Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33312e302f32342d3234203d3e203532373632.roa
File:                     3137372e32332e33312e302f32342d3234203d3e203532373632.roa (raw, json)
Hash identifier:          eOzldW6b2SEBGhMNdAr+DqODbkwV5aD3pcQaiwj1ib8=
Subject key identifier:   75:26:B6:47:38:BD:32:53:1F:24:71:F7:AF:2B:72:98:4B:5D:B1:16
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       57A2888BAB0F496B57C8CDB6F052EF6CE0595750
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33312e302f32342d3234203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:32 +0000
ROA not before:           Thu 06 Aug 2026 13:31:32 +0000
ROA not after:            Thu 05 Aug 2027 13:36:32 +0000
asID:                     52762
IP address blocks:        177.23.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a2:88:8b:ab:0f:49:6b:57:c8:cd:b6:f0:52:ef:6c:e0:59:57:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:32 2026 GMT
            Not After : Aug  5 13:36:32 2027 GMT
        Subject: CN=7526B64738BD32531F2471F7AF2B72984B5DB116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:f2:af:a8:ac:73:4c:df:be:5f:25:41:da:
                    fa:89:b1:63:af:e6:3e:21:05:dc:b2:7a:6b:5c:e0:
                    37:1d:23:69:4a:1b:b8:af:67:41:57:4b:cd:35:30:
                    52:1d:55:47:4b:1c:7b:8d:5f:c5:be:d9:ff:96:41:
                    ac:07:e9:84:ce:ef:4d:ad:08:60:3a:f2:c7:ab:d4:
                    94:dd:a5:40:0e:26:91:69:89:5c:b1:ce:a9:b3:47:
                    69:ec:64:c6:ea:17:8f:e0:fe:f7:8a:83:6e:50:58:
                    19:00:65:af:21:8b:1e:ac:81:6b:2f:77:dc:b7:fe:
                    87:a0:44:18:18:32:0b:19:57:b1:65:e2:5d:25:b9:
                    e1:1b:a4:0f:20:51:79:a1:7d:bc:ab:9c:6d:29:6f:
                    b5:ef:4e:3d:bc:4a:94:05:e2:a1:24:30:dc:9b:ec:
                    1c:a0:59:45:0b:dd:5e:35:de:8a:8a:e5:1d:50:86:
                    53:42:d4:58:e8:f2:fe:ec:a7:41:40:9c:8d:02:4b:
                    cb:87:12:f0:2a:12:ec:5e:ef:0f:ab:13:14:cc:9f:
                    e9:4f:f6:37:92:d1:a1:23:27:1c:f0:b0:07:2f:4e:
                    0c:2f:f2:74:4e:bd:86:a6:43:22:c3:3b:61:5c:19:
                    a4:00:49:b9:10:df:c1:4c:53:be:b7:f2:f7:e1:53:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:B6:47:38:BD:32:53:1F:24:71:F7:AF:2B:72:98:4B:5D:B1:16
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33312e302f32342d3234203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:32:ba:c9:99:e4:0f:02:67:b8:e6:c8:9a:0b:4f:9b:73:
         dd:80:07:15:72:4d:fe:51:c0:6a:e8:34:1e:87:9b:a4:e0:77:
         f2:56:41:3f:6a:10:6d:3f:41:7f:ac:63:18:a2:1d:28:29:54:
         38:75:4a:ed:3d:bd:98:c7:ab:41:ff:42:bb:3c:f6:f4:bf:37:
         f3:f1:08:da:0a:cb:ae:34:00:33:97:bf:28:36:12:52:76:4a:
         1d:bd:61:cf:86:e2:d6:a3:9b:65:45:39:3e:4a:c2:12:ed:75:
         ff:7d:0d:1d:19:43:55:e6:a8:f5:0f:7d:bd:3f:bf:37:bd:90:
         13:83:56:c9:4c:35:bc:4d:1d:a7:48:d5:47:fd:8e:4a:b1:78:
         9f:10:c0:a7:ed:47:10:ca:b8:e1:a9:68:8d:e4:8e:cb:44:ab:
         d5:6b:df:49:eb:19:87:c5:93:91:36:83:f1:25:7a:89:76:f4:
         14:ee:24:46:e2:24:24:88:6b:e9:85:9e:43:27:69:56:d0:af:
         07:4c:0f:eb:46:d0:1e:c8:aa:cc:ef:0e:b2:01:ba:52:3d:1f:
         b2:7c:94:85:7a:b9:86:d7:b3:f3:aa:ca:a5:c0:1e:c1:d4:9d:
         68:ec:6b:34:82:90:f7:1f:ab:78:0a:56:8c:2f:0e:7c:0d:0e:
         04:7d:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:17:42 2026 by rpki-client