Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
File:                     3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa (raw, json)
Hash identifier:          F3xs5PuDeLgkFTNOTTwEuK9Yp6gp/VwZMZBVG9VZorE=
Subject key identifier:   B5:85:DE:E6:F5:EC:6B:C9:9D:FA:3B:71:8E:3A:74:B6:4C:19:30:DD
Certificate issuer:       /CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
Certificate serial:       3E13B36FCC37C5D5E892E259C7C790819884CFA6
Authority key identifier: E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
Signing time:             Fri 09 Oct 2026 13:42:36 +0000
ROA not before:           Fri 09 Oct 2026 13:37:36 +0000
ROA not after:            Fri 08 Oct 2027 13:42:36 +0000
asID:                     262351
IP address blocks:        177.125.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl
                          rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 19:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:13:b3:6f:cc:37:c5:d5:e8:92:e2:59:c7:c7:90:81:98:84:cf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
        Validity
            Not Before: Oct  9 13:37:36 2026 GMT
            Not After : Oct  8 13:42:36 2027 GMT
        Subject: CN=B585DEE6F5EC6BC99DFA3B718E3A74B64C1930DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:76:8e:c5:56:08:02:be:ab:16:f5:9c:98:
                    40:ee:ed:b6:9e:8c:0b:aa:da:fd:e8:8a:d5:26:0b:
                    04:12:06:7d:9a:8c:f6:dc:3c:3c:99:e3:05:97:25:
                    47:6f:7f:29:72:7f:88:49:16:d0:8f:41:f3:7d:9a:
                    2d:11:75:48:2b:a0:55:72:97:c7:3f:0d:e3:63:0c:
                    9a:9e:37:b8:b7:be:dd:08:6a:59:22:cc:8d:fe:93:
                    44:03:06:44:45:d6:f7:b4:26:1c:90:17:3a:7a:95:
                    87:60:22:92:b9:f7:74:6f:9c:ee:0b:92:d0:33:4c:
                    b5:45:85:6b:4f:6a:e0:07:13:ff:33:94:6e:79:31:
                    47:a9:60:d7:d8:2b:ac:17:37:e0:bb:1c:76:a4:c6:
                    2a:f7:77:80:d1:dd:bb:cc:9e:54:dc:26:b9:f7:04:
                    85:92:07:57:97:77:aa:94:2b:1e:9c:36:7e:df:ff:
                    00:30:43:da:37:b3:8f:6a:de:1e:51:34:c2:ef:69:
                    56:32:0f:22:4b:5a:1c:22:6d:59:e5:9a:c3:8b:3d:
                    25:99:36:d2:ce:5f:ac:83:2b:ef:f6:83:28:a8:6c:
                    be:60:31:d0:80:5a:88:bb:f3:27:9c:ff:30:d8:d1:
                    49:12:35:95:c0:96:15:33:ca:e8:ca:bb:30:94:2a:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:DE:E6:F5:EC:6B:C9:9D:FA:3B:71:8E:3A:74:B6:4C:19:30:DD
            X509v3 Authority Key Identifier:
                keyid:E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:7f:7d:6f:e3:e9:81:41:7b:61:c0:d1:56:bd:06:24:24:
         8b:bc:59:ee:d9:e6:02:90:d5:2e:f2:36:5e:9c:a2:6b:39:04:
         5e:56:d2:4b:a9:57:5c:07:90:e0:fc:7d:b8:91:57:e1:28:03:
         99:21:b4:8f:5c:86:d3:0c:5f:05:fb:60:00:7c:78:be:c1:e8:
         22:ce:db:a1:aa:38:ad:9b:40:94:74:50:7f:70:df:7a:61:78:
         10:2a:d7:09:83:94:cd:2c:a9:8a:18:55:a5:5d:49:5f:3b:50:
         66:3b:96:ec:cb:1f:b8:01:db:88:57:d3:59:67:58:2d:77:5a:
         63:68:a0:05:79:e9:90:24:37:02:70:26:82:3a:db:dc:dd:b7:
         ce:55:9e:88:8e:ea:f5:fd:c2:d1:6f:83:16:8e:d9:f7:14:5d:
         d2:55:64:e0:1a:a6:9b:22:5d:b3:b4:76:63:31:f2:4c:3b:6a:
         dc:18:8e:a4:28:07:f2:4c:8f:7d:3a:90:66:dc:39:b1:18:e5:
         7f:a0:0b:3b:a9:b0:7b:93:3f:e9:0d:30:ff:ac:04:c6:f3:e6:
         91:76:66:29:1b:94:f8:d2:e4:5f:75:24:42:83:12:89:b4:d8:
         87:2c:5d:2b:d7:8f:2b:46:98:ee:d2:02:21:a4:ef:9c:d1:da:
         4d:e4:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:18:37 2026 by rpki-client