Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31372e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31372e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          FSKfan8C2Vyqcxvo9UDmVFNew9Dv9vqlYB1cf4KKnTI=
Subject key identifier:   2B:7D:C3:33:FA:C3:5A:C8:2D:BF:0C:F1:CE:CE:C9:EA:41:3A:57:50
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       48945302A8B114980C8556049172CF0EA579E2FC
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31372e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:32:24 +0000
ROA not before:           Fri 22 Aug 2025 21:27:24 +0000
ROA not after:            Fri 21 Aug 2026 21:32:24 +0000
asID:                     52706
IP address blocks:        177.126.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:94:53:02:a8:b1:14:98:0c:85:56:04:91:72:cf:0e:a5:79:e2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:27:24 2025 GMT
            Not After : Aug 21 21:32:24 2026 GMT
        Subject: CN=2B7DC333FAC35AC82DBF0CF1CECEC9EA413A5750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9b:b0:2b:78:d5:54:99:a5:52:cf:2a:04:4b:
                    b3:dd:e0:1c:68:a7:c9:5f:f9:18:af:10:43:02:64:
                    19:97:44:f8:06:98:b1:a3:a2:80:a2:14:20:60:c4:
                    fa:1f:bc:19:4d:af:33:27:bc:38:ec:d7:fd:88:cc:
                    2d:27:66:41:75:bd:e7:4e:dd:41:c5:1a:a1:82:ea:
                    58:60:80:35:61:ed:ee:6c:e1:82:5c:9f:55:14:03:
                    4d:01:b8:d0:2f:48:b0:c5:94:f0:d3:bb:50:3f:72:
                    3c:9e:07:6c:02:20:bd:d9:78:21:b6:a7:f4:a3:46:
                    94:65:20:f1:a1:84:36:3a:54:d9:20:47:a0:40:f1:
                    24:58:39:bf:5e:42:f3:48:54:4d:cb:80:ff:ad:27:
                    87:5c:0c:4a:04:02:15:b1:1b:65:55:2f:22:11:ae:
                    58:c1:1b:14:a7:df:20:54:73:61:bd:34:38:01:da:
                    74:c4:c3:f3:5a:e3:f5:82:5c:37:48:f1:cb:cf:05:
                    06:29:25:08:d6:a8:ab:3d:73:4a:49:13:db:45:55:
                    22:71:ed:a1:3d:aa:f7:8c:18:94:53:24:a1:db:88:
                    5a:07:d4:42:93:a1:99:ea:63:e4:7f:e2:89:a5:c0:
                    43:41:e0:b6:5d:01:e0:e5:48:16:34:c3:aa:2f:18:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:C3:33:FA:C3:5A:C8:2D:BF:0C:F1:CE:CE:C9:EA:41:3A:57:50
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31372e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:61:8d:91:5e:45:b3:a2:2f:be:bb:7b:0c:f4:e9:ff:47:94:
         4b:52:94:7d:a0:49:dc:cd:cd:3a:1e:97:ba:97:e4:74:24:c4:
         44:04:bd:f3:d4:44:48:03:e3:a3:ce:50:a1:e0:a7:b2:95:01:
         da:e6:a8:12:20:d2:ef:e0:bc:0a:e2:5e:97:2a:8a:2b:26:71:
         fd:94:07:8b:78:60:da:12:08:23:79:fc:ce:e3:3b:38:1f:cb:
         11:f5:6d:23:1b:89:6e:92:2d:59:5e:c7:7f:ac:0f:da:16:b5:
         1f:d6:e1:23:6b:18:c4:bf:5e:f6:e4:f4:1f:96:aa:90:84:48:
         2f:a3:64:6d:24:1e:c6:f3:1e:6a:10:0b:e5:d8:ef:9f:8e:6c:
         37:53:c8:75:d6:44:e0:25:13:66:8d:d1:79:9a:46:af:44:d8:
         a2:ab:0c:c5:13:0b:f5:d2:3d:8b:6c:c9:a8:06:cc:0e:41:95:
         69:66:13:6e:82:f4:26:a8:57:70:39:60:a3:91:54:06:ff:d5:
         5f:ed:c2:44:1a:88:64:fd:24:77:bc:e9:31:d1:4e:2b:b9:44:
         ee:a1:3a:be:e8:fd:55:20:5a:91:13:dd:31:51:fa:f9:ec:77:
         42:b6:15:65:ff:54:ff:a9:dd:ef:8b:5f:cf:e9:a3:b1:45:b5:
         42:d5:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:59:26 2025 by rpki-client