Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          hOqUpF9qzlKHgg3F38xyoj0j/dr7+4lNcj9K8j/BcD0=
Subject key identifier:   AA:1C:66:0C:45:82:4C:4F:03:75:1E:C6:5F:76:72:95:94:AA:D0:9C
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       0E88CCC55D6EFD37D6442008CD3C8E6BA87DE2ED
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:36 +0000
ROA not before:           Tue 11 Aug 2026 12:20:36 +0000
ROA not after:            Tue 10 Aug 2027 12:25:36 +0000
asID:                     262352
IP address blocks:        177.126.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:88:cc:c5:5d:6e:fd:37:d6:44:20:08:cd:3c:8e:6b:a8:7d:e2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:36 2026 GMT
            Not After : Aug 10 12:25:36 2027 GMT
        Subject: CN=AA1C660C45824C4F03751EC65F76729594AAD09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:a4:11:cc:e5:ef:d8:79:41:cd:f8:e4:1c:
                    85:38:e3:6c:79:b7:a5:e6:58:31:91:67:22:3b:3a:
                    db:52:71:ce:8b:7f:b8:4d:84:d0:96:d3:56:02:bc:
                    a8:37:d7:c0:c3:a0:f7:36:51:d1:c5:3d:ab:30:e5:
                    25:b6:37:1b:44:ef:c1:a1:54:5d:e7:47:5c:2a:9c:
                    2c:aa:52:22:3e:63:f4:b7:ec:ed:e4:c2:5c:41:74:
                    ef:5f:08:20:3e:00:b2:bc:df:42:f3:3a:25:0a:02:
                    8b:b5:cc:c0:c7:17:fa:47:23:5e:ef:f3:c9:d4:29:
                    a2:2f:9f:8b:03:ea:6a:3b:43:65:ae:18:53:68:21:
                    93:c4:fa:c2:00:c1:1b:02:e7:63:fe:71:d6:ec:eb:
                    27:77:a4:db:e4:40:ba:95:e5:fa:47:ba:41:a4:25:
                    2b:32:b1:3d:41:67:60:7f:8c:b2:7d:de:5f:2e:fa:
                    45:2c:34:b6:4d:4d:f4:3f:3b:2d:0c:d4:f9:5d:de:
                    e4:0d:10:2d:bd:d7:c1:a5:aa:44:47:f6:86:f1:fa:
                    1c:1b:cd:07:3b:c2:f0:d6:fe:19:b6:3c:bb:af:82:
                    f5:58:39:e7:6b:fd:c1:3f:4f:c0:fa:1d:e1:3d:3b:
                    2a:f3:de:dc:6a:66:0e:fe:f6:f0:a4:9a:96:e4:29:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:66:0C:45:82:4C:4F:03:75:1E:C6:5F:76:72:95:94:AA:D0:9C
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:2e:92:6c:26:c3:c9:2b:01:13:c2:22:a7:f5:b7:09:1a:00:
         ce:45:8a:26:40:f4:a9:2e:ce:94:b0:8a:0a:07:15:d6:d5:02:
         c3:db:19:23:f2:e0:3a:5c:2d:0c:c0:d3:04:40:98:dd:f2:68:
         7f:01:98:42:7e:e8:0c:31:a5:1c:8c:91:41:9e:ec:d8:0c:20:
         0b:26:db:22:ca:9e:3f:11:96:39:a8:48:a2:e0:c4:0b:53:78:
         ab:39:8f:e2:b4:0f:d6:c9:45:36:2d:3a:15:e6:fb:78:0e:bf:
         eb:09:a1:bd:cc:dd:46:bf:b1:69:f7:33:1b:69:cb:51:f5:f7:
         91:32:3c:b7:11:6e:8b:c4:f6:a7:7d:bb:b9:34:3d:d7:d4:d2:
         1f:c2:8d:25:69:1e:2a:57:e6:88:ed:06:bb:35:65:d7:a2:de:
         f6:d4:d4:9a:66:7b:d0:7f:69:22:85:47:2d:5e:2f:cc:bf:ef:
         2a:6f:9c:fc:3b:f6:8f:7f:f7:7e:e9:65:92:d6:c5:57:04:64:
         bc:3c:ea:0e:66:8d:72:20:90:81:67:03:bc:45:bd:c9:ca:c6:
         3f:77:4d:7b:fa:70:c7:dc:45:aa:87:c1:70:83:e7:ec:60:ef:
         03:5f:b0:ee:50:7d:c3:ba:a5:d3:32:72:59:fd:30:de:7a:17:
         96:eb:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:20:16 2026 by rpki-client