Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          VFd/VzMF3BWhPUVqUQM+y/UrsoA4LrFtqi4rcWF6Obo=
Subject key identifier:   57:72:C9:60:6C:2D:E2:5B:B2:36:F1:5F:82:95:8B:85:FE:49:87:13
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       17ABC568519908BE5D457DECA455832E8A50774F
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:01 +0000
ROA not before:           Fri 28 Aug 2026 17:01:01 +0000
ROA not after:            Fri 27 Aug 2027 17:06:01 +0000
asID:                     262642
IP address blocks:        177.87.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ab:c5:68:51:99:08:be:5d:45:7d:ec:a4:55:83:2e:8a:50:77:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:01 2026 GMT
            Not After : Aug 27 17:06:01 2027 GMT
        Subject: CN=5772C9606C2DE25BB236F15F82958B85FE498713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:f6:6e:60:47:a4:c3:30:b1:5c:af:2d:18:
                    57:a2:d7:c6:6e:b2:a6:53:23:fb:06:69:94:e1:7b:
                    74:25:ae:a9:68:fe:82:de:e6:3c:91:71:c5:39:eb:
                    9c:85:59:98:22:3b:ad:69:a4:2c:33:3d:d5:a3:41:
                    21:70:aa:4b:da:e9:f1:1e:07:b0:1e:1d:3c:36:31:
                    66:f2:ca:06:45:88:df:0d:6b:70:5a:43:79:74:b4:
                    66:58:da:fa:fb:7b:ba:63:aa:90:ff:ce:de:41:68:
                    51:5c:09:c5:bf:82:5a:29:88:c2:f9:a1:ae:24:e7:
                    2b:4c:0a:9f:5d:fd:e7:ac:04:c7:41:7c:c9:a7:02:
                    ad:ee:94:27:89:c6:8d:a1:ca:8c:2c:ce:db:55:97:
                    85:94:1e:72:64:3a:9a:97:2a:7c:c9:77:52:2f:a6:
                    22:84:cd:a9:a1:50:70:3e:2f:87:37:12:f6:3c:a0:
                    8e:f7:16:6c:8c:c8:aa:cd:31:a4:7a:09:6f:c3:6a:
                    9e:09:25:ca:ff:59:b0:f5:c7:6d:6c:bc:33:ff:c1:
                    c7:b2:73:5c:6f:8b:18:5e:27:91:65:70:06:e8:14:
                    f3:e2:3b:ee:05:0f:21:5c:0b:59:96:c7:0a:24:8b:
                    b9:52:be:a9:6d:4a:4a:64:ee:a7:52:62:c3:1c:71:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:C9:60:6C:2D:E2:5B:B2:36:F1:5F:82:95:8B:85:FE:49:87:13
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:30:43:b7:3e:9c:39:2d:5c:0d:70:57:4a:57:b6:7c:83:7f:
         61:d0:ab:2d:79:d4:80:cc:36:45:d4:06:9f:f9:10:33:c6:99:
         08:9c:c5:58:9d:83:99:f2:98:67:94:15:fd:74:0b:00:8c:17:
         bc:c8:68:d1:f6:8a:38:64:8f:ab:b0:59:bc:1e:00:b8:04:c4:
         da:16:65:20:b7:a5:ac:11:d5:5e:7f:60:03:e4:80:a6:da:67:
         f0:37:2b:f9:f5:7b:03:f0:a8:30:0a:a9:f2:2b:18:7b:32:84:
         92:ce:50:b6:48:a3:dd:85:c3:fb:d4:f1:0f:a5:42:36:df:18:
         e0:3a:3d:2c:3b:32:81:b3:a6:8b:b2:08:4c:88:bf:04:17:74:
         97:01:bd:5e:11:38:e0:04:c1:65:09:77:0f:b9:0a:5f:97:9d:
         64:92:29:64:18:21:3f:0d:05:5f:b3:50:5b:36:14:e7:4f:25:
         ea:cb:3c:a5:8d:95:44:16:c8:0d:ae:e0:27:45:64:21:25:81:
         30:9c:49:75:7e:5c:15:fc:59:de:09:92:bd:5a:a3:27:3f:45:
         bd:40:76:07:2e:a4:58:ca:80:b6:85:6c:1c:9c:ac:a9:af:ee:
         e1:d7:99:b9:78:88:cb:eb:f2:f4:41:d8:5a:53:53:3b:b1:b5:
         a7:a4:a2:0e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUF6vFaFGZCL5dRX3spFWDLopQd08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDFaFw0yNzA4MjcxNzA2MDFaMDMxMTAvBgNV
BAMTKDU3NzJDOTYwNkMyREUyNUJCMjM2RjE1RjgyOTU4Qjg1RkU0OTg3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6vZuYEekwzCxXK8tGFei18Zu
sqZTI/sGaZThe3Qlrqlo/oLe5jyRccU565yFWZgiO61ppCwzPdWjQSFwqkva6fEe
B7AeHTw2MWbyygZFiN8Na3BaQ3l0tGZY2vr7e7pjqpD/zt5BaFFcCcW/glopiML5
oa4k5ytMCp9d/eesBMdBfMmnAq3ulCeJxo2hyowszttVl4WUHnJkOpqXKnzJd1Iv
piKEzamhUHA+L4c3EvY8oI73FmyMyKrNMaR6CW/Dap4JJcr/WbD1x21svDP/wcey
c1xvixheJ5FlcAboFPPiO+4FDyFcC1mWxwoki7lSvqltSkpk7qdSYsMccXZHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUV3LJYGwt4luyNvFfgpWLhf5JhxMwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzM3MmUzODM3MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFXAjANBgkqhkiG9w0BAQsFAAOCAQEAiTBDtz6cOS1c
DXBXSle2fIN/YdCrLXnUgMw2RdQGn/kQM8aZCJzFWJ2DmfKYZ5QV/XQLAIwXvMho
0faKOGSPq7BZvB4AuATE2hZlILelrBHVXn9gA+SAptpn8Dcr+fV7A/CoMAqp8isY
ezKEks5Qtkij3YXD+9TxD6VCNt8Y4Do9LDsygbOmi7IITIi/BBd0lwG9XhE44ATB
ZQl3D7kKX5edZJIpZBghPw0FX7NQWzYU508l6ss8pY2VRBbIDa7gJ0VkISWBMJxJ
dX5cFfxZ3gmSvVqjJz9FvUB2By6kWMqAtoVsHJysqa/u4deZuXiIy+vy9EHYWlNT
O7G1p6SiDg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 04:06:33 2026 by rpki-client