Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3230382e302f32342d3234203d3e2030.roa
File:                     3137372e32312e3230382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          rxcb/xH+QDkm2oFgxRj/ivPwCch1nhZ/85D2xyewdkE=
Subject key identifier:   CB:16:1D:AC:BD:D0:79:C3:32:D6:92:29:7A:FA:86:EB:E7:AD:B1:D8
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       5E51456EB61E40371F626E78BAD440D3B295C144
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3230382e302f32342d3234203d3e2030.roa
Signing time:             Tue 27 Oct 2026 21:57:00 +0000
ROA not before:           Tue 27 Oct 2026 21:52:00 +0000
ROA not after:            Tue 26 Oct 2027 21:57:00 +0000
asID:                     0
IP address blocks:        177.21.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:51:45:6e:b6:1e:40:37:1f:62:6e:78:ba:d4:40:d3:b2:95:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 27 21:52:00 2026 GMT
            Not After : Oct 26 21:57:00 2027 GMT
        Subject: CN=CB161DACBDD079C332D692297AFA86EBE7ADB1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:b2:bb:f7:23:fb:81:c9:e9:e7:6d:19:0d:
                    7a:1a:d0:2f:91:2e:dd:25:ae:4b:2a:2f:1d:2d:07:
                    75:be:b4:df:ff:c3:9b:58:78:ce:19:08:fd:b2:b1:
                    1f:bf:fd:61:09:dc:4f:34:bd:68:a8:1e:f5:c8:e0:
                    cd:a1:10:00:f0:db:54:d5:9c:52:c3:6f:eb:58:da:
                    03:ac:0c:7a:d5:86:e6:fc:ec:86:47:d6:ee:23:ae:
                    6d:e0:2f:f4:e2:98:82:cc:5d:d0:09:56:7f:b3:56:
                    1d:3f:ed:85:33:90:09:15:07:6e:e0:ae:10:40:1d:
                    7b:e9:e6:b0:be:de:21:51:04:04:d8:05:de:fa:38:
                    83:b2:58:b0:d9:e2:22:bf:e1:5c:47:f7:fb:3f:7e:
                    05:59:eb:a3:55:15:49:a6:4a:a4:f6:66:f8:32:12:
                    96:f8:35:bc:51:93:51:27:8b:b7:07:83:ca:13:1e:
                    6d:63:8a:4f:eb:9e:4d:65:d8:0e:2a:51:40:2c:11:
                    ce:6b:94:bb:9a:38:25:f9:13:6f:77:a3:c0:05:fc:
                    61:d8:bc:60:07:41:bc:b8:4d:8c:cc:a0:16:94:1f:
                    3d:70:b0:40:02:a0:2e:09:3c:2f:bb:11:c9:3f:f4:
                    1e:22:8c:ae:c8:0a:b6:91:54:db:7f:f3:d3:89:92:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:16:1D:AC:BD:D0:79:C3:32:D6:92:29:7A:FA:86:EB:E7:AD:B1:D8
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3230382e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:e7:54:30:56:1b:f8:6a:65:e8:58:f9:9d:60:23:af:5c:
         76:a4:09:a9:9c:16:f8:e0:0c:12:f6:c8:4d:88:65:d5:47:4e:
         2e:c3:3c:8e:25:98:79:2b:3e:65:12:85:ee:2a:07:60:a9:7f:
         67:02:6f:8c:2d:e1:a4:bb:2a:52:23:24:81:91:65:73:d2:d9:
         86:38:2e:8b:71:3b:ff:2c:68:fa:94:d5:1c:2e:c3:f5:a4:ea:
         3d:0f:e9:04:1f:75:6f:fd:b9:3c:b9:c2:90:82:9b:61:5e:31:
         08:60:ab:fe:d6:a5:57:86:70:a5:0e:f4:00:f0:5c:50:3c:d8:
         7b:d9:f5:0f:8e:5f:fb:8e:2a:61:c0:6b:dc:b4:24:75:94:6c:
         eb:8d:f3:21:73:af:8f:e4:c6:0c:29:1e:6b:c6:d4:c1:08:a6:
         a1:e3:0b:51:75:f7:10:91:8e:8d:e3:22:27:25:f8:0b:67:dc:
         71:96:fb:4c:5a:86:d9:7d:c4:3b:5e:9d:22:0f:3c:c9:27:31:
         46:a9:9f:16:44:ef:32:a5:f9:c3:f9:09:70:2c:2f:67:de:b1:
         90:17:c9:3c:4d:33:19:3c:10:68:96:9e:62:31:c2:53:b7:f8:
         40:f5:b1:60:fe:c3:f5:f8:26:72:24:57:f3:cf:c7:54:dd:44:
         23:56:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:25:48 2026 by rpki-client