Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3137372e31302e32342e302f32312d3234203d3e20323632383431.roa
File:                     3137372e31302e32342e302f32312d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          6gl7LV++aF/pKmO/qF7CDjPv+CzNJ2NSGj1NyI22VPc=
Subject key identifier:   3B:FD:E2:E8:01:F8:15:D4:CC:15:9B:10:57:1D:A2:59:EA:89:3D:8E
Certificate issuer:       /CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
Certificate serial:       41C3A5DC4D9B87025605817A0E911BF690C2A39E
Authority key identifier: AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3137372e31302e32342e302f32312d3234203d3e20323632383431.roa
Signing time:             Sat 25 Jul 2026 16:51:42 +0000
ROA not before:           Sat 25 Jul 2026 16:46:42 +0000
ROA not after:            Sat 24 Jul 2027 16:51:42 +0000
asID:                     262841
IP address blocks:        177.10.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 03:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:a5:dc:4d:9b:87:02:56:05:81:7a:0e:91:1b:f6:90:c2:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
        Validity
            Not Before: Jul 25 16:46:42 2026 GMT
            Not After : Jul 24 16:51:42 2027 GMT
        Subject: CN=3BFDE2E801F815D4CC159B10571DA259EA893D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:20:18:19:dd:04:cb:cd:ef:cc:e0:c9:22:
                    b7:1b:94:a9:cd:68:ce:bd:9c:92:94:6e:4e:9f:ec:
                    e6:88:93:84:2c:20:13:31:e4:5e:c2:ef:1d:c8:ea:
                    ea:71:5f:ac:fd:72:1b:a0:f1:28:31:6c:74:05:75:
                    6d:78:d3:50:83:68:c3:d0:1b:07:24:38:b6:97:b4:
                    cf:30:15:29:6d:01:31:a4:80:4f:26:9a:a8:6a:aa:
                    33:ef:01:42:2c:97:53:c6:16:b8:e3:e6:f5:fd:a0:
                    5e:f2:7f:5c:19:ee:d0:b9:98:cf:cc:e0:59:f9:20:
                    ac:09:59:f6:c8:67:60:f5:28:dd:d3:bd:db:b8:5d:
                    0e:5e:9d:88:d9:8f:7c:28:d4:11:fa:66:70:b3:b1:
                    49:72:ad:af:72:5d:25:0e:f2:26:84:f4:6f:4a:b5:
                    78:7f:8f:b2:3c:41:08:f9:9a:d7:49:fe:93:10:62:
                    36:5c:fb:e6:d8:ee:00:a7:03:38:ed:c0:f8:1c:18:
                    b4:c3:a3:0a:aa:9e:1d:4d:db:c6:b8:0d:e8:4d:25:
                    a7:21:e1:1d:66:37:b5:91:24:51:27:21:26:ca:4d:
                    46:7c:47:e1:83:cc:58:02:88:76:e5:44:c6:96:c9:
                    b8:ef:a6:9e:7d:59:cd:44:8d:6d:12:7c:d8:4b:93:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:E2:E8:01:F8:15:D4:CC:15:9B:10:57:1D:A2:59:EA:89:3D:8E
            X509v3 Authority Key Identifier:
                keyid:AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3137372e31302e32342e302f32312d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:6d:5b:fb:f6:ef:8e:9f:56:f9:68:57:22:d8:e1:8f:75:04:
         3f:6c:68:59:e1:38:cf:2c:67:5a:20:f2:7c:5f:f7:d2:bc:88:
         d3:ab:18:49:7d:23:5b:d9:88:d5:96:33:ea:c3:a6:05:7c:65:
         2a:21:51:f3:a8:77:bd:50:f4:83:64:ae:9f:43:b1:ea:36:e3:
         ae:f4:ac:f1:e6:c4:69:c5:ff:a7:0c:ec:35:67:53:4c:1c:4c:
         cf:c2:c0:d9:e5:01:c6:ab:89:43:38:14:8f:35:ed:ed:a7:96:
         d2:c1:08:5d:dd:f8:01:0b:5c:c4:28:73:9a:eb:65:11:6e:9a:
         53:00:b5:85:4a:cc:aa:f8:d6:df:5f:a4:75:75:0d:e4:fc:be:
         48:7e:c4:41:99:40:9d:c1:57:ab:50:c8:bf:3c:04:7c:34:b6:
         5e:06:a3:5a:95:2c:6e:2f:6a:62:58:ab:6f:a6:bf:74:b8:2d:
         1f:8e:bd:23:ca:40:60:7f:e0:68:f8:c9:21:bc:01:42:e1:61:
         c0:cc:93:c4:a8:f7:d6:ae:91:e2:10:73:7e:3c:db:e1:e5:11:
         34:8f:44:6f:6c:42:69:da:21:fb:15:7a:cd:64:b9:1d:e7:52:
         5b:67:d8:34:47:9f:bc:a9:0f:61:ce:de:f7:e4:01:0b:26:7e:
         4f:71:d1:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQcOl3E2bhwJWBYF6DpEb9pDCo54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDOUM0RjlBODY5N0YxMjA4QUM3QkMyQkVEQzEyMUQ1
N0RDRkE5NzAeFw0yNjA3MjUxNjQ2NDJaFw0yNzA3MjQxNjUxNDJaMDMxMTAvBgNV
BAMTKDNCRkRFMkU4MDFGODE1RDRDQzE1OUIxMDU3MURBMjU5RUE4OTNEOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9CAYGd0Ey83vzODJIrcblKnN
aM69nJKUbk6f7OaIk4QsIBMx5F7C7x3I6upxX6z9chug8SgxbHQFdW1401CDaMPQ
GwckOLaXtM8wFSltATGkgE8mmqhqqjPvAUIsl1PGFrjj5vX9oF7yf1wZ7tC5mM/M
4Fn5IKwJWfbIZ2D1KN3Tvdu4XQ5enYjZj3wo1BH6ZnCzsUlyra9yXSUO8iaE9G9K
tXh/j7I8QQj5mtdJ/pMQYjZc++bY7gCnAzjtwPgcGLTDowqqnh1N28a4DehNJach
4R1mN7WRJFEnISbKTUZ8R+GDzFgCiHblRMaWybjvpp59Wc1EjW0SfNhLk4eFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO/3i6AH4FdTMFZsQVx2iWeqJPY4wHwYDVR0j
BBgwFoAUr8nE+ahpfxIIrHvCvtwSHVfc+pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dVN3pieXBXSFNOUnZ4d3FidkczQm01Q0ZSNHF1ZGZMY2VvZ0RYYXFB
M00vMC9BRkM5QzRGOUE4Njk3RjEyMDhBQzdCQzJCRURDMTIxRDU3RENGQTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzlDNEY5QTg2OTdGMTIw
OEFDN0JDMkJFREMxMjFENTdEQ0ZBOTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHVTd6YnlwV0hTTlJ2eHdxYnZHM0JtNUNGUjRxdWRmTGNlb2dEWGFxQTNNLzAv
MzEzNzM3MmUzMTMwMmUzMjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQoYMA0GCSqGSIb3DQEBCwUAA4IBAQDFbVv79u+O
n1b5aFci2OGPdQQ/bGhZ4TjPLGdaIPJ8X/fSvIjTqxhJfSNb2YjVljPqw6YFfGUq
IVHzqHe9UPSDZK6fQ7HqNuOu9Kzx5sRpxf+nDOw1Z1NMHEzPwsDZ5QHGq4lDOBSP
Ne3tp5bSwQhd3fgBC1zEKHOa62URbppTALWFSsyq+NbfX6R1dQ3k/L5IfsRBmUCd
wVerUMi/PAR8NLZeBqNalSxuL2piWKtvpr90uC0fjr0jykBgf+Bo+MkhvAFC4WHA
zJPEqPfWrpHiEHN+PNvh5RE0j0RvbEJp2iH7FXrNZLkd51JbZ9g0R5+8qQ9hzt73
5AELJn5PcdFf
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:33:40 2026 by rpki-client