Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3233203d3e20323730353833.roa
File:                     3137372e382e3134302e302f32322d3233203d3e20323730353833.roa (raw, json)
Hash identifier:          8oYMIBTz8NeOXUXyrk3hETAptxng+4DN3VfOiDsgDQo=
Subject key identifier:   87:1F:92:B8:D3:F8:C9:F1:C4:E7:2F:12:77:DD:92:58:AB:BD:E8:41
Certificate issuer:       /CN=0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F
Certificate serial:       6E621CF94FB37430DB6E818574D7458E769C7D90
Authority key identifier: 0E:C1:34:D9:F0:B5:5F:BB:DB:CE:B1:1F:F7:67:EE:4B:93:3F:9C:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3233203d3e20323730353833.roa
Signing time:             Thu 30 Jul 2026 01:56:17 +0000
ROA not before:           Thu 30 Jul 2026 01:51:17 +0000
ROA not after:            Thu 29 Jul 2027 01:56:17 +0000
asID:                     270583
IP address blocks:        177.8.140.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.crl
                          rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:1c:f9:4f:b3:74:30:db:6e:81:85:74:d7:45:8e:76:9c:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F
        Validity
            Not Before: Jul 30 01:51:17 2026 GMT
            Not After : Jul 29 01:56:17 2027 GMT
        Subject: CN=871F92B8D3F8C9F1C4E72F1277DD9258ABBDE841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:4b:de:3f:bf:6e:08:d1:17:6a:df:80:67:
                    ce:49:61:28:24:19:f9:94:87:5e:1a:e4:28:4d:e8:
                    2b:51:04:1e:b8:42:73:71:3c:93:f7:00:f3:db:d5:
                    bd:39:d5:ba:c4:41:95:e2:72:93:b3:1d:25:18:a6:
                    82:95:12:65:22:56:38:26:b4:f0:bd:ad:63:90:15:
                    6e:b8:09:03:3f:6a:73:4c:c9:70:5d:67:54:e7:db:
                    06:32:19:d1:50:d1:cb:a8:13:8d:0e:bf:74:89:b8:
                    c0:35:e2:d9:64:e5:3c:6b:e6:75:f8:03:b7:3c:54:
                    77:a0:66:08:4a:d1:33:f9:85:3e:ff:b9:ab:cf:32:
                    b2:25:e1:f5:5f:46:54:54:92:5e:f1:90:db:aa:91:
                    a8:23:00:cd:40:37:0e:14:2c:6a:38:70:ce:7b:3c:
                    bf:04:5c:48:e2:83:37:68:aa:00:54:0b:9b:97:fa:
                    40:c0:25:3f:24:27:0f:3e:f1:a3:ad:66:1f:87:89:
                    38:52:f5:79:fa:8d:2d:ba:3d:9a:b8:a8:c7:b6:81:
                    d8:3d:83:10:9b:b3:1b:60:b1:57:75:2f:90:59:f4:
                    12:da:22:b5:51:f6:a2:6f:70:76:91:cc:68:e4:b3:
                    9a:55:ee:ba:3f:bc:4c:33:dd:d8:6d:97:54:32:8a:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:92:B8:D3:F8:C9:F1:C4:E7:2F:12:77:DD:92:58:AB:BD:E8:41
            X509v3 Authority Key Identifier:
                keyid:0E:C1:34:D9:F0:B5:5F:BB:DB:CE:B1:1F:F7:67:EE:4B:93:3F:9C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3233203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:42:35:2e:28:4a:91:0f:b8:ba:6a:49:92:9d:6a:a8:24:77:
         61:0b:47:20:7a:d5:59:32:40:76:68:9a:50:88:85:27:61:60:
         03:ec:91:73:d7:3c:ee:05:57:eb:e9:61:47:4c:84:31:83:13:
         7d:c5:c0:83:ea:fa:e5:ce:64:81:04:51:c1:d9:da:55:25:a2:
         a0:49:43:59:05:7f:2d:8b:5a:3b:b1:ca:a8:98:60:d1:ba:3e:
         8b:23:44:7d:59:a9:4f:ee:94:d6:00:ad:0f:67:c9:78:cd:e9:
         9b:b1:7e:f8:11:a9:72:ff:eb:5e:0c:59:26:13:08:5d:17:db:
         35:18:0f:ef:4c:38:68:4b:a2:18:f9:6c:4f:eb:2f:a1:58:51:
         9c:18:dc:07:e3:f6:31:51:7f:f4:0d:53:05:d2:26:8e:39:8b:
         18:f9:ce:9c:9e:ea:2b:fd:57:5a:2a:9c:60:fe:c1:84:e4:89:
         64:67:e9:ab:7a:1d:66:b8:82:8b:37:68:1d:8f:b6:67:a0:ec:
         a6:2e:0b:fa:1b:94:e2:c8:ce:3b:91:d4:90:84:a3:27:c3:0f:
         78:46:08:12:82:47:0e:b3:69:01:ca:0c:f2:53:4c:d5:a4:96:
         e5:56:4a:6f:b3:9c:ed:a6:2f:2f:09:4c:36:a7:a4:b2:bb:d9:
         1e:e8:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:35 2026 by rpki-client