Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32382e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          PrgZCn4LanacgrcNL2lFUYJAlgoEqq/iNwN+4k6awo4=
Subject key identifier:   26:27:40:99:38:14:C1:3D:50:74:83:4A:CB:1A:72:46:5C:90:6D:95
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       5E8B44D4A61BEAA8483D10A820BCDDB4E94AB232
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:18:44 +0000
ROA not before:           Fri 22 Aug 2025 18:13:44 +0000
ROA not after:            Fri 21 Aug 2026 18:18:44 +0000
asID:                     52706
IP address blocks:        177.126.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8b:44:d4:a6:1b:ea:a8:48:3d:10:a8:20:bc:dd:b4:e9:4a:b2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:13:44 2025 GMT
            Not After : Aug 21 18:18:44 2026 GMT
        Subject: CN=262740993814C13D5074834ACB1A72465C906D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:ff:6e:e1:f6:33:e8:54:15:46:e6:6d:5f:
                    aa:bf:1d:20:6f:94:ce:64:5b:fa:bd:49:53:6d:d7:
                    2b:ed:39:22:f1:17:e9:dd:97:77:6a:e4:dc:42:aa:
                    3d:9e:4e:d4:2c:5b:82:4f:8f:ee:b1:8b:39:9b:86:
                    2e:37:ec:96:9c:ae:9a:f2:50:d6:5f:e6:93:06:f1:
                    2b:07:fc:dc:46:7c:fc:b6:92:45:0f:28:f4:d7:36:
                    47:24:89:e7:16:5e:bc:0e:05:94:ad:ae:dd:5c:3a:
                    7e:a5:e0:6c:a7:da:a4:a2:b5:1a:cb:a8:e6:83:2f:
                    a5:9f:a0:08:18:49:3b:fb:87:1b:df:2e:76:9b:c0:
                    0a:b3:7b:5d:de:f9:5c:58:0a:61:bd:30:1e:fb:43:
                    10:23:2a:6a:29:f4:e5:65:9e:d4:40:71:a2:2a:0b:
                    b9:14:00:e8:a4:3a:c3:fb:2b:2d:c2:89:1e:eb:c0:
                    9d:15:88:cf:b0:d3:30:f9:13:bc:12:3d:e5:b4:d9:
                    be:57:b6:e2:94:da:44:b7:01:14:49:40:ec:82:76:
                    b6:88:cf:cb:7e:d1:09:de:81:3d:6f:cb:27:da:82:
                    53:5d:9a:90:a5:68:c2:8a:8c:8d:f5:35:33:1c:3d:
                    8e:66:73:17:52:e3:f6:cc:f5:69:93:8a:bf:e1:22:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:40:99:38:14:C1:3D:50:74:83:4A:CB:1A:72:46:5C:90:6D:95
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:18:07:16:42:b2:97:da:3b:16:b9:c9:86:f2:d5:59:60:d0:
         d0:d4:a0:7b:80:f4:7b:8d:0b:f5:28:b7:ec:80:89:cb:b8:07:
         66:a2:54:42:5d:8b:4e:4e:0e:ee:27:b5:7e:53:89:10:7a:83:
         da:a3:a6:8d:27:8b:02:b4:4b:27:0c:88:80:25:5d:19:d9:33:
         fe:df:cc:c8:aa:c1:ea:b4:05:0c:43:40:fa:f8:fe:0a:6f:a4:
         34:1c:96:5a:d5:32:33:2c:d4:9c:80:2d:6f:ad:d2:41:d8:09:
         5d:e5:0e:6a:b8:d5:b4:c0:dd:c1:ab:3c:54:0b:29:ad:ac:5b:
         d9:d9:e2:44:96:df:9e:23:41:61:63:f2:90:a2:6a:b3:9f:99:
         81:a1:85:f2:e8:3b:bc:24:25:74:5c:ab:c4:0a:19:c9:ba:ea:
         da:ee:77:23:13:b4:88:ee:6f:4f:56:3e:3c:1b:8b:85:13:a8:
         cd:5d:8d:47:e2:1d:99:1b:85:1a:51:8c:3c:73:26:42:2e:f0:
         f4:d1:7f:48:ed:9d:89:d6:1f:87:41:63:2d:de:99:4a:52:58:
         48:2a:1c:47:0e:aa:e9:2e:d6:20:8a:0e:90:e3:b6:1d:ff:c6:
         53:cd:d0:98:41:0b:78:7e:ad:17:36:39:0b:fd:7c:62:7c:52:
         b0:1a:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:04:50 2025 by rpki-client