Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3232203d3e203532353837.roa
File:                     3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (raw, json)
Hash identifier:          4AAOmnocLf0VjYCiLcDzi3NuDyNnc+CAAeeV1qH41yM=
Subject key identifier:   71:D6:F3:4B:EB:02:DC:6C:87:02:6E:4F:9D:BB:79:EC:E2:F0:4E:F7
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       038033658781FD43A74F9A30CA8DA1DE306510BF
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3232203d3e203532353837.roa
Signing time:             Thu 16 Apr 2026 00:33:40 +0000
ROA not before:           Thu 16 Apr 2026 00:28:40 +0000
ROA not after:            Thu 15 Apr 2027 00:33:40 +0000
asID:                     52587
IP address blocks:        177.87.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:33:65:87:81:fd:43:a7:4f:9a:30:ca:8d:a1:de:30:65:10:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr 16 00:28:40 2026 GMT
            Not After : Apr 15 00:33:40 2027 GMT
        Subject: CN=71D6F34BEB02DC6C87026E4F9DBB79ECE2F04EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:29:46:b6:3d:fb:f9:18:a9:a6:c3:9b:aa:
                    85:ec:3d:7e:fc:6e:df:81:2c:4a:89:9c:cd:73:58:
                    a0:35:36:57:c1:ce:04:93:d2:f5:da:8d:6d:16:30:
                    c6:91:48:82:99:dd:86:db:3a:6b:3e:5e:94:53:39:
                    a0:4e:74:7a:33:b8:2d:67:1d:e0:00:ca:5b:dc:20:
                    f2:a0:63:a5:a4:d8:76:02:5c:12:a9:99:a4:5a:7f:
                    f4:81:2e:6d:62:7e:68:13:17:e3:68:42:5e:2e:3c:
                    92:49:8a:1e:9f:29:2e:db:fb:1e:ad:33:0c:44:1a:
                    22:c5:63:8f:51:a1:98:72:f9:18:52:07:fe:52:e9:
                    19:a2:a8:e7:e4:c4:af:1c:29:14:9f:08:b7:fe:9a:
                    b7:30:d6:71:da:fa:a3:92:27:f9:26:20:d0:de:23:
                    84:3a:c5:05:d0:34:5d:cb:86:eb:91:7a:7c:2f:0d:
                    e7:07:35:1d:8f:57:99:8d:28:d5:d0:b1:64:ef:d1:
                    55:48:d4:b0:0f:f8:34:48:58:79:f7:e0:23:f4:ad:
                    20:38:77:b3:ec:f9:ff:89:5e:7f:bd:8f:75:52:2f:
                    f7:ff:1f:26:d5:77:15:8a:40:c2:1b:df:ac:3a:0a:
                    a6:d0:da:e4:e1:da:8c:8f:ba:c1:dd:8a:28:f7:ce:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:F3:4B:EB:02:DC:6C:87:02:6E:4F:9D:BB:79:EC:E2:F0:4E:F7
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3232203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:bf:12:9b:dd:0c:d2:6f:72:bb:73:11:6b:55:17:e1:a7:
         02:8f:36:e5:c6:8c:b8:ec:91:f5:f1:6a:fc:07:3b:27:60:43:
         1a:59:64:3b:cd:0f:3d:b1:3b:0a:c3:b4:98:5a:75:f3:77:fb:
         4f:89:c1:cf:40:73:73:33:e6:7b:60:c6:f2:37:ca:2b:80:d2:
         7d:59:5d:6d:54:3c:98:3d:8e:a7:c3:f1:7f:40:1d:b7:97:5b:
         76:c0:35:0d:12:24:11:e3:48:5a:4c:30:a4:68:27:14:44:b2:
         2e:df:0f:2a:22:08:7d:f1:a3:2f:34:5c:d8:21:c9:7e:ca:6b:
         49:a7:98:6d:5f:0e:98:81:eb:ba:7d:aa:77:2f:88:e7:76:af:
         06:93:86:43:8a:20:ba:63:cb:d9:c7:c2:6f:56:6f:b6:d7:6a:
         3f:0d:d6:65:df:87:b8:1c:e3:e4:66:36:3a:4d:bb:f6:b3:22:
         df:7a:e1:75:3d:09:36:27:0f:c7:e5:60:04:d6:d8:79:8f:1d:
         39:2f:a4:40:17:eb:76:70:83:31:42:91:4b:3e:f6:28:84:1c:
         a2:57:82:ac:7c:f5:c1:81:89:bb:7c:34:75:64:ae:f7:31:56:
         fb:96:75:1a:4f:50:03:87:d0:8d:fb:00:7e:24:12:b2:cb:07:
         86:82:22:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA4AzZYeB/UOnT5owyo2h3jBlEL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1
OUVCRUY5NjAeFw0yNjA0MTYwMDI4NDBaFw0yNzA0MTUwMDMzNDBaMDMxMTAvBgNV
BAMTKDcxRDZGMzRCRUIwMkRDNkM4NzAyNkU0RjlEQkI3OUVDRTJGMDRFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrSlGtj37+RippsObqoXsPX78
bt+BLEqJnM1zWKA1NlfBzgST0vXajW0WMMaRSIKZ3YbbOms+XpRTOaBOdHozuC1n
HeAAylvcIPKgY6Wk2HYCXBKpmaRaf/SBLm1ifmgTF+NoQl4uPJJJih6fKS7b+x6t
MwxEGiLFY49RoZhy+RhSB/5S6RmiqOfkxK8cKRSfCLf+mrcw1nHa+qOSJ/kmINDe
I4Q6xQXQNF3LhuuRenwvDecHNR2PV5mNKNXQsWTv0VVI1LAP+DRIWHn34CP0rSA4
d7Ps+f+JXn+9j3VSL/f/HybVdxWKQMIb36w6CqbQ2uTh2oyPusHdiij3zv2tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcdbzS+sC3GyHAm5Pnbt57OLwTvcwHwYDVR0j
BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG
QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzEv
MzEzNzM3MmUzODM3MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVfIMA0GCSqGSIb3DQEBCwUAA4IBAQC1u78Sm90M
0m9yu3MRa1UX4acCjzblxoy47JH18Wr8BzsnYEMaWWQ7zQ89sTsKw7SYWnXzd/tP
icHPQHNzM+Z7YMbyN8orgNJ9WV1tVDyYPY6nw/F/QB23l1t2wDUNEiQR40haTDCk
aCcURLIu3w8qIgh98aMvNFzYIcl+ymtJp5htXw6Ygeu6fap3L4jndq8Gk4ZDiiC6
Y8vZx8JvVm+212o/DdZl34e4HOPkZjY6Tbv2syLfeuF1PQk2Jw/H5WAE1th5jx05
L6RAF+t2cIMxQpFLPvYohByiV4KsfPXBgYm7fDR1ZK73MVb7lnUaT1ADh9CN+wB+
JBKyyweGgiLu
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:28:43 2026 by rpki-client