Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39302e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e39302e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          6nPUOg3eCNcMjBbuIs//g/+AH0SLTeDrT2OYhoD8SqE=
Subject key identifier:   E9:CF:66:51:52:91:31:92:C4:05:CE:40:95:55:3C:6D:A0:DD:7A:25
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       4D30EA136C567B62F590C38F827163A87A82790F
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39302e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:23 +0000
ROA not before:           Fri 28 Aug 2026 19:01:23 +0000
ROA not after:            Fri 27 Aug 2027 19:06:23 +0000
asID:                     262369
IP address blocks:        177.130.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:30:ea:13:6c:56:7b:62:f5:90:c3:8f:82:71:63:a8:7a:82:79:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:23 2026 GMT
            Not After : Aug 27 19:06:23 2027 GMT
        Subject: CN=E9CF665152913192C405CE4095553C6DA0DD7A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:6a:90:67:72:d2:db:b8:ed:bb:b9:c8:30:
                    70:37:25:1a:83:a2:89:c7:c5:85:2d:6d:62:d8:1b:
                    19:e1:db:d3:83:11:5a:68:33:63:38:7b:7d:a6:ff:
                    45:46:c0:98:08:8e:2c:bf:20:95:a5:b0:6a:c1:98:
                    dd:3b:3f:fe:15:9b:4c:8b:e6:78:df:47:48:a4:ae:
                    85:69:2d:32:d7:0b:79:9d:e2:f7:88:8b:32:cb:f6:
                    53:78:3c:86:7d:02:49:10:59:3f:fd:be:6a:6d:d0:
                    22:5a:85:4b:b6:25:ca:80:69:cc:3b:4a:e7:41:2a:
                    96:83:84:85:3a:7b:73:7f:f8:25:ba:d4:3a:2a:fb:
                    01:ce:78:96:76:a7:66:b1:ca:cf:a0:f3:e8:20:43:
                    ec:ca:0d:e7:6d:49:d5:16:bb:fc:e0:ac:f1:83:d7:
                    87:5e:98:ff:5d:27:90:46:1a:6f:08:10:e1:26:1a:
                    c6:f0:aa:a6:a4:c7:b0:ae:16:34:30:a7:0f:2e:27:
                    1e:11:1c:75:7e:16:04:82:0e:f2:b7:c6:98:e2:2f:
                    6e:a5:b5:a7:74:2d:52:53:32:cd:49:39:8a:76:95:
                    11:bf:74:cb:f1:ff:ee:8d:01:1e:0e:70:80:2f:e7:
                    e5:33:c1:b1:e0:ac:5f:50:b5:56:55:9a:fd:c3:78:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:66:51:52:91:31:92:C4:05:CE:40:95:55:3C:6D:A0:DD:7A:25
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39302e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:65:32:94:d1:c9:91:49:09:cb:ae:65:da:0b:96:52:f1:f5:
         52:d3:22:03:1a:8e:34:8c:2d:78:31:06:0e:fc:d4:00:2f:7e:
         d3:5f:d2:96:78:fb:91:3c:bd:5f:92:ff:c3:6d:74:18:59:ec:
         01:4d:ad:5b:f8:a9:18:89:8b:a3:48:1a:9b:13:ae:39:d0:38:
         25:3a:56:86:ac:4a:d2:90:59:a2:9d:77:04:b7:a0:41:37:d4:
         18:66:96:79:f7:28:c3:2a:5e:b6:fa:2d:62:a4:90:75:9e:f8:
         bf:97:bc:a0:56:f6:ea:57:c2:b9:f5:c7:f2:5e:60:9c:60:f7:
         d4:8e:7e:cf:25:6a:24:d7:23:d7:97:26:24:7a:6b:a7:09:50:
         b2:df:c1:99:53:55:9b:59:bd:e1:73:76:b5:10:37:d9:34:57:
         d9:54:78:50:21:b5:56:27:1a:79:cb:73:ff:f6:13:94:9d:4d:
         e7:65:e7:ef:f0:39:35:44:c5:fc:87:e4:65:12:0d:58:e5:b8:
         76:5d:a1:8e:a4:42:04:60:5b:be:44:f5:d2:d7:7d:88:fc:41:
         0e:7c:aa:4f:1f:1c:a1:be:d1:3e:f1:ed:f2:ee:94:a1:fa:47:
         c9:14:e6:d4:25:62:5c:cb:c7:e1:3c:a0:df:14:eb:a8:45:18:
         e9:71:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:41 2026 by rpki-client