Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32342d3234203d3e20323633313239.roa
File:                     3137372e3135352e38362e302f32342d3234203d3e20323633313239.roa (raw, json)
Hash identifier:          kk9jzAYEOR4VYQinhwW5mJC6S9PhGzY4xYUV2NPF36c=
Subject key identifier:   B0:94:A3:3E:F1:F9:7C:21:81:DE:3D:8F:6F:49:33:AA:0E:BB:97:F0
Certificate issuer:       /CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
Certificate serial:       449F2AA125BAECC759E255AA263D775D497FD4D1
Authority key identifier: AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32342d3234203d3e20323633313239.roa
Signing time:             Fri 18 Sep 2026 11:56:37 +0000
ROA not before:           Fri 18 Sep 2026 11:51:37 +0000
ROA not after:            Fri 17 Sep 2027 11:56:37 +0000
asID:                     263129
IP address blocks:        177.155.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl
                          rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:2a:a1:25:ba:ec:c7:59:e2:55:aa:26:3d:77:5d:49:7f:d4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
        Validity
            Not Before: Sep 18 11:51:37 2026 GMT
            Not After : Sep 17 11:56:37 2027 GMT
        Subject: CN=B094A33EF1F97C2181DE3D8F6F4933AA0EBB97F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:3b:cf:f6:59:51:21:f5:04:0c:33:29:2d:
                    d6:1f:f2:d9:2c:ac:02:7e:f6:13:19:47:5d:81:7f:
                    f2:a2:96:29:18:e9:af:01:56:e1:18:97:7b:b9:b7:
                    01:cb:cc:68:7a:b1:ff:bb:59:82:05:35:2d:a5:60:
                    a2:ed:b0:ed:49:52:61:53:b2:d5:b1:ae:9b:f2:d0:
                    85:f8:e6:7b:df:24:57:89:db:f2:ef:34:4e:74:07:
                    dd:fd:09:51:d4:4a:45:a2:2b:db:3a:02:2e:d8:d3:
                    2d:c9:32:8d:91:0d:21:ca:e2:db:87:31:aa:93:fe:
                    f4:26:6d:32:c4:4a:60:ba:f8:3c:d7:7e:0f:a5:09:
                    7c:78:c8:30:8f:66:04:c8:bc:bd:3b:7f:d1:9f:af:
                    b1:c5:7d:b9:69:4b:11:ed:95:85:6a:1b:22:a5:15:
                    d6:6e:54:ac:f9:8f:4b:11:97:d7:a5:39:0d:df:9f:
                    4f:92:96:dc:9b:ec:0a:b0:ab:64:16:7c:91:39:bf:
                    81:c7:63:b7:d8:1b:00:61:f4:31:11:29:dd:0e:79:
                    88:76:71:84:6e:13:4e:ea:b5:20:85:27:d0:bd:a1:
                    85:40:ed:cd:23:a2:30:9a:ea:af:e3:df:19:0e:d3:
                    65:02:af:c9:c4:c3:9a:64:49:16:7a:08:70:c8:a1:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:A3:3E:F1:F9:7C:21:81:DE:3D:8F:6F:49:33:AA:0E:BB:97:F0
            X509v3 Authority Key Identifier:
                keyid:AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38362e302f32342d3234203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:b7:71:e9:c2:4f:b1:87:e6:ec:d9:1f:c2:24:01:14:93:
         00:a3:2e:29:98:38:18:c7:ee:92:9d:27:15:ac:1c:5c:3e:53:
         2d:91:09:86:31:cc:ba:ba:ed:36:f3:22:d2:3c:5e:04:f5:92:
         13:d7:81:33:8e:1c:f5:7f:19:cb:64:4a:a0:ce:5a:6a:87:d5:
         ab:44:29:d4:0a:74:26:02:29:e4:1d:ec:61:ba:a9:f4:74:22:
         fc:0a:73:a6:de:2f:8e:79:99:3a:4f:40:87:72:23:82:37:81:
         a1:4b:8b:74:72:3d:d1:f9:4e:04:4b:5d:5b:3a:b8:8e:fd:7c:
         4d:54:40:69:e1:2c:6d:cf:bd:58:03:39:1e:bb:e4:ff:2a:6f:
         ea:6e:d3:33:cd:3a:50:95:ea:24:ee:0c:4f:93:e4:2f:76:38:
         ea:85:54:67:46:85:84:80:ea:49:51:22:a8:40:fe:3d:9d:09:
         3b:14:6b:ca:2e:f8:f2:a0:6a:30:f5:1b:af:e8:71:4e:2e:80:
         7a:cb:a0:d8:59:fe:87:1f:ba:ed:3d:0b:73:5c:10:d7:84:7a:
         12:e2:39:9b:eb:97:62:e1:12:d9:0b:e4:d9:51:b2:e2:5b:0e:
         68:0f:39:02:ee:eb:b4:b6:84:cd:b7:fe:05:f2:3f:8b:cb:06:
         9a:71:c5:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURJ8qoSW67MdZ4lWqJj13XUl/1NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY1MEY2MzhDRjI1MjcyNDAzRTNCRTM1MjdFNkU4NEZF
Njg1RkJFNzAeFw0yNjA5MTgxMTUxMzdaFw0yNzA5MTcxMTU2MzdaMDMxMTAvBgNV
BAMTKEIwOTRBMzNFRjFGOTdDMjE4MURFM0Q4RjZGNDkzM0FBMEVCQjk3RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUDvP9llRIfUEDDMpLdYf8tks
rAJ+9hMZR12Bf/KilikY6a8BVuEYl3u5twHLzGh6sf+7WYIFNS2lYKLtsO1JUmFT
stWxrpvy0IX45nvfJFeJ2/LvNE50B939CVHUSkWiK9s6Ai7Y0y3JMo2RDSHK4tuH
MaqT/vQmbTLESmC6+DzXfg+lCXx4yDCPZgTIvL07f9Gfr7HFfblpSxHtlYVqGyKl
FdZuVKz5j0sRl9elOQ3fn0+Sltyb7Aqwq2QWfJE5v4HHY7fYGwBh9DERKd0OeYh2
cYRuE07qtSCFJ9C9oYVA7c0jojCa6q/j3xkO02UCr8nEw5pkSRZ6CHDIobxRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsJSjPvH5fCGB3j2Pb0kzqg67l/AwHwYDVR0j
BBgwFoAUr1D2OM8lJyQD4741J+boT+aF++cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK
bW8vMC9BRjUwRjYzOENGMjUyNzI0MDNFM0JFMzUyN0U2RTg0RkU2ODVGQkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNTBGNjM4Q0YyNTI3MjQw
M0UzQkUzNTI3RTZFODRGRTY4NUZCRTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5WmhtS1RMaEdlWVY5cU52dW5LMVl3QlpqenFwQlpOdnZxRmVGV3M2Sm1vLzAv
MzEzNzM3MmUzMTM1MzUyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxm1YwDQYJKoZIhvcNAQELBQADggEBAI0tt3Hp
wk+xh+bs2R/CJAEUkwCjLimYOBjH7pKdJxWsHFw+Uy2RCYYxzLq67TbzItI8XgT1
khPXgTOOHPV/GctkSqDOWmqH1atEKdQKdCYCKeQd7GG6qfR0IvwKc6beL455mTpP
QIdyI4I3gaFLi3RyPdH5TgRLXVs6uI79fE1UQGnhLG3PvVgDOR675P8qb+pu0zPN
OlCV6iTuDE+T5C92OOqFVGdGhYSA6klRIqhA/j2dCTsUa8ou+PKgajD1G6/ocU4u
gHrLoNhZ/ocfuu09C3NcENeEehLiOZvrl2LhEtkL5NlRsuJbDmgPOQLu67S2hM23
/gXyP4vLBppxxUM=
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:31:46 2026 by rpki-client