Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131352e302f32342d3234203d3e203532363030.roa
File:                     3137372e3133372e3131352e302f32342d3234203d3e203532363030.roa (raw, json)
Hash identifier:          4n2gC36nZlnwb+EnwsRQmsjT+IJ1tvUg/6CjJ79HGj0=
Subject key identifier:   FD:D9:D6:4F:3C:95:16:BD:7F:45:5E:DB:E0:DA:3B:A3:87:53:DB:5F
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       5908097D6F75367EE0A15AB77315768A3744DE
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131352e302f32342d3234203d3e203532363030.roa
Signing time:             Mon 19 Oct 2026 12:59:45 +0000
ROA not before:           Mon 19 Oct 2026 12:54:45 +0000
ROA not after:            Mon 18 Oct 2027 12:59:45 +0000
asID:                     52600
IP address blocks:        177.137.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 05:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:08:09:7d:6f:75:36:7e:e0:a1:5a:b7:73:15:76:8a:37:44:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Oct 19 12:54:45 2026 GMT
            Not After : Oct 18 12:59:45 2027 GMT
        Subject: CN=FDD9D64F3C9516BD7F455EDBE0DA3BA38753DB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:48:31:41:13:e9:03:d8:57:7a:8c:b1:6d:
                    3c:da:a7:76:ba:9a:47:78:f1:9e:6c:bb:a1:14:40:
                    5c:8a:99:1d:7a:d4:91:36:b9:91:2a:04:63:e3:ba:
                    1f:f2:2f:eb:bc:3f:1c:fb:3c:2b:b3:0c:63:86:2b:
                    86:ac:94:36:53:8c:43:11:23:bf:65:be:16:9c:18:
                    ab:a5:fc:e7:8d:df:00:6d:ad:b3:68:bb:c8:84:a3:
                    a1:ea:ec:82:15:b4:2a:35:d3:58:2a:53:e9:50:a9:
                    e9:1d:74:5d:49:c6:b3:f9:00:94:30:70:2e:d7:d3:
                    5c:74:96:59:77:66:e7:02:b8:2e:1c:5e:db:1b:7d:
                    2b:0a:e8:2d:72:b9:f0:da:1d:05:a8:28:3d:2e:e6:
                    9c:9d:d1:9b:d5:f7:b9:61:c2:56:57:bd:70:3a:d8:
                    72:08:bf:53:f7:6a:4b:a3:2b:ad:d7:b6:3b:df:98:
                    95:d3:e6:8a:89:36:cb:3a:32:87:26:ab:46:37:f5:
                    78:35:87:c6:c9:a2:1a:f5:dc:24:ce:1b:4f:d4:f7:
                    8d:e7:78:3f:b0:c2:5d:59:6e:5d:88:26:89:e8:2e:
                    1e:70:fa:37:c5:d2:0e:4b:9c:b3:62:7d:c8:93:21:
                    97:4f:43:bd:9c:0c:77:4f:21:54:dd:41:6a:01:df:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D9:D6:4F:3C:95:16:BD:7F:45:5E:DB:E0:DA:3B:A3:87:53:DB:5F
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131352e302f32342d3234203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:38:e6:f3:23:54:a6:56:94:27:2e:a2:b8:1c:31:d0:d9:94:
         0c:84:df:eb:61:97:e4:c7:51:26:d3:f3:02:44:d9:81:53:68:
         f0:b7:d6:7d:c0:f9:7e:94:4b:09:84:84:c2:d1:90:94:b3:d2:
         3c:6a:1e:85:bd:2f:cf:0a:4c:cc:7a:a7:52:75:91:0f:c2:08:
         e7:23:a9:91:39:f4:f3:e0:83:8e:a2:ac:61:22:49:2d:85:b6:
         ff:c1:5c:4d:41:8b:1d:b0:c1:f9:2e:3f:31:90:6e:80:7e:98:
         ce:86:cb:93:8a:0b:3a:c2:b8:87:61:75:ad:27:a3:10:35:39:
         38:c3:cf:b4:7e:ee:c1:4e:82:3b:b9:88:e6:af:cf:e9:61:73:
         28:f3:59:a3:66:6f:fa:eb:da:fc:8c:3a:1c:a0:df:a4:2e:f3:
         27:f3:67:34:66:b8:3c:80:84:5d:10:c2:bb:3c:c2:9a:76:8a:
         2e:02:7f:dc:17:cc:2c:da:34:9e:47:4b:93:43:c7:2b:b6:f6:
         50:c4:b1:f6:15:c7:b3:de:de:db:0e:35:25:0a:e5:b7:c1:5f:
         19:48:e2:7c:11:ca:9f:6c:82:91:4a:e5:22:09:eb:2d:58:cf:
         5a:f7:be:f9:99:4a:6a:68:58:c1:c8:66:e1:27:e1:2f:b5:d3:
         fe:68:d7:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITWQgJfW91Nn7goVq3cxV2ijdE3jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyOUVENEQyRDcyQzQ2NUQ1REExMUUyMjU3NkFFRDAzNzEw
OUZDQkQwMB4XDTI2MTAxOTEyNTQ0NVoXDTI3MTAxODEyNTk0NVowMzExMC8GA1UE
AxMoRkREOUQ2NEYzQzk1MTZCRDdGNDU1RURCRTBEQTNCQTM4NzUzREI1RjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdHSDFBE+kD2Fd6jLFtPNqndrqa
R3jxnmy7oRRAXIqZHXrUkTa5kSoEY+O6H/Iv67w/HPs8K7MMY4YrhqyUNlOMQxEj
v2W+FpwYq6X8543fAG2ts2i7yISjoersghW0KjXTWCpT6VCp6R10XUnGs/kAlDBw
LtfTXHSWWXdm5wK4Lhxe2xt9KwroLXK58NodBagoPS7mnJ3Rm9X3uWHCVle9cDrY
cgi/U/dqS6Mrrde2O9+YldPmiok2yzoyhyarRjf1eDWHxsmiGvXcJM4bT9T3jed4
P7DCXVluXYgmieguHnD6N8XSDkucs2J9yJMhl09DvZwMd08hVN1BagHfG+ECAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBT92dZPPJUWvX9FXtvg2jujh1PbXzAfBgNVHSME
GDAWgBQp7U0tcsRl1doR4iV2rtA3EJ/L0DAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85eE5FV2poY2l2cjN1QzU0a1o1R29reGlYY3JXTDRidzhqUzlYRFBHajUy
bi8wLzI5RUQ0RDJENzJDNDY1RDVEQTExRTIyNTc2QUVEMDM3MTA5RkNCRDAuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMjlFRDREMkQ3MkM0NjVENURB
MTFFMjI1NzZBRUQwMzcxMDlGQ0JEMC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1Mm4vMC8z
MTM3MzcyZTMxMzMzNzJlMzEzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUz
MjM2MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALGJczANBgkqhkiG9w0BAQsFAAOCAQEAdTjm8yNU
plaUJy6iuBwx0NmUDITf62GX5MdRJtPzAkTZgVNo8LfWfcD5fpRLCYSEwtGQlLPS
PGoehb0vzwpMzHqnUnWRD8II5yOpkTn08+CDjqKsYSJJLYW2/8FcTUGLHbDB+S4/
MZBugH6YzobLk4oLOsK4h2F1rSejEDU5OMPPtH7uwU6CO7mI5q/P6WFzKPNZo2Zv
+uva/Iw6HKDfpC7zJ/NnNGa4PICEXRDCuzzCmnaKLgJ/3BfMLNo0nkdLk0PHK7b2
UMSx9hXHs97e2w41JQrlt8FfGUjifBHKn2yCkUrlIgnrLVjPWve++ZlKamhYwchm
4SfhL7XT/mjXXQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:25:16 2026 by rpki-client