Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32342d3234203d3e203631363937.roa
File:                     3230312e372e3231322e302f32342d3234203d3e203631363937.roa (raw, json)
Hash identifier:          4WZ4ICzPz5fxeJlRNNjxF3sNxq1xCjylI1Z9/gUkfIw=
Subject key identifier:   11:30:88:9E:D6:A3:D7:CC:2D:57:50:88:96:B3:AD:FB:62:BF:0A:91
Certificate issuer:       /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial:       15691511BC7FB354DA16B1BF84672BE9D1882CEE
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32342d3234203d3e203631363937.roa
Signing time:             Sat 17 Oct 2026 15:26:11 +0000
ROA not before:           Sat 17 Oct 2026 15:21:11 +0000
ROA not after:            Sat 16 Oct 2027 15:26:11 +0000
asID:                     61697
IP address blocks:        201.7.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 03:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:69:15:11:bc:7f:b3:54:da:16:b1:bf:84:67:2b:e9:d1:88:2c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
        Validity
            Not Before: Oct 17 15:21:11 2026 GMT
            Not After : Oct 16 15:26:11 2027 GMT
        Subject: CN=1130889ED6A3D7CC2D57508896B3ADFB62BF0A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:bc:de:c9:27:66:74:ab:19:88:a3:4e:ba:
                    e6:a3:ef:56:de:69:ae:80:01:fb:f0:7f:e2:f7:8a:
                    ca:49:f7:79:fe:23:f1:cb:89:eb:59:d7:3b:fb:13:
                    41:f3:2c:67:a6:c9:07:08:9b:8b:82:29:8f:e5:ec:
                    aa:65:5b:1b:c1:2f:a8:89:f2:f0:7e:8c:23:5d:5f:
                    ab:82:7b:57:6e:cd:4b:df:06:b3:5a:a7:74:e2:4c:
                    e6:9f:4f:5a:77:b3:8b:25:54:74:b2:e0:e5:e1:6c:
                    d5:b2:d7:24:27:1b:5a:50:46:d1:83:cd:05:14:83:
                    36:96:79:74:5a:8a:e9:b2:1c:d0:de:ba:e9:43:50:
                    0a:22:df:1a:c7:32:07:fd:1b:91:e6:7e:39:8a:b0:
                    dc:2f:5b:18:11:e3:08:1b:d0:e0:f2:c5:e4:c2:7b:
                    51:24:b6:f2:d1:ab:42:8c:b3:2b:7b:04:85:a7:9d:
                    2a:d4:cd:3a:e9:74:9c:16:35:6b:77:e2:36:bc:6f:
                    96:7e:ae:91:9d:cd:44:81:5b:b5:aa:26:56:c1:b6:
                    21:8f:03:f2:ce:1a:88:c7:22:c9:de:7d:88:58:a0:
                    56:f1:56:d7:ec:1a:a6:6a:c0:67:35:a6:2e:9f:56:
                    51:d7:25:88:ba:8c:89:42:68:3c:1a:0b:76:cc:05:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:88:9E:D6:A3:D7:CC:2D:57:50:88:96:B3:AD:FB:62:BF:0A:91
            X509v3 Authority Key Identifier:
                keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231322e302f32342d3234203d3e203631363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:0a:a6:29:12:18:29:20:26:07:9f:f6:21:25:c1:6b:06:
         bc:f9:40:6f:3c:41:44:f0:e0:09:cc:3a:35:f3:73:78:96:b1:
         56:08:00:bb:c0:cc:d7:a2:e3:9a:ed:ee:2d:f0:8b:47:00:fd:
         04:8c:2e:5d:ce:a9:5b:c9:48:da:b5:61:d7:92:e6:19:b0:10:
         f4:3f:25:51:64:df:82:5c:eb:72:95:23:43:c8:de:52:2a:8a:
         7c:2b:29:5a:42:77:64:ef:c9:d4:65:5b:e4:4b:47:ec:8d:00:
         5a:dc:af:5a:ae:af:40:6d:29:86:00:b9:a5:e6:39:07:36:28:
         04:15:47:68:47:d7:e2:0a:85:fe:ee:93:d9:c4:e2:08:c7:86:
         af:db:7d:26:93:78:b6:f3:e3:51:0b:71:32:ee:a3:54:be:b5:
         e3:18:7e:4a:5b:d8:3f:69:97:10:4d:89:f1:89:39:f9:0a:dd:
         20:29:bd:f5:e9:93:36:41:c3:08:e0:9b:37:36:97:6b:81:74:
         de:46:dd:6f:65:d5:e1:12:2d:1b:78:e2:6a:9b:63:13:63:76:
         02:be:5b:bd:b4:9a:f2:c6:7c:d1:09:c2:41:7d:9a:de:a5:42:
         c0:9c:25:f9:e8:bd:79:53:0a:85:da:d9:a4:85:55:82:9f:64:
         5b:d0:75:48
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFWkVEbx/s1TaFrG/hGcr6dGILO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyODc3MUUxNjc2RTk0NUFDMzEzRTA3NzRBMjNEODc4
QTkyQzNERDAeFw0yNjEwMTcxNTIxMTFaFw0yNzEwMTYxNTI2MTFaMDMxMTAvBgNV
BAMTKDExMzA4ODlFRDZBM0Q3Q0MyRDU3NTA4ODk2QjNBREZCNjJCRjBBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuLzeySdmdKsZiKNOuuaj71be
aa6AAfvwf+L3ispJ93n+I/HLietZ1zv7E0HzLGemyQcIm4uCKY/l7KplWxvBL6iJ
8vB+jCNdX6uCe1duzUvfBrNap3TiTOafT1p3s4slVHSy4OXhbNWy1yQnG1pQRtGD
zQUUgzaWeXRaiumyHNDeuulDUAoi3xrHMgf9G5HmfjmKsNwvWxgR4wgb0ODyxeTC
e1EktvLRq0KMsyt7BIWnnSrUzTrpdJwWNWt34ja8b5Z+rpGdzUSBW7WqJlbBtiGP
A/LOGojHIsnefYhYoFbxVtfsGqZqwGc1pi6fVlHXJYi6jIlCaDwaC3bMBUaLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUETCIntaj18wtV1CIlrOt+2K/CpEwHwYDVR0j
BBgwFoAUhSh3HhZ26UWsMT4HdKI9h4qSw90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1NQTWZVUUFiTEVrczlBd0trajdURmZqZlIzUlVLTDQ1eWdtRnk5QUxk
RWgvMC84NTI4NzcxRTE2NzZFOTQ1QUMzMTNFMDc3NEEyM0Q4NzhBOTJDM0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1Mjg3NzFFMTY3NkU5NDVB
QzMxM0UwNzc0QTIzRDg3OEE5MkMzREQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTUE1mVVFBYkxFa3M5QXdLa2o3VEZmamZSM1JVS0w0NXlnbUZ5OUFMZEVoLzAv
MzIzMDMxMmUzNzJlMzIzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM2
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkH1DANBgkqhkiG9w0BAQsFAAOCAQEALQcKpikSGCkg
Jgef9iElwWsGvPlAbzxBRPDgCcw6NfNzeJaxVggAu8DM16Ljmu3uLfCLRwD9BIwu
Xc6pW8lI2rVh15LmGbAQ9D8lUWTfglzrcpUjQ8jeUiqKfCspWkJ3ZO/J1GVb5EtH
7I0AWtyvWq6vQG0phgC5peY5BzYoBBVHaEfX4gqF/u6T2cTiCMeGr9t9JpN4tvPj
UQtxMu6jVL614xh+SlvYP2mXEE2J8Yk5+QrdICm99emTNkHDCOCbNzaXa4F03kbd
b2XV4RItG3jiaptjE2N2Ar5bvbSa8sZ80QnCQX2a3qVCwJwl+ei9eVMKhdrZpIVV
gp9kW9B1SA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 09:17:44 2026 by rpki-client