Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          Kk8+EJ++qYz/B5d8yZpQjX18nb4p/lMlgb+tyWWAcn8=
Subject key identifier:   47:88:A6:E8:B4:A1:6B:BD:AD:76:EF:49:2F:6E:5A:CB:8B:BB:50:F1
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       4B9B8AEAA62063F1CF421CCEDBA6A9EFA0AE2401
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:33:48 +0000
ROA not before:           Fri 22 Aug 2025 21:28:48 +0000
ROA not after:            Fri 21 Aug 2026 21:33:48 +0000
asID:                     52706
IP address blocks:        177.126.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:8a:ea:a6:20:63:f1:cf:42:1c:ce:db:a6:a9:ef:a0:ae:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:28:48 2025 GMT
            Not After : Aug 21 21:33:48 2026 GMT
        Subject: CN=4788A6E8B4A16BBDAD76EF492F6E5ACB8BBB50F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:2f:fc:00:3b:76:22:de:3f:7f:d5:4c:e1:
                    bd:78:85:37:87:e1:2a:da:fd:db:98:f6:6c:f1:9f:
                    52:c6:aa:01:b4:bd:bf:8f:be:d4:2f:66:e9:63:8a:
                    0a:ca:f9:8f:91:aa:da:e9:81:03:7f:ae:5a:b3:ab:
                    4d:23:11:52:03:6e:1d:1b:c2:36:d9:bd:0e:fa:94:
                    12:5d:a9:6e:6d:cd:7d:cc:44:38:d3:b3:8b:ca:d4:
                    8c:92:e6:4a:5f:15:1e:6c:44:f9:c3:af:0b:6c:5e:
                    8c:85:da:a5:8a:70:59:8c:81:92:0f:91:d8:23:42:
                    48:7a:31:72:4d:c7:d0:aa:f8:bf:ec:db:4f:b7:51:
                    cd:24:79:0b:6f:ca:9d:1e:30:05:db:33:15:fe:3a:
                    08:a3:06:33:68:b1:ea:a6:16:32:d4:14:af:a9:ed:
                    eb:fc:65:f6:d7:3f:d3:b4:87:5b:be:e9:39:b0:ab:
                    38:f7:36:d5:29:c5:8a:88:a9:0a:43:af:52:c0:b6:
                    9b:87:09:2d:44:af:b2:46:d7:bf:ca:15:1f:4e:0a:
                    66:a7:c1:c7:43:d4:80:00:4b:91:53:36:86:a1:33:
                    18:39:15:98:98:3b:3a:04:83:85:7a:36:b3:89:5f:
                    36:67:cd:1a:ce:69:1f:2b:ea:4f:bd:44:c0:83:35:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:A6:E8:B4:A1:6B:BD:AD:76:EF:49:2F:6E:5A:CB:8B:BB:50:F1
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:18:45:86:75:c6:14:8a:09:98:ef:91:ee:ed:59:65:38:
         23:c0:16:cb:ed:59:2d:3a:82:01:67:fe:cf:d8:92:1d:ac:c0:
         e8:7a:86:46:c3:56:c0:41:34:3d:53:9d:52:3b:e4:7d:e0:3e:
         df:76:27:68:af:7f:bb:c4:fe:73:20:3e:93:27:b8:51:b6:91:
         25:74:2c:24:2c:99:95:bb:03:73:0f:10:dc:54:5b:68:51:72:
         4d:a5:81:29:de:30:0a:17:5a:a0:5f:4b:b3:8e:54:a2:b5:07:
         50:66:7e:98:9f:65:35:6b:f5:93:c6:af:93:e9:97:b2:6d:04:
         ac:a3:76:11:54:ec:66:b2:7f:87:33:77:85:9c:9b:f3:77:34:
         08:63:ed:9b:13:e2:94:aa:ae:f5:e5:09:86:fe:8e:25:12:3a:
         13:08:73:12:a3:00:a2:3b:73:13:26:3a:7b:29:56:52:1c:5d:
         f6:4e:3a:d4:08:af:c6:71:c6:a4:66:c9:21:4b:fb:42:e9:98:
         4e:57:b9:2d:2b:18:d4:a0:2f:bc:29:37:d4:51:1e:85:07:8e:
         04:6a:7b:6e:eb:0f:1d:a2:99:f5:1e:6b:18:9c:13:5e:ea:fb:
         61:f3:47:15:4f:c4:c9:ef:99:fa:46:65:0a:c9:fa:98:8f:8d:
         6d:20:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:35:20 2025 by rpki-client