Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa
File:                     3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          73X6+C3niaxUgWh9MdRoUyOvtN9K7TdwSbZsj/909rg=
Subject key identifier:   E8:A2:F2:83:C1:7D:AF:55:53:94:02:6E:E2:97:D5:10:84:06:27:28
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       149C46F0F8F7E92BAF64CC4CD480DFADB39A2CEA
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa
Signing time:             Wed 20 May 2026 13:30:51 +0000
ROA not before:           Wed 20 May 2026 13:25:51 +0000
ROA not after:            Wed 19 May 2027 13:30:51 +0000
asID:                     263614
IP address blocks:        177.23.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Jun 2026 20:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9c:46:f0:f8:f7:e9:2b:af:64:cc:4c:d4:80:df:ad:b3:9a:2c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: May 20 13:25:51 2026 GMT
            Not After : May 19 13:30:51 2027 GMT
        Subject: CN=E8A2F283C17DAF555394026EE297D51084062728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:b1:48:ac:53:b9:cb:fb:19:db:b4:ee:17:
                    7b:39:67:ac:13:92:e2:66:86:1d:d8:d5:08:6a:c8:
                    aa:25:eb:76:fe:5c:bd:bf:c0:22:e7:53:1e:86:f0:
                    8d:99:a5:44:30:b1:0b:7d:d9:06:8d:2d:1c:20:03:
                    05:2c:4d:9c:2a:9d:84:d5:99:3b:a8:b5:ab:ba:7a:
                    5b:dd:7e:3a:4a:82:4c:74:7f:39:02:65:c2:07:3d:
                    f5:18:cf:c8:4d:ee:27:7a:7e:5f:06:e9:6d:92:25:
                    b2:88:84:1f:55:ad:13:94:9e:8b:76:91:d8:bd:18:
                    73:bd:2c:60:0e:7a:ab:03:db:c7:b1:5d:21:67:b6:
                    96:52:3f:16:9d:5b:0a:b7:b7:3a:b5:5b:55:3c:99:
                    ba:31:00:d1:59:86:62:59:ca:49:3a:ce:f2:df:9e:
                    b5:ae:1a:fc:b1:48:9c:ce:f2:14:5d:aa:58:91:62:
                    13:61:af:f8:2c:f9:f1:88:d1:2d:9a:6f:71:c3:ff:
                    1f:16:76:b1:8d:87:6a:1b:5a:a4:6e:78:47:48:e5:
                    c2:f1:66:25:d4:8f:7e:98:01:70:8f:e9:48:0b:e1:
                    b7:c4:3d:f1:39:03:c1:a2:fb:bc:cf:35:9d:76:a8:
                    d1:70:86:47:d7:3e:90:12:40:34:02:cf:fa:61:97:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:F2:83:C1:7D:AF:55:53:94:02:6E:E2:97:D5:10:84:06:27:28
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:e3:5c:d4:a0:38:1c:54:67:23:44:42:31:bc:99:94:68:29:
         5c:1e:58:58:bc:51:08:37:f6:58:19:b5:98:97:13:ea:06:eb:
         93:e9:7e:2b:70:4e:53:a8:7c:8d:71:c7:ef:97:b5:89:95:41:
         71:b3:94:ca:2c:e4:8e:91:f8:27:be:eb:bb:d7:bc:bc:24:17:
         45:c9:35:55:94:7c:f9:2b:90:55:ae:1e:65:ae:cf:1f:be:59:
         6f:34:62:23:6f:01:f7:43:f2:20:7d:af:f1:b8:09:b8:8a:f5:
         25:93:88:7d:10:4b:a3:a7:1f:3e:0d:38:89:59:5e:e3:5d:00:
         96:c5:9d:39:91:18:42:7e:09:ae:48:00:7e:3c:ab:4b:70:b8:
         c3:b3:a3:ef:f4:ec:d9:83:ca:b3:d9:79:34:a7:16:1a:36:b3:
         12:f3:41:55:a9:46:f9:74:3a:b4:54:37:3c:2f:6c:fb:66:ae:
         73:d6:4f:27:f0:78:29:12:ac:db:0d:81:6b:ff:ec:a4:3d:7d:
         62:9c:7e:4b:2b:dd:d2:71:c1:83:b7:ba:ab:74:e7:51:32:c6:
         5a:2b:29:82:b0:71:33:d7:87:0c:cf:7b:97:0e:b3:9e:db:21:
         a9:4b:f5:6b:48:78:1e:d8:19:e2:1b:0d:e1:a0:b5:e1:19:21:
         1f:e4:9c:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFJxG8Pj36SuvZMxM1IDfrbOaLOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1M0UyMEE1NjAyNEFGMzQ0MjU3MzA2N0I3NEFDQThC
NUJBOUEyMTAeFw0yNjA1MjAxMzI1NTFaFw0yNzA1MTkxMzMwNTFaMDMxMTAvBgNV
BAMTKEU4QTJGMjgzQzE3REFGNTU1Mzk0MDI2RUUyOTdENTEwODQwNjI3MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XrFIrFO5y/sZ27TuF3s5Z6wT
kuJmhh3Y1QhqyKol63b+XL2/wCLnUx6G8I2ZpUQwsQt92QaNLRwgAwUsTZwqnYTV
mTuotau6elvdfjpKgkx0fzkCZcIHPfUYz8hN7id6fl8G6W2SJbKIhB9VrROUnot2
kdi9GHO9LGAOeqsD28exXSFntpZSPxadWwq3tzq1W1U8mboxANFZhmJZykk6zvLf
nrWuGvyxSJzO8hRdqliRYhNhr/gs+fGI0S2ab3HD/x8WdrGNh2obWqRueEdI5cLx
ZiXUj36YAXCP6UgL4bfEPfE5A8Gi+7zPNZ12qNFwhkfXPpASQDQCz/phlwTTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6KLyg8F9r1VTlAJu4pfVEIQGJygwHwYDVR0j
BBgwFoAU5FPiClYCSvNEJXMGe3SsqLW6miEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC9FNDUzRTIwQTU2MDI0QUYzNDQyNTczMDY3Qjc0QUNBOEI1QkE5QTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0NTNFMjBBNTYwMjRBRjM0
NDI1NzMwNjdCNzRBQ0E4QjVCQTlBMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzEzNzM3MmUzMjMzMmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2wwDQYJKoZIhvcNAQELBQADggEBALzjXNSg
OBxUZyNEQjG8mZRoKVweWFi8UQg39lgZtZiXE+oG65PpfitwTlOofI1xx++XtYmV
QXGzlMos5I6R+Ce+67vXvLwkF0XJNVWUfPkrkFWuHmWuzx++WW80YiNvAfdD8iB9
r/G4CbiK9SWTiH0QS6OnHz4NOIlZXuNdAJbFnTmRGEJ+Ca5IAH48q0twuMOzo+/0
7NmDyrPZeTSnFho2sxLzQVWpRvl0OrRUNzwvbPtmrnPWTyfweCkSrNsNgWv/7KQ9
fWKcfksr3dJxwYO3uqt051EyxlorKYKwcTPXhwzPe5cOs57bIalL9WtIeB7YGeIb
DeGgteEZIR/knKM=
-----END CERTIFICATE-----
Generated at Tue Jun 16 08:14:39 2026 by rpki-client