Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32342d3234203d3e203532373632.roa
File:                     3137372e32332e32382e302f32342d3234203d3e203532373632.roa (raw, json)
Hash identifier:          BmIj6dafpH+TJkSL4mEvf19YXC7Zz/7sJp9keUuFOZQ=
Subject key identifier:   DC:36:D7:AB:4B:C6:A4:C5:7D:62:86:0C:08:9E:F9:11:86:CF:9D:31
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       60A7567A56EC508CE3860380575C590F0D370496
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32342d3234203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:33 +0000
ROA not before:           Thu 06 Aug 2026 13:31:33 +0000
ROA not after:            Thu 05 Aug 2027 13:36:33 +0000
asID:                     52762
IP address blocks:        177.23.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a7:56:7a:56:ec:50:8c:e3:86:03:80:57:5c:59:0f:0d:37:04:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:33 2026 GMT
            Not After : Aug  5 13:36:33 2027 GMT
        Subject: CN=DC36D7AB4BC6A4C57D62860C089EF91186CF9D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:87:54:b5:19:43:83:e4:bc:1a:9b:93:c6:
                    a2:9d:b3:91:5b:a9:c3:5b:0a:3f:3c:37:83:7f:36:
                    00:89:ff:c3:16:9e:d2:d5:e0:a3:29:df:86:69:9e:
                    35:a0:1b:88:f3:f4:16:f2:c1:db:2a:39:d3:48:25:
                    ee:e8:cf:d1:88:ab:60:0a:20:7c:24:76:26:50:d8:
                    87:fe:ab:11:93:f0:9f:40:8f:39:8e:91:29:c8:da:
                    1c:3a:50:c0:54:8e:ad:6f:90:72:a4:f2:82:1d:a8:
                    d3:eb:db:61:8b:c0:8c:fa:55:5e:70:86:40:26:5d:
                    06:bf:f1:91:9e:58:0b:fc:b9:42:85:b6:b6:a3:3a:
                    f8:51:43:ef:2c:1d:74:9c:e3:58:89:92:05:33:d2:
                    e5:54:84:b7:26:4d:a2:42:11:71:c4:80:1c:b0:b8:
                    c2:46:c9:6b:3e:cb:26:27:b9:cd:cc:3e:c2:5f:65:
                    06:c2:61:0f:44:79:4e:a9:2f:95:d0:0e:bd:84:71:
                    42:58:20:d1:5d:e4:25:60:f5:b7:af:f9:34:c6:71:
                    af:23:bd:4d:03:a8:32:af:26:31:b2:57:0b:d9:9f:
                    ab:02:1d:75:82:c6:33:c1:87:8b:6e:71:3a:55:05:
                    89:61:72:30:95:72:01:cd:ec:a4:f2:ee:1e:d8:ad:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:D7:AB:4B:C6:A4:C5:7D:62:86:0C:08:9E:F9:11:86:CF:9D:31
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32342d3234203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:8a:c5:cf:c8:5a:19:50:43:a4:af:af:ca:b5:fc:6c:c2:54:
         da:dc:16:9f:fe:11:54:15:64:16:1c:b8:cf:25:84:f3:28:38:
         be:be:46:70:cf:f7:6d:c5:4d:de:74:71:bd:68:59:3a:4f:d6:
         1d:53:d8:cd:57:68:77:73:31:43:10:f9:4e:7c:d0:5d:90:43:
         17:dc:f9:2e:53:2e:f1:55:d7:2e:bc:d7:91:9c:f3:00:c9:03:
         b2:6f:aa:0f:bb:29:82:75:9a:e5:f8:c5:ed:00:5a:08:1b:be:
         7d:7c:b3:9d:62:af:c9:c8:5b:c4:75:00:81:48:21:5c:7d:07:
         ea:b8:ff:4c:5c:66:ca:ba:83:0b:ff:0f:92:6e:48:24:1b:4d:
         50:b1:bd:15:c6:cc:6e:52:7f:56:80:60:27:7d:fb:2c:1c:49:
         f1:9c:74:b9:72:76:a6:80:0a:a0:11:e5:1f:9f:a3:b0:af:1f:
         c6:4f:8d:cd:9a:81:e9:73:66:7b:64:e1:8f:df:f7:e5:ff:a6:
         7d:73:4b:d7:ea:ce:5e:df:31:9c:b8:c7:a5:e1:9f:5c:d2:62:
         32:04:c6:b4:0e:d5:bc:78:c5:79:a9:32:66:0b:da:f5:56:6a:
         76:a1:d1:1a:56:64:cf:b0:bb:69:b8:db:d1:f2:d7:b1:b9:7c:
         91:af:10:39
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYKdWelbsUIzjhgOAV1xZDw03BJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMzExNzE1OTI4MDBBRTZEOUFENENGRjNGQzgxMjBF
QUYxOTIwQjAeFw0yNjA4MDYxMzMxMzNaFw0yNzA4MDUxMzM2MzNaMDMxMTAvBgNV
BAMTKERDMzZEN0FCNEJDNkE0QzU3RDYyODYwQzA4OUVGOTExODZDRjlEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CodUtRlDg+S8GpuTxqKds5Fb
qcNbCj88N4N/NgCJ/8MWntLV4KMp34ZpnjWgG4jz9BbywdsqOdNIJe7oz9GIq2AK
IHwkdiZQ2If+qxGT8J9AjzmOkSnI2hw6UMBUjq1vkHKk8oIdqNPr22GLwIz6VV5w
hkAmXQa/8ZGeWAv8uUKFtrajOvhRQ+8sHXSc41iJkgUz0uVUhLcmTaJCEXHEgByw
uMJGyWs+yyYnuc3MPsJfZQbCYQ9EeU6pL5XQDr2EcUJYINFd5CVg9bev+TTGca8j
vU0DqDKvJjGyVwvZn6sCHXWCxjPBh4tucTpVBYlhcjCVcgHN7KTy7h7YrSuZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3DbXq0vGpMV9YoYMCJ75EYbPnTEwHwYDVR0j
BBgwFoAUihMRcVkoAK5tmtTP8/yBIOrxkgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFlYVFlWWp1YUFDU0F1TXl4Z2JNVzlFOGkxQ0E5TldHQkp3MnNyc244
MjYvMC84QTEzMTE3MTU5MjgwMEFFNkQ5QUQ0Q0ZGM0ZDODEyMEVBRjE5MjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTMxMTcxNTkyODAwQUU2
RDlBRDRDRkYzRkM4MTIwRUFGMTkyMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRZWFRZVlqdWFBQ1NBdU15eGdiTVc5RThpMUNBOU5XR0JKdzJzcnNuODI2LzAv
MzEzNzM3MmUzMjMzMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM3
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEXHDANBgkqhkiG9w0BAQsFAAOCAQEAvorFz8haGVBD
pK+vyrX8bMJU2twWn/4RVBVkFhy4zyWE8yg4vr5GcM/3bcVN3nRxvWhZOk/WHVPY
zVdod3MxQxD5TnzQXZBDF9z5LlMu8VXXLrzXkZzzAMkDsm+qD7spgnWa5fjF7QBa
CBu+fXyznWKvychbxHUAgUghXH0H6rj/TFxmyrqDC/8Pkm5IJBtNULG9FcbMblJ/
VoBgJ337LBxJ8Zx0uXJ2poAKoBHlH5+jsK8fxk+NzZqB6XNme2Thj9/35f+mfXNL
1+rOXt8xnLjHpeGfXNJiMgTGtA7VvHjFeakyZgva9VZqdqHRGlZkz7C7abjb0fLX
sbl8ka8QOQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:44:38 2026 by rpki-client