Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32342d3234203d3e20323632383234.roa
File:                     3137372e35322e36302e302f32342d3234203d3e20323632383234.roa (raw, json)
Hash identifier:          Pl8q8N9CzWI+lQSsivep3FyYs/UNk1PH9t7oaae0X1k=
Subject key identifier:   10:C0:16:85:6F:EF:F8:B8:1D:05:14:DF:07:8D:7B:C5:EC:41:13:70
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       063D1FC97925102C0F7451B4FF4E6FD76FCD8A58
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32342d3234203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:56:24 +0000
ROA not before:           Sun 05 Jul 2026 23:51:24 +0000
ROA not after:            Sun 04 Jul 2027 23:56:24 +0000
asID:                     262824
IP address blocks:        177.52.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3d:1f:c9:79:25:10:2c:0f:74:51:b4:ff:4e:6f:d7:6f:cd:8a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:51:24 2026 GMT
            Not After : Jul  4 23:56:24 2027 GMT
        Subject: CN=10C016856FEFF8B81D0514DF078D7BC5EC411370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:ee:a2:8f:2d:41:e4:12:9e:7e:6f:ed:ab:
                    a7:a6:dd:8f:fc:e1:e9:c7:c1:c5:06:d3:13:69:b1:
                    e7:7e:ed:a9:4f:bc:1d:c0:88:91:e0:11:c5:53:65:
                    6c:57:98:53:32:71:3f:59:f6:57:0a:29:99:04:7c:
                    4e:54:e1:64:2d:8a:6f:50:2e:be:4a:c3:ae:66:9b:
                    dc:7d:cb:df:8a:23:a7:1c:7b:6c:4d:95:79:79:43:
                    e7:63:a8:30:6e:a6:a8:4e:dc:9d:bc:0e:8b:fa:37:
                    e4:20:37:7e:04:54:fb:f0:69:9c:4d:cf:88:db:06:
                    ba:6c:f3:1d:83:29:f0:ad:9b:aa:2b:65:01:51:82:
                    a4:ef:4e:6a:b9:e4:2c:2f:32:3a:aa:dd:5d:cd:1f:
                    3e:9f:18:a0:f0:51:80:aa:cd:23:52:9a:e1:d9:c7:
                    25:72:4d:a2:02:df:11:a2:98:d0:16:a2:fe:5d:45:
                    58:5b:4e:01:47:5d:4b:dd:51:6e:eb:77:57:50:bf:
                    b9:2f:bc:56:e9:0c:6f:5c:84:ce:3e:26:32:67:7d:
                    bc:d1:c2:09:56:e4:80:af:0e:97:e0:ce:d8:08:a7:
                    fa:a2:af:43:84:48:8e:46:2e:0c:44:47:f9:d4:90:
                    60:a6:8d:ea:53:50:92:8a:5f:ee:3b:45:fc:a3:cc:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:16:85:6F:EF:F8:B8:1D:05:14:DF:07:8D:7B:C5:EC:41:13:70
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32342d3234203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:53:db:a2:f6:58:7a:2c:8b:17:58:7b:86:10:85:e4:9d:
         7c:6a:67:f4:43:fd:09:e8:e9:94:9a:9c:c4:2d:26:7b:f9:3e:
         8c:e3:79:66:bb:9b:0d:11:d4:b5:f8:aa:04:31:50:14:99:9a:
         70:f7:5c:88:58:c8:71:50:38:95:7b:7c:2f:9a:7a:fd:21:1b:
         40:ce:e1:1e:f4:18:36:66:39:03:cb:f2:5c:e3:ca:c7:4d:75:
         1a:d9:1e:79:09:74:fe:4c:ec:18:2f:c9:a1:32:40:55:d1:68:
         eb:47:3d:32:8a:bb:fb:30:ad:bd:c1:05:70:99:3a:c9:19:6e:
         8e:a9:7e:9d:0c:af:73:6a:18:8c:94:77:80:f1:42:b6:8a:7c:
         d8:f8:3f:af:b7:3d:57:6c:5a:99:f9:c5:53:3c:55:ca:eb:7c:
         c4:20:a1:d0:c3:fc:8b:8b:ca:d9:a7:64:5e:f1:b0:2d:8b:38:
         25:2a:0d:7e:20:49:52:d5:4f:49:c9:b0:0d:6c:b5:56:f7:f3:
         a6:7e:27:3a:73:f4:d8:0f:d1:30:2a:07:05:47:1c:50:69:eb:
         2f:b3:88:b4:39:e9:a8:0b:d6:a8:7b:7b:60:46:eb:1c:4a:c6:
         f4:90:ec:51:66:88:e7:5b:95:5d:4c:41:47:b9:59:d2:3c:03:
         2a:9a:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:56:44 2026 by rpki-client