Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e362e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e362e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          K92gjkF9WZ71iDlM0E9SpZ466HDdwK65CfYtrneUbqY=
Subject key identifier:   D2:52:8B:2A:94:FB:AB:1B:15:42:BA:76:0E:47:2B:7D:00:C9:59:7C
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       61786557C7FD83EB8CD4567DB8FB60304D02143A
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e362e302f32332d3233203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:05 +0000
ROA not before:           Fri 28 Aug 2026 17:01:05 +0000
ROA not after:            Fri 27 Aug 2027 17:06:05 +0000
asID:                     262642
IP address blocks:        177.87.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 01:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:65:57:c7:fd:83:eb:8c:d4:56:7d:b8:fb:60:30:4d:02:14:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:05 2026 GMT
            Not After : Aug 27 17:06:05 2027 GMT
        Subject: CN=D2528B2A94FBAB1B1542BA760E472B7D00C9597C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:8a:0c:51:b8:8f:0d:4c:c1:dc:b4:ba:99:
                    a4:a0:49:9b:48:f3:69:0a:ce:76:9d:db:bd:71:5f:
                    1b:bc:da:11:d5:c1:69:ca:a6:4b:b4:78:85:11:64:
                    57:c7:da:f1:b8:fd:31:d5:2b:4e:54:38:24:15:13:
                    69:79:c0:f9:95:5a:15:67:a9:25:62:75:fa:43:bb:
                    9f:33:80:a2:01:fb:b9:0b:af:f8:92:dc:a5:01:af:
                    db:d7:7c:73:fd:30:20:36:e0:e2:13:f9:da:09:a3:
                    6f:1b:4f:7c:25:a1:ab:89:8e:92:4c:1e:24:5a:5e:
                    77:66:b2:95:cf:31:26:40:1e:d3:2c:15:8a:25:ed:
                    ce:7a:a2:eb:eb:eb:38:72:df:9a:c1:23:77:81:41:
                    ce:ea:0e:10:c6:6b:ea:e7:b0:17:4c:a8:40:31:ec:
                    31:8f:aa:ef:47:ba:f5:8d:65:02:63:2e:6e:b6:d4:
                    83:fc:5b:ca:d4:6c:06:c5:17:02:e6:5d:53:d7:d5:
                    2a:20:72:06:3d:0c:3f:1d:8e:45:ed:1c:25:86:e9:
                    0b:13:9f:e6:4d:c6:0b:07:45:29:ce:1d:c8:4a:98:
                    0e:43:f6:fd:a7:62:00:59:a8:db:79:6b:44:29:30:
                    d1:7a:be:05:f3:22:a3:91:6f:01:65:2f:75:8d:b4:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:8B:2A:94:FB:AB:1B:15:42:BA:76:0E:47:2B:7D:00:C9:59:7C
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e362e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:3f:84:26:50:87:5d:3d:01:4a:10:2a:5b:1d:f3:8d:17:
         0f:ee:ea:84:2f:bf:3f:43:8d:74:0f:a5:5b:bb:af:45:68:b2:
         04:b7:e5:4f:47:5b:56:dc:72:c4:f3:dd:ed:2b:65:1c:ee:60:
         22:27:e4:29:bc:b7:6b:2b:66:2e:d4:d4:f0:12:03:dd:7d:10:
         ac:af:cc:44:aa:b1:02:23:9c:a1:66:bd:c0:22:1b:65:26:2a:
         1a:26:c9:84:d3:ed:48:dc:05:a0:b4:58:81:05:c5:b0:5a:b8:
         a8:4f:f6:d5:d5:e9:6d:78:77:e0:71:a5:97:54:29:c3:ff:66:
         7f:ba:8e:d4:07:a3:a9:20:ae:34:49:68:83:c6:80:83:16:9d:
         10:d1:bc:c9:d3:ca:c1:bb:21:1e:dc:06:fa:bf:66:79:e7:4e:
         42:1c:ab:82:6b:d7:9b:86:55:95:89:e5:3d:08:4c:f9:80:01:
         6b:72:3d:18:2d:f1:5d:81:bd:26:7c:11:aa:03:2a:6c:2e:33:
         90:87:c9:34:bf:dc:aa:af:5b:3f:c0:86:b2:19:5c:8a:8e:51:
         1b:82:04:de:63:5d:b8:05:22:3e:ed:ab:97:4c:37:b8:36:c8:
         dc:50:38:3f:66:71:25:7f:f8:dd:bb:51:51:3b:7f:64:e1:11:
         b0:6c:84:98
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYXhlV8f9g+uM1FZ9uPtgME0CFDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDVaFw0yNzA4MjcxNzA2MDVaMDMxMTAvBgNV
BAMTKEQyNTI4QjJBOTRGQkFCMUIxNTQyQkE3NjBFNDcyQjdEMDBDOTU5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoR4oMUbiPDUzB3LS6maSgSZtI
82kKznad271xXxu82hHVwWnKpku0eIURZFfH2vG4/THVK05UOCQVE2l5wPmVWhVn
qSVidfpDu58zgKIB+7kLr/iS3KUBr9vXfHP9MCA24OIT+doJo28bT3wloauJjpJM
HiRaXndmspXPMSZAHtMsFYol7c56ouvr6zhy35rBI3eBQc7qDhDGa+rnsBdMqEAx
7DGPqu9HuvWNZQJjLm621IP8W8rUbAbFFwLmXVPX1SogcgY9DD8djkXtHCWG6QsT
n+ZNxgsHRSnOHchKmA5D9v2nYgBZqNt5a0QpMNF6vgXzIqORbwFlL3WNtNodAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0lKLKpT7qxsVQrp2DkcrfQDJWXwwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzM3MmUzODM3MmUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFXBjANBgkqhkiG9w0BAQsFAAOCAQEAjHs/hCZQh109
AUoQKlsd840XD+7qhC+/P0ONdA+lW7uvRWiyBLflT0dbVtxyxPPd7StlHO5gIifk
Kby3aytmLtTU8BID3X0QrK/MRKqxAiOcoWa9wCIbZSYqGibJhNPtSNwFoLRYgQXF
sFq4qE/21dXpbXh34HGll1Qpw/9mf7qO1AejqSCuNElog8aAgxadENG8ydPKwbsh
HtwG+r9meedOQhyrgmvXm4ZVlYnlPQhM+YABa3I9GC3xXYG9JnwRqgMqbC4zkIfJ
NL/cqq9bP8CGshlcio5RG4IE3mNduAUiPu2rl0w3uDbI3FA4P2ZxJX/43btRUTt/
ZOERsGyEmA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 14:22:15 2026 by rpki-client