Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32322e302f32342d3234203d3e203532363132.roa
File:                     3137372e3132342e32322e302f32342d3234203d3e203532363132.roa (raw, json)
Hash identifier:          kPepkfX92SsHB2LO/dXF8r35+O+WfTNE+cQ9z5tHxvM=
Subject key identifier:   95:29:07:DD:59:31:AC:11:54:90:87:5D:A6:BF:D6:24:6F:55:8A:16
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       5E95F05DF6F56FDDA3C8229B2693A9977CCB2C79
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32322e302f32342d3234203d3e203532363132.roa
Signing time:             Tue 08 Sep 2026 16:39:26 +0000
ROA not before:           Tue 08 Sep 2026 16:34:26 +0000
ROA not after:            Tue 07 Sep 2027 16:39:26 +0000
asID:                     52612
IP address blocks:        177.124.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:95:f0:5d:f6:f5:6f:dd:a3:c8:22:9b:26:93:a9:97:7c:cb:2c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Sep  8 16:34:26 2026 GMT
            Not After : Sep  7 16:39:26 2027 GMT
        Subject: CN=952907DD5931AC115490875DA6BFD6246F558A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:5b:54:71:b0:c7:01:e1:b4:6f:87:f5:14:
                    95:fd:5e:44:fc:fc:5f:3b:2d:e8:ca:cd:20:34:d3:
                    8b:0c:01:c7:ae:e6:64:e8:92:ea:de:6a:db:68:e7:
                    6c:2c:05:85:2c:9d:e9:36:d6:68:94:b1:ca:43:5e:
                    49:ee:7a:92:4c:56:61:8f:40:59:d3:dd:0f:c9:a7:
                    e0:37:df:96:5f:c6:6e:35:ac:40:cf:df:ab:3f:c2:
                    59:82:17:45:66:62:9d:25:33:7c:f7:5b:1a:74:d0:
                    fb:0c:40:df:4e:61:9a:f4:26:4f:90:13:0e:2f:a1:
                    f5:f2:27:49:7a:30:9f:ab:3c:ae:f5:b3:db:2b:dc:
                    cd:c5:47:90:32:91:ba:e7:21:7b:ee:34:c1:9c:14:
                    d5:de:1e:af:28:0d:48:37:09:0f:7b:9c:07:bc:e1:
                    df:89:0e:58:29:c7:68:af:af:70:05:84:5d:cd:62:
                    cb:c5:57:c9:0f:7b:8e:49:77:b9:82:55:95:51:5a:
                    05:11:ef:de:a7:bc:22:17:ab:8c:c5:36:36:d7:f3:
                    74:a6:47:bb:bf:45:a2:a6:a7:3c:6b:39:36:99:44:
                    c7:a8:d0:d1:3f:08:1f:57:61:12:59:89:15:40:be:
                    0e:22:62:06:1f:68:0b:3e:f6:42:ed:de:45:37:47:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:29:07:DD:59:31:AC:11:54:90:87:5D:A6:BF:D6:24:6F:55:8A:16
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32322e302f32342d3234203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:68:fa:ae:a8:7b:1c:4f:15:06:97:b2:53:fa:80:f0:42:
         4e:0d:4c:39:d5:3a:86:05:95:7f:99:3a:8d:19:44:5f:d6:ed:
         1e:42:65:ad:22:a4:a6:46:d7:ee:a1:5b:0b:49:1f:7d:9c:cb:
         23:3a:c4:f8:02:30:25:f9:a1:72:83:41:0d:ac:a8:f9:d2:e3:
         d5:f3:9e:13:9d:19:42:28:3e:9f:ee:d0:66:40:61:76:b0:29:
         91:5b:10:1b:59:48:6c:83:e0:7d:44:5e:8e:88:38:2b:16:42:
         94:b8:00:55:13:02:bd:d5:a1:df:2b:e8:e4:fb:8d:14:a4:d0:
         49:1e:54:96:30:6c:c3:c1:93:ad:91:ce:24:00:95:67:40:3e:
         46:35:92:29:84:31:f3:0b:b6:c1:77:8f:9a:97:49:29:e2:57:
         9a:61:0e:27:89:38:f9:36:be:aa:4e:4d:9f:3b:bd:cd:0b:07:
         f8:b0:c2:c5:e0:4d:c8:f3:cf:0f:ae:3c:ea:e2:b5:ee:53:d7:
         35:5b:34:da:86:7b:69:4d:e5:1b:4d:3d:ee:a8:ae:62:18:8a:
         d4:c2:86:02:95:6d:36:de:9e:77:40:07:a1:a8:3a:85:ef:31:
         e2:2b:c5:67:6b:a8:78:33:c9:7c:dc:40:52:a7:f6:cd:59:4a:
         91:c1:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----