Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e342e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e342e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          A2CzVODAGC4p71LKgY0fQweF0PCkiQ2iEm4+0M/FT+0=
Subject key identifier:   38:F5:21:43:7F:B4:2B:71:4B:07:32:B9:5C:A4:21:AC:D9:B7:F9:E3
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       242E09A16E4EA66EED61421A32505DFCEC512C0E
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e342e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:06 +0000
ROA not before:           Fri 28 Aug 2026 17:01:06 +0000
ROA not after:            Fri 27 Aug 2027 17:06:06 +0000
asID:                     262642
IP address blocks:        177.87.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:09:a1:6e:4e:a6:6e:ed:61:42:1a:32:50:5d:fc:ec:51:2c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:06 2026 GMT
            Not After : Aug 27 17:06:06 2027 GMT
        Subject: CN=38F521437FB42B714B0732B95CA421ACD9B7F9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:89:03:93:be:e6:83:a4:54:2e:42:c8:6e:
                    1d:40:8c:5e:9f:3d:b7:d9:0f:56:80:f1:e4:2c:f1:
                    0e:44:49:29:11:42:d1:19:a7:f5:f3:b6:88:f5:53:
                    55:79:cd:57:43:e3:78:91:4c:ed:ed:fa:08:91:fa:
                    a5:c9:01:b2:48:45:1d:5e:57:bb:8f:ba:b5:b9:45:
                    5e:80:90:7d:7e:d9:8d:d9:a5:60:83:7e:bf:5b:95:
                    d1:89:eb:7c:d9:64:09:43:e8:0d:9d:70:13:28:8b:
                    2c:0c:60:5b:9c:66:fe:52:79:7a:84:86:01:ee:d9:
                    db:ae:fb:74:e2:b8:91:23:60:71:1e:aa:96:22:f9:
                    a5:b6:21:89:82:c0:46:c4:df:09:61:2d:61:f8:67:
                    e8:c2:de:cb:f3:af:14:91:35:5b:24:21:09:f8:49:
                    21:34:dd:6c:2a:72:08:c1:b9:b6:68:64:47:b9:67:
                    ea:e5:7a:39:a1:95:bf:93:c0:51:c2:46:5a:09:9f:
                    2b:07:48:28:18:58:5e:88:12:69:b6:67:d8:9a:09:
                    fe:2f:3d:48:a5:0a:55:bc:45:27:3f:1f:98:89:bd:
                    55:ee:64:e0:c3:d4:e8:90:9f:01:ff:78:7d:8e:f2:
                    d7:8c:c4:0e:06:ce:04:aa:6a:30:c8:48:7e:95:6d:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F5:21:43:7F:B4:2B:71:4B:07:32:B9:5C:A4:21:AC:D9:B7:F9:E3
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e342e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:70:22:c2:db:03:5d:9f:ec:af:7d:91:08:76:c6:a4:4b:e0:
         db:ab:ec:c4:2b:79:5a:de:51:22:fb:d3:a9:8e:88:76:ec:cf:
         23:c4:c2:78:26:70:5b:f7:dd:e1:c1:30:dd:42:10:3d:e9:7d:
         26:ce:ad:b6:33:31:a7:53:eb:e5:a8:3d:16:1e:64:ec:36:67:
         5c:ee:47:e3:a5:08:01:50:9c:d7:09:1a:cb:b5:6f:9d:5f:4d:
         78:87:0d:00:bf:87:f9:27:61:5d:e9:bd:e2:c8:7d:2c:97:39:
         72:6f:de:1f:47:13:a1:01:05:64:bc:3f:d3:b8:f5:4e:19:ad:
         bc:04:5b:17:b0:15:ff:02:d4:b5:a4:6b:e5:2c:55:86:48:fa:
         72:a0:90:1d:d4:1f:ab:d0:49:67:5f:e5:ab:f9:d0:c8:65:f5:
         59:17:7b:0b:0e:c9:bc:69:71:b0:23:20:68:b1:7f:35:e9:8f:
         b6:24:65:45:d2:25:a5:99:9f:b8:26:0a:4f:c8:d3:57:f7:b8:
         75:ae:a6:77:8c:51:9c:ca:7d:6b:bb:57:28:2e:66:bb:a7:d8:
         a2:a1:58:ff:a9:d0:a6:cf:14:ab:17:73:87:7b:b0:31:3f:0e:
         b2:e3:03:fd:35:39:8e:ab:d5:47:62:bc:0d:63:c0:2e:58:ae:
         ba:f4:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:23:09 2026 by rpki-client