI3mRIAr/8
ZL/PkQ86n6kK
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:30 2026 by rpki-client