Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231332e302f32342d3234203d3e203631363937.roa
File:                     3230312e372e3231332e302f32342d3234203d3e203631363937.roa (raw, json)
Hash identifier:          PZZGsCql1IU+cNE1qoKU0SyXl8pGYDaNgVU+eaeYPQY=
Subject key identifier:   D1:9C:37:58:51:A9:B5:B8:C5:4E:EE:CC:62:82:F2:B0:74:6F:D8:03
Certificate issuer:       /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial:       639C6BE1553F82FE69C524DE77A5AE579DA00CA1
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231332e302f32342d3234203d3e203631363937.roa
Signing time:             Sat 17 Oct 2026 15:26:11 +0000
ROA not before:           Sat 17 Oct 2026 15:21:11 +0000
ROA not after:            Sat 16 Oct 2027 15:26:11 +0000
asID:                     61697
IP address blocks:        201.7.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9c:6b:e1:55:3f:82:fe:69:c5:24:de:77:a5:ae:57:9d:a0:0c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
        Validity
            Not Before: Oct 17 15:21:11 2026 GMT
            Not After : Oct 16 15:26:11 2027 GMT
        Subject: CN=D19C375851A9B5B8C54EEECC6282F2B0746FD803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:3f:c3:16:0b:2b:61:ae:11:43:75:8b:bd:
                    e6:87:8c:14:10:3c:78:26:12:1f:dd:8b:42:c6:12:
                    65:57:c3:c5:6b:71:2f:d9:82:77:ae:74:00:02:a8:
                    4a:65:e0:97:61:98:17:77:30:4f:12:57:ea:c2:91:
                    dc:4b:d7:18:bf:12:c7:4d:26:66:80:3f:bc:79:92:
                    59:2c:f2:b0:27:df:e6:a8:d4:d2:5d:91:39:a0:65:
                    16:25:a1:57:ab:bb:7c:03:8b:9f:da:7d:cc:34:9a:
                    4a:a0:2d:6f:d6:c1:9d:98:26:d3:7c:ee:64:f0:a1:
                    02:5f:69:b5:cd:78:38:b3:7f:50:b9:41:c6:94:9a:
                    58:88:d1:84:98:92:56:12:2f:1b:5b:ee:96:66:2b:
                    ca:b5:b9:71:be:ba:3a:72:52:c3:5a:ea:41:0c:01:
                    d7:99:21:b8:96:4e:ce:08:db:05:6a:e1:03:9e:07:
                    82:1f:d9:f1:55:35:1b:d1:56:90:8c:29:49:68:62:
                    a3:4e:92:a0:5e:e2:0c:f1:cd:ef:11:60:2f:d7:95:
                    cb:42:cd:be:5c:72:62:2a:6d:eb:a2:b4:a1:05:19:
                    b8:2f:5f:f2:88:bd:a0:d5:17:97:75:95:e2:07:98:
                    6e:44:70:b4:ff:5e:01:3a:e0:b1:d2:b9:09:0b:6e:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:37:58:51:A9:B5:B8:C5:4E:EE:CC:62:82:F2:B0:74:6F:D8:03
            X509v3 Authority Key Identifier:
                keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231332e302f32342d3234203d3e203631363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4c:c6:6f:bb:24:e6:a7:22:1b:0c:f2:bc:97:b0:c9:41:4a:
         19:f4:fe:21:05:38:cd:bc:4b:08:89:27:ff:3d:b6:57:e9:87:
         b0:7e:a4:2c:27:60:11:1d:76:75:e1:59:77:d9:a3:52:d9:b7:
         fa:0b:0f:d4:45:66:79:53:7b:17:9b:cf:e3:74:41:21:ba:0b:
         c0:13:29:d3:ac:32:51:f0:a0:62:de:6d:08:e3:5b:56:89:7d:
         58:37:96:68:4e:18:ea:aa:8c:0a:0b:6f:b8:5c:8d:68:7f:b9:
         95:48:ef:40:77:8f:68:58:2b:4e:27:ed:bb:0f:a6:9b:a3:fa:
         98:51:ba:ed:ff:2b:b8:80:a8:4c:73:3c:d6:ef:76:56:15:dd:
         62:c1:ae:62:dc:ad:a2:58:ce:d5:aa:09:4b:4b:4b:ef:cc:56:
         8f:97:66:ec:b3:b4:86:a7:4e:5f:c5:ee:b8:72:a1:b1:a2:64:
         0a:c9:c4:c5:18:5e:39:b4:fd:19:94:2a:93:a8:b1:89:77:0a:
         27:c7:de:22:aa:0c:19:46:d8:db:83:25:02:6d:8d:54:dd:be:
         21:01:eb:00:93:07:52:ce:61:4f:ba:d7:27:c3:95:ab:46:28:
         d0:10:7f:d1:9b:ac:85:42:29:2a:e9:1d:f1:81:ab:07:e4:24:
         d6:cb:5b:4f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY5xr4VU/gv5pxSTed6WuV52gDKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyODc3MUUxNjc2RTk0NUFDMzEzRTA3NzRBMjNEODc4
QTkyQzNERDAeFw0yNjEwMTcxNTIxMTFaFw0yNzEwMTYxNTI2MTFaMDMxMTAvBgNV
BAMTKEQxOUMzNzU4NTFBOUI1QjhDNTRFRUVDQzYyODJGMkIwNzQ2RkQ4MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrjj/DFgsrYa4RQ3WLveaHjBQQ
PHgmEh/di0LGEmVXw8VrcS/ZgneudAACqEpl4JdhmBd3ME8SV+rCkdxL1xi/EsdN
JmaAP7x5klks8rAn3+ao1NJdkTmgZRYloVeru3wDi5/afcw0mkqgLW/WwZ2YJtN8
7mTwoQJfabXNeDizf1C5QcaUmliI0YSYklYSLxtb7pZmK8q1uXG+ujpyUsNa6kEM
AdeZIbiWTs4I2wVq4QOeB4If2fFVNRvRVpCMKUloYqNOkqBe4gzxze8RYC/XlctC
zb5ccmIqbeuitKEFGbgvX/KIvaDVF5d1leIHmG5EcLT/XgE64LHSuQkLbvUVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0Zw3WFGptbjFTu7MYoLysHRv2AMwHwYDVR0j
BBgwFoAUhSh3HhZ26UWsMT4HdKI9h4qSw90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1NQTWZVUUFiTEVrczlBd0trajdURmZqZlIzUlVLTDQ1eWdtRnk5QUxk
RWgvMC84NTI4NzcxRTE2NzZFOTQ1QUMzMTNFMDc3NEEyM0Q4NzhBOTJDM0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1Mjg3NzFFMTY3NkU5NDVB
QzMxM0UwNzc0QTIzRDg3OEE5MkMzREQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTUE1mVVFBYkxFa3M5QXdLa2o3VEZmamZSM1JVS0w0NXlnbUZ5OUFMZEVoLzAv
MzIzMDMxMmUzNzJlMzIzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM2
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkH1TANBgkqhkiG9w0BAQsFAAOCAQEAqUzGb7sk5qci
GwzyvJewyUFKGfT+IQU4zbxLCIkn/z22V+mHsH6kLCdgER12deFZd9mjUtm3+gsP
1EVmeVN7F5vP43RBIboLwBMp06wyUfCgYt5tCONbVol9WDeWaE4Y6qqMCgtvuFyN
aH+5lUjvQHePaFgrTiftuw+mm6P6mFG67f8ruICoTHM81u92VhXdYsGuYtytoljO
1aoJS0tL78xWj5dm7LO0hqdOX8XuuHKhsaJkCsnExRheObT9GZQqk6ixiXcKJ8fe
IqoMGUbY24MlAm2NVN2+IQHrAJMHUs5hT7rXJ8OVq0Yo0BB/0ZushUIpKukd8YGr
B+Qk1stbTw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 21:47:50 2026 by rpki-client