Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133342e302f32342d3234203d3e20323735373235.roa
File:                     3137372e32332e3133342e302f32342d3234203d3e20323735373235.roa (raw, json)
Hash identifier:          7i5k6Z9OYi0pl7a/Qiw+mQ11o7hWF1lWpiBHgiUfnYo=
Subject key identifier:   95:BD:EB:FE:DA:D3:93:FD:70:88:32:87:B8:78:33:C2:F0:FC:75:48
Certificate issuer:       /CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Certificate serial:       14391677895DD199BF60D48BD32609E8BCAC24E6
Authority key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133342e302f32342d3234203d3e20323735373235.roa
Signing time:             Wed 02 Sep 2026 18:04:34 +0000
ROA not before:           Wed 02 Sep 2026 17:59:34 +0000
ROA not after:            Wed 01 Sep 2027 18:04:34 +0000
asID:                     275725
IP address blocks:        177.23.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
                          rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:39:16:77:89:5d:d1:99:bf:60:d4:8b:d3:26:09:e8:bc:ac:24:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
        Validity
            Not Before: Sep  2 17:59:34 2026 GMT
            Not After : Sep  1 18:04:34 2027 GMT
        Subject: CN=95BDEBFEDAD393FD70883287B87833C2F0FC7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:eb:90:e1:b2:24:f6:06:81:92:71:3a:3a:
                    d2:a4:89:a1:25:ea:85:ea:fa:67:f2:0b:8d:fd:95:
                    b3:d4:72:8c:7d:64:54:de:12:b6:95:2a:f5:cc:a3:
                    c6:88:92:aa:1e:3f:3c:4b:fa:45:1f:ef:5f:ce:87:
                    08:78:92:03:2e:db:9d:fc:6f:57:e3:a0:e6:5a:4e:
                    d9:ab:b7:80:4e:1d:cf:2b:a0:15:44:d2:4e:cf:67:
                    40:f8:87:a6:20:65:e3:95:2c:8f:4f:aa:5a:f2:f1:
                    23:6a:58:b3:3b:4c:7a:66:1d:1b:19:b7:87:a8:0a:
                    e3:62:4d:6e:8c:5e:15:56:1a:bf:31:8e:73:2f:48:
                    b7:ab:62:b9:d3:33:05:c2:c5:da:4e:22:11:81:8a:
                    5d:e6:7a:23:41:f8:49:3a:0a:b2:77:e2:e9:ea:33:
                    83:c7:f0:b5:65:cf:12:18:09:61:46:19:de:00:5a:
                    fe:1e:00:e1:45:8c:c8:47:14:ba:2b:6a:03:10:1b:
                    c5:83:43:85:98:44:f1:5f:d6:53:2a:4b:7e:fa:7c:
                    0d:1a:16:de:8b:4e:21:6b:63:7c:94:ad:d8:67:f6:
                    a6:65:28:6d:1e:3b:4c:65:14:62:c8:a6:7e:d3:11:
                    88:24:9d:e1:87:3b:10:8a:10:9c:40:40:fa:22:00:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BD:EB:FE:DA:D3:93:FD:70:88:32:87:B8:78:33:C2:F0:FC:75:48
            X509v3 Authority Key Identifier:
                keyid:0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133342e302f32342d3234203d3e20323735373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:09:f8:e0:c0:ea:72:0d:84:a9:e4:5f:42:de:a5:aa:0d:
         59:ef:d1:a2:cf:74:ed:de:05:5b:6d:b5:e7:7f:5a:74:d1:13:
         a0:9c:1a:fd:74:b7:b0:89:97:02:7d:20:04:80:70:b5:72:42:
         3e:2b:4d:af:6f:ae:43:d7:71:10:d2:15:cc:4a:78:ea:81:e0:
         44:4b:59:12:47:7c:10:c6:ff:1f:21:5e:7f:2e:f8:1b:e5:58:
         ed:ac:d5:ca:6e:3a:93:cc:fd:87:45:36:43:10:73:c5:cc:38:
         3e:bc:0d:b1:c5:6c:7d:64:81:62:9a:c3:70:e4:95:fd:18:7c:
         b9:cf:18:3c:12:10:0b:30:cb:ad:25:78:5a:bc:b3:f7:39:b8:
         ff:e0:64:38:53:4d:db:4d:21:f8:eb:61:34:19:f6:1e:66:bf:
         32:34:f9:1d:1c:85:70:c8:2c:3e:ff:c0:a9:0a:55:61:ea:4e:
         36:76:26:f8:e2:b6:83:6b:63:10:fa:95:64:82:0c:bb:a3:83:
         8e:81:8f:a7:b9:56:c3:d4:c8:59:eb:ab:28:f7:47:49:83:cd:
         10:00:73:e0:e1:85:ba:85:cb:bc:06:1c:c1:81:5e:92:27:ad:
         ef:87:6c:0c:05:9f:32:51:ea:fd:67:09:df:54:1c:7e:b4:5d:
         cd:7b:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:10:56 2026 by rpki-client