Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e312e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          b9aMRpzAmwhrGgt1eN0Xe240HSHZWUFU7cSi3ln3fGE=
Subject key identifier:   C5:00:B2:60:AC:0A:14:37:59:B0:86:4E:66:38:31:02:48:BA:0F:DA
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       42963A0698EC73CE4C475D1D17A3F807B41B9AFC
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:02 +0000
ROA not before:           Fri 28 Aug 2026 17:01:02 +0000
ROA not after:            Fri 27 Aug 2027 17:06:02 +0000
asID:                     262642
IP address blocks:        177.87.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:96:3a:06:98:ec:73:ce:4c:47:5d:1d:17:a3:f8:07:b4:1b:9a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:02 2026 GMT
            Not After : Aug 27 17:06:02 2027 GMT
        Subject: CN=C500B260AC0A143759B0864E6638310248BA0FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:aa:e8:ea:19:c0:51:4d:f9:c8:75:e4:62:
                    d3:dc:4f:a9:44:67:05:40:d7:d7:39:0d:6b:b6:98:
                    90:87:12:28:e3:77:22:1b:60:f0:d9:2d:27:e0:b4:
                    41:47:ee:ce:4d:b2:97:74:1b:09:19:50:db:ef:2d:
                    af:55:63:ac:f6:05:b7:e5:8b:f1:46:19:32:bc:c2:
                    0e:3b:9e:d1:17:fb:eb:b0:9f:7d:a2:be:29:e5:49:
                    4d:f9:2c:4a:01:24:a9:b6:26:69:bd:2c:17:91:c2:
                    99:55:83:90:71:3c:d7:d5:dd:4b:6e:82:a0:25:a9:
                    37:2e:52:29:c2:d0:08:03:40:f8:7b:20:11:a4:40:
                    62:06:fd:90:6e:39:94:ca:20:4a:38:f6:dd:94:a1:
                    66:c8:a6:ba:1b:a8:a0:7f:b9:1c:32:72:8e:a7:a6:
                    e2:d2:87:aa:a8:a2:20:d4:50:4f:54:f3:be:ae:47:
                    42:58:b0:70:1f:85:ca:e8:bb:83:6d:4e:77:e2:3f:
                    40:1c:95:5f:27:53:fa:33:aa:4a:c8:15:fb:c4:0e:
                    48:71:b5:65:a1:bc:1b:6f:24:50:aa:f9:2c:21:3f:
                    10:94:b7:36:18:ad:39:45:c6:b9:00:f9:58:f1:10:
                    90:ca:07:ab:71:bb:d0:c0:dd:d9:43:fb:8b:4e:70:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:B2:60:AC:0A:14:37:59:B0:86:4E:66:38:31:02:48:BA:0F:DA
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e312e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d3:16:05:38:cd:91:1f:30:d7:f6:d7:ac:2a:4d:64:3e:65:
         f5:bb:0f:85:66:ad:82:a0:32:6d:c5:d6:34:6c:a2:a6:b9:a6:
         6c:b6:e1:1c:81:d4:22:2b:dc:ee:d8:32:20:3a:5c:66:07:13:
         5c:16:dc:17:da:47:63:39:69:7d:a5:66:43:ec:39:db:ae:b6:
         5a:ae:f0:9a:b3:6b:9b:7c:87:3a:d7:77:e0:af:b6:03:b7:16:
         2e:df:0a:08:f5:14:ca:88:9f:2a:c1:7a:6c:29:62:dc:5d:30:
         77:1b:44:35:0e:7f:54:7f:1e:2d:d8:f0:4b:0a:3e:45:44:84:
         a1:03:db:ec:2e:f0:64:89:cf:d4:83:d3:e8:d0:c3:4c:37:7c:
         80:7a:79:11:4d:6c:e7:55:18:45:1e:0c:a0:9a:ff:37:ec:1b:
         da:56:8d:3a:69:b4:b9:1e:ae:e2:14:33:6c:a9:17:87:04:e6:
         68:c4:8b:59:9f:75:a1:61:ee:e3:11:2f:cf:d6:e3:bd:74:6a:
         ca:bb:e5:12:b0:44:f3:3e:3a:a4:c0:90:6b:47:0e:1c:1f:e5:
         d5:19:1c:ba:9b:fa:13:04:ae:f3:0f:9b:b1:be:26:4f:c5:a9:
         8e:49:45:db:8b:36:9d:d5:a1:6b:88:96:52:a9:aa:20:04:dc:
         91:9d:9a:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQpY6Bpjsc85MR10dF6P4B7QbmvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDJaFw0yNzA4MjcxNzA2MDJaMDMxMTAvBgNV
BAMTKEM1MDBCMjYwQUMwQTE0Mzc1OUIwODY0RTY2MzgzMTAyNDhCQTBGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV6ro6hnAUU35yHXkYtPcT6lE
ZwVA19c5DWu2mJCHEijjdyIbYPDZLSfgtEFH7s5Nspd0GwkZUNvvLa9VY6z2Bbfl
i/FGGTK8wg47ntEX++uwn32ivinlSU35LEoBJKm2Jmm9LBeRwplVg5BxPNfV3Utu
gqAlqTcuUinC0AgDQPh7IBGkQGIG/ZBuOZTKIEo49t2UoWbIprobqKB/uRwyco6n
puLSh6qooiDUUE9U876uR0JYsHAfhcrou4NtTnfiP0AclV8nU/ozqkrIFfvEDkhx
tWWhvBtvJFCq+SwhPxCUtzYYrTlFxrkA+VjxEJDKB6txu9DA3dlD+4tOcOChAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxQCyYKwKFDdZsIZOZjgxAki6D9owHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzM3MmUzODM3MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFXATANBgkqhkiG9w0BAQsFAAOCAQEARtMWBTjNkR8w
1/bXrCpNZD5l9bsPhWatgqAybcXWNGyiprmmbLbhHIHUIivc7tgyIDpcZgcTXBbc
F9pHYzlpfaVmQ+w52662Wq7wmrNrm3yHOtd34K+2A7cWLt8KCPUUyoifKsF6bCli
3F0wdxtENQ5/VH8eLdjwSwo+RUSEoQPb7C7wZInP1IPT6NDDTDd8gHp5EU1s51UY
RR4MoJr/N+wb2laNOmm0uR6u4hQzbKkXhwTmaMSLWZ91oWHu4xEvz9bjvXRqyrvl
ErBE8z46pMCQa0cOHB/l1Rkcupv6EwSu8w+bsb4mT8WpjklF24s2ndWha4iWUqmq
IATckZ2aXA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 00:26:55 2026 by rpki-client