Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39322e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e39322e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          JXv9eTZrC3t3dDBHqV1v/O3l0sze7Spc4c3+3H4BB5Y=
Subject key identifier:   F7:45:0E:FC:0E:2D:33:F1:0F:7C:E9:49:FD:47:7F:70:E1:B0:1E:FD
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       37D4D7686D073C9D93E71DD3E2454EE12414C2CD
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39322e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:23 +0000
ROA not before:           Fri 28 Aug 2026 19:01:23 +0000
ROA not after:            Fri 27 Aug 2027 19:06:23 +0000
asID:                     262369
IP address blocks:        177.130.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:d7:68:6d:07:3c:9d:93:e7:1d:d3:e2:45:4e:e1:24:14:c2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:23 2026 GMT
            Not After : Aug 27 19:06:23 2027 GMT
        Subject: CN=F7450EFC0E2D33F10F7CE949FD477F70E1B01EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:cb:7f:c8:a6:1e:d9:9f:94:7a:33:89:5f:
                    57:aa:0a:f7:54:3a:d7:0b:b3:d6:70:9a:7f:ca:0c:
                    9a:05:32:25:0f:ed:95:f5:78:ec:fc:8d:bd:87:b3:
                    5e:c2:21:f9:36:fc:94:ad:f0:9c:d5:3a:d5:4e:08:
                    0f:42:09:48:7e:05:8f:1a:ab:ff:0f:3f:26:aa:45:
                    42:1b:3b:b9:38:36:49:cc:1d:5c:dc:bd:08:cc:de:
                    b7:06:6d:93:76:ba:f0:99:e7:b1:33:d7:77:51:e3:
                    73:68:d6:f4:e4:ac:d9:ad:dd:7e:02:28:ed:38:dd:
                    df:fc:a1:3c:28:c2:3b:b3:19:82:1f:0f:f3:ca:f6:
                    c7:44:dd:5d:d8:e5:86:3b:97:45:21:d9:fa:30:ed:
                    2d:32:2d:cc:f5:d3:dd:38:f7:55:e9:33:a9:e2:fd:
                    12:06:86:48:02:e7:a3:41:1a:df:b0:d7:7a:80:ec:
                    3e:df:8f:1e:17:ae:79:78:11:c4:2c:64:14:b7:a8:
                    76:8c:7a:eb:22:68:ca:ad:75:d9:4f:a8:6c:83:3e:
                    3c:7f:b5:d4:81:d9:e1:ea:27:b4:28:d4:81:cb:05:
                    29:bf:85:9f:29:8d:e1:c8:e6:42:d7:27:05:05:e9:
                    5a:9a:43:a4:c0:f0:c8:60:ea:14:ec:bb:9b:e4:73:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:0E:FC:0E:2D:33:F1:0F:7C:E9:49:FD:47:7F:70:E1:B0:1E:FD
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39322e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:15:b8:aa:c8:38:c4:a1:0d:ec:26:82:26:08:7c:8a:7a:80:
         b0:6a:83:d4:4c:fa:47:31:ff:54:ea:ed:a1:79:72:e0:2b:32:
         c7:5d:c5:fc:be:ce:22:e3:f7:fe:fb:e1:3e:fd:a9:ce:02:8b:
         c8:7e:d3:24:c5:e8:25:34:3f:be:58:64:eb:68:a3:85:3e:6a:
         29:d5:74:1c:ac:3e:17:29:98:43:5d:32:f4:ad:2e:9d:ad:1a:
         c9:f9:63:fd:ed:25:9d:b5:94:7b:69:f3:9d:0c:fe:c3:f0:59:
         80:ee:1d:e9:bf:4e:2c:69:ab:ad:c6:42:3f:b8:c5:8d:88:dd:
         e1:53:d9:57:ac:54:1a:05:41:85:d8:52:3c:59:cd:62:a4:8a:
         00:c2:cb:8e:ac:41:f5:0b:ea:57:d3:72:25:b1:41:d9:5f:1f:
         22:51:00:e6:57:48:fc:fb:41:ff:dc:b1:88:e1:10:a6:4c:c0:
         81:6e:34:65:91:97:a7:c1:ff:83:31:99:b1:0e:b5:12:79:08:
         a1:5e:e8:41:a9:69:2d:c2:c7:66:e6:ab:a0:b5:e9:df:5b:7b:
         b4:09:5d:f5:5b:94:99:93:3e:09:97:8f:c1:63:ed:02:f6:84:
         a6:86:6b:11:e9:ee:65:43:92:90:cc:c9:12:b2:1f:ac:4a:38:
         25:0d:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:45:33 2026 by rpki-client