Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          KIw6Z+w+JTUywU6E5/0aC0mhMmOCn3i0sV4zoKrYV2M=
Subject key identifier:   97:91:4B:4B:09:39:E7:2F:75:87:88:2E:08:10:4E:86:BA:C0:6E:4D
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       310B993D9CA86E6EDFF64B5ECA5E3A340EFD8E
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:20 +0000
ROA not before:           Wed 10 Jun 2026 14:22:20 +0000
ROA not after:            Wed 09 Jun 2027 14:27:20 +0000
asID:                     262444
IP address blocks:        177.52.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:99:3d:9c:a8:6e:6e:df:f6:4b:5e:ca:5e:3a:34:0e:fd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:20 2026 GMT
            Not After : Jun  9 14:27:20 2027 GMT
        Subject: CN=97914B4B0939E72F7587882E08104E86BAC06E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:26:c0:22:e4:58:2a:f2:f0:6d:70:84:59:11:
                    63:e2:29:77:0b:ac:8f:ee:91:f2:c4:45:54:4b:9a:
                    57:59:8a:1b:73:2a:06:ff:45:2f:57:c4:d3:ac:21:
                    c6:a5:a3:bb:39:8a:99:c2:ce:e7:b4:a5:ae:ee:d0:
                    d2:a5:64:2e:ba:b6:36:18:b2:57:97:ee:c7:b2:00:
                    ca:14:d3:28:93:00:a5:9a:f7:aa:83:0c:7e:c4:55:
                    da:e9:5c:89:11:08:90:36:60:3b:df:5a:14:13:35:
                    bc:8b:31:98:4e:04:b2:3a:ee:53:5c:69:c0:74:82:
                    bc:17:2a:73:b3:92:a1:79:8c:ab:a0:dd:d8:33:6c:
                    ff:b3:1d:15:0f:a3:69:9d:61:fc:e6:2d:4d:4b:6d:
                    0d:5b:24:c6:83:8a:7b:b2:00:de:8d:ae:16:4e:1f:
                    33:e9:34:58:10:96:03:ab:af:b6:08:dc:d3:54:29:
                    07:ff:2f:1c:d5:78:88:88:eb:3a:55:96:b2:c4:0f:
                    c9:7c:5c:58:91:8f:de:48:68:54:ba:df:7b:e2:ad:
                    30:dd:49:6c:3e:c2:97:7d:50:49:29:1e:d1:07:44:
                    7a:83:67:a6:cd:d4:c8:bd:57:c8:88:df:1a:ae:0a:
                    84:4d:a0:6c:54:ae:79:25:2d:23:1a:8b:3b:50:9f:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:91:4B:4B:09:39:E7:2F:75:87:88:2E:08:10:4E:86:BA:C0:6E:4D
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3131302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:0f:b5:55:e0:2a:3f:e8:9f:dc:b3:5d:b1:47:16:40:ad:
         37:c4:1b:25:5a:a1:6d:94:86:53:d6:fb:45:16:d5:98:52:c2:
         c3:2f:1c:56:8a:26:78:5e:ee:9a:7e:ec:2c:fa:bc:3d:58:61:
         fc:9b:01:28:e1:ca:f2:52:a6:a0:c9:51:c1:24:a1:f9:00:d6:
         63:b9:dc:77:aa:3d:b2:bc:bf:8f:9f:15:5c:e4:28:00:96:93:
         97:7d:b5:35:07:80:0e:fa:76:4b:85:7f:bc:e9:92:f1:f2:20:
         00:3c:10:e4:a9:f8:16:e1:61:ff:26:5a:0f:19:01:22:bc:40:
         c7:35:65:ee:26:44:5b:af:39:44:cd:1e:a8:78:b4:ec:97:bb:
         e6:78:4c:dc:30:a8:f3:48:61:0c:05:48:71:4d:36:b4:1c:07:
         17:89:bb:aa:d8:25:5e:12:ee:17:1c:27:a5:50:13:bc:b8:72:
         75:e3:72:b8:5f:47:62:ba:39:73:99:57:45:68:41:d0:f8:3c:
         35:79:73:50:de:85:9f:5d:4e:ba:d6:ea:01:26:67:0f:91:d8:
         e1:1b:a9:aa:ae:99:61:07:88:27:39:3d:cc:29:ac:89:d8:c4:
         1f:d5:6d:95:d8:4e:0e:ef:65:7c:ad:23:b2:10:ff:6f:fe:90:
         a5:de:bb:f8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITMQuZPZyobm7f9kteyl46NA79jjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAw
N0EyQjM1MB4XDTI2MDYxMDE0MjIyMFoXDTI3MDYwOTE0MjcyMFowMzExMC8GA1UE
AxMoOTc5MTRCNEIwOTM5RTcyRjc1ODc4ODJFMDgxMDRFODZCQUMwNkU0RDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPYmwCLkWCry8G1whFkRY+Ipdwus
j+6R8sRFVEuaV1mKG3MqBv9FL1fE06whxqWjuzmKmcLO57Slru7Q0qVkLrq2Nhiy
V5fux7IAyhTTKJMApZr3qoMMfsRV2ulciREIkDZgO99aFBM1vIsxmE4EsjruU1xp
wHSCvBcqc7OSoXmMq6Dd2DNs/7MdFQ+jaZ1h/OYtTUttDVskxoOKe7IA3o2uFk4f
M+k0WBCWA6uvtgjc01QpB/8vHNV4iIjrOlWWssQPyXxcWJGP3khoVLrfe+KtMN1J
bD7Cl31QSSke0QdEeoNnps3UyL1XyIjfGq4KhE2gbFSueSUtIxqLO1CfsnsCAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBSXkUtLCTnnL3WHiC4IEE6GusBuTTAfBgNVHSME
GDAWgBS4g1KSGIQPRx45jPj1hbcdAHorNTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8yUWVkWnRIUzl5cU42M28xcnNUQUxuWGFCYW1OdnQ5bUxBZ2VCYWdONVBu
NC8xL0I4ODM1MjkyMTg4NDBGNDcxRTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQjg4MzUyOTIxODg0MEY0NzFF
Mzk4Q0Y4RjU4NUI3MUQwMDdBMkIzNS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQbjQvMS8z
MTM3MzcyZTM1MzIyZTMxMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbE0bjANBgkqhkiG9w0BAQsFAAOCAQEAU+kPtVXg
Kj/on9yzXbFHFkCtN8QbJVqhbZSGU9b7RRbVmFLCwy8cVoomeF7umn7sLPq8PVhh
/JsBKOHK8lKmoMlRwSSh+QDWY7ncd6o9sry/j58VXOQoAJaTl321NQeADvp2S4V/
vOmS8fIgADwQ5Kn4FuFh/yZaDxkBIrxAxzVl7iZEW685RM0eqHi07Je75nhM3DCo
80hhDAVIcU02tBwHF4m7qtglXhLuFxwnpVATvLhydeNyuF9HYro5c5lXRWhB0Pg8
NXlzUN6Fn11OutbqASZnD5HY4Rupqq6ZYQeIJzk9zCmsidjEH9VtldhODu9lfK0j
shD/b/6Qpd67+A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:27:03 2026 by rpki-client