Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31362e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          vdZ2BxBw3+Dfpii0G3N1TMW1JtkD08QxZns0km/vdgw=
Subject key identifier:   F3:10:FB:60:25:77:6A:7C:3B:2E:0E:20:B1:35:D6:CA:01:66:0F:F7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       7349F56FA04BEFC3DA0E68C47A89DB9A52B5FF83
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:32:08 +0000
ROA not before:           Fri 22 Aug 2025 21:27:08 +0000
ROA not after:            Fri 21 Aug 2026 21:32:08 +0000
asID:                     52706
IP address blocks:        177.126.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:49:f5:6f:a0:4b:ef:c3:da:0e:68:c4:7a:89:db:9a:52:b5:ff:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:27:08 2025 GMT
            Not After : Aug 21 21:32:08 2026 GMT
        Subject: CN=F310FB6025776A7C3B2E0E20B135D6CA01660FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:49:22:26:72:a7:01:19:ab:48:14:78:ca:76:
                    65:34:e2:3b:56:59:57:e8:11:40:72:a0:90:7d:ba:
                    7b:9c:19:2e:13:93:74:05:ee:b8:b1:b9:48:69:86:
                    07:d3:97:e2:84:3a:fb:41:a6:7f:9f:bc:22:a4:86:
                    9c:82:55:53:83:ad:21:b6:c8:23:60:5c:d8:66:c9:
                    15:b6:ff:5a:9b:0d:a8:4b:e7:61:d7:82:9d:e0:87:
                    58:15:5a:68:b9:a3:d0:e6:80:3e:99:4d:93:d6:d3:
                    4c:36:d7:eb:1b:03:1c:30:26:4d:73:c8:3e:1d:e3:
                    23:6c:ad:94:15:2d:66:3a:c6:18:ea:d8:20:8c:ad:
                    4e:2a:cd:63:f2:cf:1d:fb:5e:cf:2d:32:d5:90:36:
                    d3:8d:ca:87:82:99:63:6a:ef:71:bb:11:05:7b:3d:
                    1c:a7:c2:c8:f4:e0:c2:22:0e:61:51:7f:a5:64:76:
                    49:46:c2:ff:cb:65:6d:bb:37:4c:03:07:7e:37:e3:
                    04:b3:62:62:f6:3d:e5:22:3d:ad:65:9b:45:31:af:
                    62:14:a8:a1:14:5b:85:df:25:0a:b8:c5:51:d8:87:
                    17:51:0f:2d:ab:1f:14:8f:d1:c3:0c:51:41:ca:0c:
                    3f:8e:03:46:bd:e2:f4:ae:84:2e:0b:fd:19:66:7a:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:FB:60:25:77:6A:7C:3B:2E:0E:20:B1:35:D6:CA:01:66:0F:F7
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:37:ac:45:78:e7:20:0d:51:dc:17:a5:cf:e4:9e:8c:fd:
         81:ab:fd:30:b2:2c:df:95:9e:67:8c:b4:10:17:4e:d1:2b:8d:
         cc:4e:88:69:22:fe:f6:e8:31:d3:aa:2b:1f:ab:2d:a5:13:33:
         80:8b:83:f0:30:05:5b:51:1e:77:c9:b3:bc:9b:1a:db:4c:e8:
         1a:01:0d:ea:eb:24:f7:9d:a3:de:fa:d5:4c:7e:f4:5e:92:f9:
         82:64:0a:ba:da:c0:ac:8c:e0:30:fd:5e:3f:f5:e0:a8:51:c5:
         cb:89:a0:ff:3c:3b:d2:0a:80:5a:79:23:09:4e:a5:19:04:e2:
         66:7b:75:b9:be:c8:05:de:98:6b:0c:94:3c:f0:dd:a4:24:e7:
         ab:d3:19:c4:e8:08:01:25:61:0b:51:4a:19:55:24:69:4a:84:
         a5:0c:ef:d7:c7:0b:97:e6:94:6b:c4:6e:32:06:f7:e9:b4:af:
         55:a8:de:98:40:c6:0f:26:0c:2a:43:2e:c8:ae:65:66:be:a0:
         3f:a1:a5:5f:b5:f6:5d:a1:c7:d5:6b:27:c0:ef:55:fc:90:e6:
         11:f0:3c:ae:a0:d5:fc:3d:73:4c:92:2d:d2:de:36:ee:23:a9:
         48:25:c9:2e:ec:ee:a2:ec:24:e4:18:21:b1:5e:d1:c4:4f:ea:
         b3:62:a5:56
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc0n1b6BL78PaDmjEeonbmlK1/4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIyMTI3MDhaFw0yNjA4MjEyMTMyMDhaMDMxMTAvBgNV
BAMTKEYzMTBGQjYwMjU3NzZBN0MzQjJFMEUyMEIxMzVENkNBMDE2NjBGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSSImcqcBGatIFHjKdmU04jtW
WVfoEUByoJB9unucGS4Tk3QF7rixuUhphgfTl+KEOvtBpn+fvCKkhpyCVVODrSG2
yCNgXNhmyRW2/1qbDahL52HXgp3gh1gVWmi5o9DmgD6ZTZPW00w21+sbAxwwJk1z
yD4d4yNsrZQVLWY6xhjq2CCMrU4qzWPyzx37Xs8tMtWQNtONyoeCmWNq73G7EQV7
PRynwsj04MIiDmFRf6VkdklGwv/LZW27N0wDB3434wSzYmL2PeUiPa1lm0Uxr2IU
qKEUW4XfJQq4xVHYhxdRDy2rHxSP0cMMUUHKDD+OA0a94vSuhC4L/RlmekzjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8xD7YCV3anw7Lg4gsTXWygFmD/cwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4QMA0GCSqGSIb3DQEBCwUAA4IBAQAB1zesRXjn
IA1R3Belz+SejP2Bq/0wsizflZ5njLQQF07RK43MTohpIv726DHTqisfqy2lEzOA
i4PwMAVbUR53ybO8mxrbTOgaAQ3q6yT3naPe+tVMfvRekvmCZAq62sCsjOAw/V4/
9eCoUcXLiaD/PDvSCoBaeSMJTqUZBOJme3W5vsgF3phrDJQ88N2kJOer0xnE6AgB
JWELUUoZVSRpSoSlDO/XxwuX5pRrxG4yBvfptK9VqN6YQMYPJgwqQy7IrmVmvqA/
oaVftfZdocfVayfA71X8kOYR8DyuoNX8PXNMki3S3jbuI6lIJcku7O6i7CTkGCGx
XtHET+qzYqVW
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:20:40 2025 by rpki-client