Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32322d3232203d3e20323632393935.roa
File:                     3137372e37302e3234382e302f32322d3232203d3e20323632393935.roa (raw, json)
Hash identifier:          cEY8dxEy0oZbSWatmNqeYuw5sCKoTpwAH4/+rLDJS9U=
Subject key identifier:   FB:17:56:75:B1:FA:14:EC:BC:69:34:08:6B:0A:6F:1E:C7:1F:F1:F3
Certificate issuer:       /CN=8132D5957E193240246C2622115FA8F1706B3CE2
Certificate serial:       102211B096AA5496A9EA3C32E1C0B502BA39633D
Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32322d3232203d3e20323632393935.roa
Signing time:             Wed 29 Jul 2026 20:43:56 +0000
ROA not before:           Wed 29 Jul 2026 20:38:56 +0000
ROA not after:            Thu 29 Jul 2027 20:43:56 +0000
asID:                     262995
IP address blocks:        177.70.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl
                          rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:11:b0:96:aa:54:96:a9:ea:3c:32:e1:c0:b5:02:ba:39:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2
        Validity
            Not Before: Jul 29 20:38:56 2026 GMT
            Not After : Jul 29 20:43:56 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:f2:32:37:00:8e:9a:1f:10:3b:e8:34:c8:
                    34:bc:a2:90:b2:a3:ba:0e:08:30:e9:69:6b:94:6b:
                    c3:a9:d0:d7:d0:b5:fc:ee:03:90:70:1f:04:e7:44:
                    b7:e6:48:ab:ca:97:d1:3f:ce:85:1d:85:02:37:d2:
                    83:0e:6b:19:eb:28:dc:24:99:a7:89:64:50:e1:62:
                    7f:b3:fd:94:55:48:7c:3c:21:6b:91:2a:a2:c3:14:
                    3f:6b:9b:0d:7d:58:c0:22:4d:40:a3:3d:f9:79:58:
                    16:cd:7c:42:38:de:f6:84:c6:82:ce:e5:e8:a3:54:
                    8c:31:3a:51:4f:cd:03:b2:66:ca:39:aa:51:f4:30:
                    a4:31:49:46:c9:4e:77:b0:06:73:6c:bb:27:20:dc:
                    ff:a5:cc:cb:fb:8a:fe:8e:16:cd:d6:28:44:dd:ba:
                    e1:cd:7f:51:ac:61:9d:0b:47:cb:4f:85:3b:c8:8c:
                    20:e1:85:06:c9:96:13:fb:23:91:37:c4:ac:78:ee:
                    69:1b:71:5a:8f:63:83:cf:01:05:c5:38:19:30:63:
                    f1:90:e2:c5:3b:b3:ed:75:34:e1:1c:02:e8:23:bd:
                    9a:9b:7b:c1:9a:0a:66:84:f9:0c:2e:e7:27:e2:82:
                    70:15:53:de:18:cc:c4:5e:fa:50:b5:32:97:7c:9e:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:56:75:B1:FA:14:EC:BC:69:34:08:6B:0A:6F:1E:C7:1F:F1:F3
            X509v3 Authority Key Identifier:
                keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32322d3232203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:e5:fb:04:8f:da:c2:03:f9:f7:28:40:e0:15:12:7f:f8:
         4f:5c:51:3a:e0:60:7b:dc:b8:d0:77:a7:15:3e:29:fe:5a:42:
         05:05:59:3e:79:b6:22:60:59:49:9a:9b:99:ed:16:5f:db:c4:
         0c:fb:23:d8:89:ba:bc:eb:b1:e8:54:bf:3d:da:f4:b5:94:71:
         f1:1c:c6:52:52:80:5b:b9:b4:7f:62:6f:aa:13:56:41:7f:10:
         3f:ee:8e:91:9c:26:29:db:e4:1b:01:f0:fa:7b:ad:49:82:2f:
         9b:fa:0c:d4:98:98:02:e4:64:6e:bf:e8:10:21:a0:3d:2d:65:
         33:01:53:37:d2:80:6a:c9:d6:6e:06:57:62:12:03:d7:05:b2:
         fe:04:bb:80:e5:a9:94:27:fd:1d:19:50:af:df:3a:de:2a:f6:
         85:5f:2a:57:d1:f6:62:4b:1e:d8:f8:0b:52:8a:47:4e:4a:a6:
         e9:3a:0d:38:fb:c7:dc:3f:06:dc:59:85:9d:d8:eb:1e:61:99:
         82:df:8f:e5:c8:c2:a7:f0:63:ad:2e:b3:a3:63:15:d7:bd:f2:
         82:a3:20:0e:09:f5:3f:eb:5d:f8:c3:83:94:b0:88:5c:b1:6b:
         33:65:9e:ae:0d:3d:19:48:16:2e:9b:10:92:f5:3e:f7:fc:38:
         44:a3:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:16 2026 by rpki-client