Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39302e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e39302e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          jRG0uutOaEMBYQ2TV1WmxzxXkUG1uuRO3uXPxjmSFxA=
Subject key identifier:   71:D1:C1:A0:3C:7E:7D:23:CD:31:B2:1F:80:69:A4:54:58:F5:F0:17
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       15A45AB0BF10B7E8E804E367074BAAF2D405A2D2
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39302e302f32332d3233203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:35 +0000
ROA not before:           Tue 11 Aug 2026 12:20:35 +0000
ROA not after:            Tue 10 Aug 2027 12:25:35 +0000
asID:                     262352
IP address blocks:        177.126.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a4:5a:b0:bf:10:b7:e8:e8:04:e3:67:07:4b:aa:f2:d4:05:a2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:35 2026 GMT
            Not After : Aug 10 12:25:35 2027 GMT
        Subject: CN=71D1C1A03C7E7D23CD31B21F8069A45458F5F017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:a1:37:da:46:a4:9a:e9:94:43:15:71:e6:
                    a5:6b:54:e2:47:d9:de:26:ce:ee:af:a0:1f:54:70:
                    2a:9a:0b:a5:eb:e4:ce:5a:63:f4:ca:53:42:fb:8e:
                    47:35:1e:f9:b4:4a:a9:60:5a:2e:35:c8:5f:16:83:
                    58:7b:8c:dd:9b:a9:3f:00:48:24:df:c6:ec:0d:2e:
                    79:31:a7:7f:9a:35:24:35:82:28:7a:78:bf:f6:1c:
                    0f:6c:d6:9d:e8:28:73:97:7c:da:3a:43:b2:d6:56:
                    3b:98:ec:f3:12:3b:bf:5d:1f:af:6f:79:1b:bb:64:
                    e6:dd:dd:42:ce:e4:4b:c5:97:54:81:8f:2f:2d:ab:
                    19:67:64:90:9e:1c:e0:26:a0:3c:59:1b:a3:28:e2:
                    4e:58:aa:5d:cd:91:8e:3c:7d:0e:a8:04:70:85:40:
                    bc:cd:d2:32:25:af:76:7a:f8:34:55:6a:30:a8:b7:
                    97:ef:2f:7a:34:5c:2b:63:4c:56:ba:12:1f:7e:7f:
                    29:b2:6d:5a:44:0c:5c:3a:e7:42:13:86:15:07:4f:
                    c4:b9:04:e1:c5:dd:86:6d:73:a6:50:20:71:72:33:
                    9a:c3:10:c2:5d:e0:79:bb:33:30:88:51:03:07:2a:
                    a4:2a:d3:39:ee:5a:50:50:26:76:1f:37:14:6f:15:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D1:C1:A0:3C:7E:7D:23:CD:31:B2:1F:80:69:A4:54:58:F5:F0:17
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39302e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:70:c6:b6:b8:e0:5e:ce:d6:83:da:1b:2b:89:e3:f4:10:
         08:02:3b:5e:10:9d:f2:f1:42:bc:a9:57:f5:73:3a:e4:11:d3:
         80:95:1f:2d:b6:16:c8:b8:19:4e:b7:c4:27:33:fc:3a:cd:4b:
         c6:e1:99:5c:af:67:a0:c0:e4:c3:ba:b3:69:c8:0d:0a:fd:80:
         6b:f2:0c:3b:c9:28:08:47:08:64:94:de:21:4e:0f:ab:ab:3d:
         b1:8f:c4:f1:e1:2b:a9:44:70:fb:a4:0d:3b:88:98:40:70:b1:
         f1:de:ed:f5:69:e7:21:7c:14:27:79:d6:48:3e:de:f1:5d:50:
         08:d6:dc:91:59:5d:66:f0:be:9f:98:b6:c4:37:3e:1d:6d:f9:
         69:aa:4c:91:7c:55:05:46:08:db:6a:d5:48:0c:2d:fa:06:93:
         ee:24:7d:c8:63:6c:7d:6e:cc:c6:c6:4c:26:24:9a:bd:48:07:
         7d:1e:8b:69:10:e5:16:ba:4b:f0:86:88:4f:c6:0f:a1:d1:2a:
         a5:23:33:2c:a3:3d:38:bd:8d:81:b7:02:28:7e:be:5b:b6:8b:
         7c:04:05:15:82:8d:35:29:93:53:70:16:b8:9e:1e:a4:7d:bf:
         25:81:95:1f:e5:f8:9a:19:15:79:c4:bb:9b:de:65:55:cb:c1:
         04:ad:81:b1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFaRasL8Qt+joBONnB0uq8tQFotIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQw
QTNGN0EwQjAeFw0yNjA4MTExMjIwMzVaFw0yNzA4MTAxMjI1MzVaMDMxMTAvBgNV
BAMTKDcxRDFDMUEwM0M3RTdEMjNDRDMxQjIxRjgwNjlBNDU0NThGNUYwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTqE32kakmumUQxVx5qVrVOJH
2d4mzu6voB9UcCqaC6Xr5M5aY/TKU0L7jkc1Hvm0SqlgWi41yF8Wg1h7jN2bqT8A
SCTfxuwNLnkxp3+aNSQ1gih6eL/2HA9s1p3oKHOXfNo6Q7LWVjuY7PMSO79dH69v
eRu7ZObd3ULO5EvFl1SBjy8tqxlnZJCeHOAmoDxZG6Mo4k5Yql3NkY48fQ6oBHCF
QLzN0jIlr3Z6+DRVajCot5fvL3o0XCtjTFa6Eh9+fymybVpEDFw650IThhUHT8S5
BOHF3YZtc6ZQIHFyM5rDEMJd4Hm7MzCIUQMHKqQq0znuWlBQJnYfNxRvFf39AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUcdHBoDx+fSPNMbIfgGmkVFj18BcwHwYDVR0j
BBgwFoAU4ZP9/Dt3z0f8OvY7MIt7rQo/egswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzAvRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQwQTNGN0EwQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkzRkRGQzNCNzdDRjQ3RkMz
QUY2M0IzMDhCN0JBRDBBM0Y3QTBCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzAvMzEz
NzM3MmUzMTMyMzYyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxflowDQYJKoZIhvcNAQELBQADggEBAI8DcMa2uOBe
ztaD2hsrieP0EAgCO14QnfLxQrypV/VzOuQR04CVHy22Fsi4GU63xCcz/DrNS8bh
mVyvZ6DA5MO6s2nIDQr9gGvyDDvJKAhHCGSU3iFOD6urPbGPxPHhK6lEcPukDTuI
mEBwsfHe7fVp5yF8FCd51kg+3vFdUAjW3JFZXWbwvp+YtsQ3Ph1t+WmqTJF8VQVG
CNtq1UgMLfoGk+4kfchjbH1uzMbGTCYkmr1IB30ei2kQ5Ra6S/CGiE/GD6HRKqUj
MyyjPTi9jYG3Aih+vlu2i3wEBRWCjTUpk1NwFrieHqR9vyWBlR/l+JoZFXnEu5ve
ZVXLwQStgbE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:18:30 2026 by rpki-client