Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          kUoO8ekkWsSsfhKYdBqUtLOso03wJBVndb8+KTAi02o=
Subject key identifier:   EF:CE:6B:E6:51:22:D0:63:A1:F8:FD:4E:CE:59:E2:34:52:9C:66:4B
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       1C5BD8B17B7272587650C7AF49104C60DD787CE9
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:04 +0000
ROA not before:           Fri 28 Aug 2026 17:01:04 +0000
ROA not after:            Fri 27 Aug 2027 17:06:04 +0000
asID:                     262642
IP address blocks:        177.87.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5b:d8:b1:7b:72:72:58:76:50:c7:af:49:10:4c:60:dd:78:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:04 2026 GMT
            Not After : Aug 27 17:06:04 2027 GMT
        Subject: CN=EFCE6BE65122D063A1F8FD4ECE59E234529C664B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:d7:ca:f6:cd:ea:d2:fc:b9:f6:c2:26:d5:
                    2a:3b:83:2c:be:11:d8:5d:43:6b:0c:05:d1:1f:1a:
                    53:20:40:7c:34:c9:2d:49:46:7f:19:89:61:a1:19:
                    df:f7:3a:3e:a5:26:47:1f:4b:2d:a8:c1:17:01:ab:
                    42:5c:23:f4:3a:55:61:6c:6d:95:98:b7:55:2a:cb:
                    87:07:a2:40:6d:f0:42:3d:71:bb:65:3a:06:4a:5a:
                    19:6c:82:27:f1:ce:51:37:aa:da:40:2b:05:e9:10:
                    4a:77:1a:b9:c4:e1:e2:84:18:71:67:7a:e0:64:67:
                    a2:8b:ae:14:e8:b9:bd:59:cd:18:ed:e7:dd:91:03:
                    d8:aa:90:87:60:18:7f:10:e5:7b:a2:69:a4:41:7c:
                    3f:69:c1:fc:af:8f:78:36:9a:7d:c8:10:29:21:19:
                    52:35:9d:e8:9f:c7:24:61:4e:77:22:09:0e:35:ce:
                    b4:ef:fd:d2:e3:a2:ef:5a:a4:69:72:d7:8b:34:4a:
                    8c:ec:db:35:4d:f0:5b:aa:be:7f:22:76:fa:a6:21:
                    54:0f:c9:42:46:0d:b8:76:cc:24:db:d0:66:18:fb:
                    00:63:7b:8e:c3:f5:f6:3a:d9:00:e9:de:6a:3e:13:
                    11:c6:07:cb:7a:0e:e6:4b:6b:73:bc:8c:48:4d:d5:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:6B:E6:51:22:D0:63:A1:F8:FD:4E:CE:59:E2:34:52:9C:66:4B
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:74:a8:d5:b9:24:eb:a7:a0:56:ca:93:fb:1e:8c:83:24:
         b1:40:91:7c:f6:9e:a6:1c:a5:6f:0d:d7:e1:48:89:b1:96:ee:
         29:58:e4:62:df:28:c1:64:e4:5c:f0:42:c5:b2:d6:9d:eb:a1:
         fb:2d:be:a4:63:61:0e:b0:d6:b2:46:f5:18:ed:21:f0:c7:70:
         64:40:3b:1c:7c:23:8d:7b:50:18:15:c4:3e:38:08:99:5e:8b:
         b5:9b:46:c8:7e:61:5f:15:06:c0:ec:24:68:0f:e0:e6:d7:b6:
         43:07:47:9c:0c:0f:e8:bf:73:28:50:56:9a:ba:6a:16:5d:7d:
         b8:e0:cb:f4:00:f6:1b:1e:e7:2b:18:6e:b4:2d:9e:43:ee:54:
         09:ac:fc:4f:0b:e9:8a:84:ca:95:c0:68:33:5e:fe:c3:0e:56:
         e7:65:63:39:3a:b0:f2:93:e7:ee:77:eb:36:de:cb:87:82:e4:
         2e:19:b9:a8:ad:c3:04:31:ad:b2:fe:34:dc:e6:59:8c:a6:73:
         6b:f1:cf:be:b1:dc:bc:81:e1:d6:87:b4:bd:3e:f1:19:2f:b2:
         50:68:b2:b4:69:49:31:7f:4b:88:06:e5:9f:58:5f:da:b1:3b:
         f4:63:7d:f9:a3:30:a6:93:46:08:33:50:03:d1:d7:a7:0b:28:
         a6:1d:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 02:53:10 2026 by rpki-client