Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135352e302f32342d3234203d3e20323633363530.roa
File:                     3137372e37342e3135352e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          PPzl/YXGm7KW+OvioufuW1D21VwnLA4H1ZcG6rXKYvM=
Subject key identifier:   AF:0A:44:04:A0:7C:8B:BE:B2:1D:C2:9E:F4:41:D4:6F:CE:50:B3:82
Certificate issuer:       /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial:       19156F5ABCB4C0E30D296576B7FB5D262584C9A1
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135352e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 17 Sep 2026 13:31:38 +0000
ROA not before:           Thu 17 Sep 2026 13:26:38 +0000
ROA not after:            Thu 16 Sep 2027 13:31:38 +0000
asID:                     263650
IP address blocks:        177.74.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:6f:5a:bc:b4:c0:e3:0d:29:65:76:b7:fb:5d:26:25:84:c9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
        Validity
            Not Before: Sep 17 13:26:38 2026 GMT
            Not After : Sep 16 13:31:38 2027 GMT
        Subject: CN=AF0A4404A07C8BBEB21DC29EF441D46FCE50B382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:ee:ed:23:04:f2:e8:95:ea:34:9e:27:e8:
                    1d:80:2d:8a:4c:fb:13:ac:b0:c6:b1:cc:46:0c:a5:
                    3f:c6:d9:11:c7:7d:f0:0f:45:32:36:65:90:88:b1:
                    a9:38:d7:25:ea:eb:0b:f9:77:1a:21:f2:fb:55:49:
                    2b:b1:8f:7f:81:a3:9c:a3:cb:f4:24:9c:c0:5e:79:
                    a7:e9:67:f3:7e:13:e5:d3:1a:85:21:fe:19:bb:ba:
                    af:81:2a:d5:f9:7f:75:09:af:53:76:b2:cc:0d:6f:
                    6f:94:8b:45:fc:48:41:a8:99:f3:16:48:44:ae:55:
                    7b:8b:ed:6c:05:b3:20:70:e0:65:e2:83:54:11:d9:
                    c8:ff:17:00:c3:ca:f0:d0:d2:fd:90:05:8c:5a:89:
                    b4:c4:cf:da:fe:dd:c2:e8:99:13:d4:ee:a6:7d:e3:
                    ee:18:ed:03:2d:79:ba:03:e4:11:57:88:d9:17:df:
                    02:a1:71:f1:6c:cb:e4:70:3d:15:c9:04:46:00:48:
                    6d:35:52:ad:2b:a5:19:51:d8:7d:73:9f:8f:37:ad:
                    14:7f:13:55:22:e3:fc:02:bf:22:e5:76:16:b4:7b:
                    43:9d:58:09:1a:3d:13:89:d4:73:f0:e7:0b:ce:0b:
                    a1:75:e4:1b:e6:5a:c7:3f:b9:6d:9a:e7:02:e3:d3:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:44:04:A0:7C:8B:BE:B2:1D:C2:9E:F4:41:D4:6F:CE:50:B3:82
            X509v3 Authority Key Identifier:
                keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135352e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:19:fb:d7:62:08:d6:7c:b6:27:e2:7a:c0:16:92:92:17:
         6c:8d:48:d3:e1:da:27:2a:91:72:28:9f:98:3d:a6:10:b2:3f:
         00:fb:b0:6e:3e:90:2e:17:ce:d6:ed:48:13:c7:09:97:7d:ad:
         2e:27:ab:76:09:9e:11:d6:66:f5:27:d5:36:ce:ac:4a:bd:96:
         16:db:5a:47:a9:e3:d3:ae:3b:af:f5:20:66:8e:bb:50:bd:27:
         5a:6c:22:fc:6e:c8:18:dc:51:d7:41:17:48:0d:a7:ec:e6:6e:
         22:06:cf:c6:47:cb:50:57:d3:31:cb:c8:9e:9c:7d:54:9c:0c:
         24:2d:17:6e:c4:4f:06:97:27:9f:11:64:4b:be:2d:0e:a7:30:
         cf:d3:42:ad:99:67:1c:b5:1e:d6:2f:aa:74:5e:cc:f8:35:84:
         6f:20:e0:47:9d:70:e8:37:fc:ed:43:3c:6e:39:61:15:34:f2:
         2f:4c:41:6f:67:d8:92:85:78:24:89:1c:e2:3e:35:4a:4f:be:
         58:14:b0:b7:28:a5:84:80:30:5c:66:f1:98:2c:e8:6a:aa:df:
         3d:ee:c0:42:5c:4d:cf:e7:68:20:3a:55:38:79:74:75:6b:00:
         d4:f3:7d:3b:a0:e3:43:a4:63:49:82:2a:8c:aa:b2:33:e6:4f:
         29:25:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:13:16 2026 by rpki-client