Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa
File:                     3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa (raw, json)
Hash identifier:          qoAOH4SX+qHHXZ4+BgKpXxNWRjjZq3l4DtLzctw3JWk=
Subject key identifier:   F0:C9:57:0B:A3:6D:04:AB:67:9B:E0:5B:27:E8:81:D8:9D:2A:3D:0B
Certificate issuer:       /CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
Certificate serial:       254C185199845082CF30E7700D9C63D07FB04182
Authority key identifier: C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa
Signing time:             Fri 04 Sep 2026 19:48:59 +0000
ROA not before:           Fri 04 Sep 2026 19:43:59 +0000
ROA not after:            Fri 03 Sep 2027 19:48:59 +0000
asID:                     270751
IP address blocks:        177.12.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl
                          rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 13:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:18:51:99:84:50:82:cf:30:e7:70:0d:9c:63:d0:7f:b0:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
        Validity
            Not Before: Sep  4 19:43:59 2026 GMT
            Not After : Sep  3 19:48:59 2027 GMT
        Subject: CN=F0C9570BA36D04AB679BE05B27E881D89D2A3D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:1e:5e:08:d8:08:41:04:31:29:c6:bd:f9:
                    3f:50:fd:66:df:30:15:b9:a3:4c:cb:06:4e:7b:7d:
                    2e:42:c6:20:39:c5:eb:f6:37:d5:a2:19:3f:ff:f6:
                    6c:cb:e2:ab:f4:bc:e4:fe:8b:82:33:5f:60:df:33:
                    ca:ff:39:85:a5:3b:18:6a:aa:01:6e:08:d6:f9:3e:
                    6c:5a:a5:58:28:1c:93:60:c1:93:1c:a3:69:48:3c:
                    87:8f:e0:25:43:5a:80:0b:c9:ff:2f:7c:0b:ba:6a:
                    84:52:a7:a9:10:80:32:ff:9b:23:d4:99:b9:8b:41:
                    5f:84:18:95:de:e7:fd:28:91:d0:1d:7f:2f:0d:62:
                    fd:7a:97:f0:fd:64:cd:76:65:ce:88:36:85:8d:98:
                    83:3c:d0:94:3d:16:c8:d5:0f:7e:fb:c2:d8:b2:26:
                    9c:51:e0:1c:79:81:da:73:89:9e:6a:ea:4e:cc:65:
                    d1:15:3d:3b:1a:0e:de:f8:d1:44:1c:85:b0:58:50:
                    f0:53:2b:c1:e3:d3:e4:d7:d0:db:83:65:8c:e1:90:
                    11:98:fc:52:68:12:94:af:d4:8a:44:e5:98:c6:f7:
                    68:18:3b:d1:2f:cd:21:04:5f:08:a7:d0:f9:92:fa:
                    16:57:45:67:14:d8:5b:bd:ef:55:8e:29:9a:e9:76:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:57:0B:A3:6D:04:AB:67:9B:E0:5B:27:E8:81:D8:9D:2A:3D:0B
            X509v3 Authority Key Identifier:
                keyid:C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:cc:53:8b:df:05:bd:61:31:d4:23:0f:6f:14:df:83:c8:f5:
         0a:2a:f3:b6:30:87:10:b3:11:5d:56:16:f4:8a:23:df:19:f0:
         bf:88:65:69:94:17:e3:42:57:aa:e1:7e:73:ac:98:5d:c4:9b:
         25:f5:ec:f5:d8:d4:a5:e2:e0:af:49:13:7a:57:7d:51:b0:f0:
         53:a4:f8:ce:43:95:64:d8:c1:0d:31:77:3e:4a:93:4a:79:50:
         dd:5d:6e:77:33:6f:d0:ab:27:02:a5:ab:fd:00:2a:f2:6c:b6:
         4d:51:de:ec:a7:ab:9f:ba:64:20:9c:b2:d9:2d:67:e9:bd:1c:
         33:82:08:a5:ac:01:7c:a8:5d:b9:c7:4d:66:c3:b4:9f:67:3b:
         01:dd:fa:d1:d8:89:7d:08:77:d7:de:45:aa:4b:f1:3a:02:16:
         6a:d0:cf:96:94:c2:13:8e:0d:47:d4:16:09:44:17:33:fe:6e:
         8f:21:72:a5:cb:c0:1e:6c:22:7d:10:33:a4:05:bd:8a:00:bd:
         6e:65:b6:b2:5d:6b:e4:0c:55:f9:d5:58:0a:75:29:aa:d5:bb:
         17:7b:a9:77:77:ec:e5:15:bb:71:06:3a:15:83:c8:9c:57:f4:
         6f:f2:a1:52:a7:64:05:1e:59:0e:8a:b2:bf:1e:19:b1:b9:01:
         62:48:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:40:40 2026 by rpki-client