Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e39332e3138382e302f32322d3234203d3e20323632353330.roa
File:                     3137372e39332e3138382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          ick2kC1ZeVYjnxZ0APGMftUMzO3+cl8iG1vUzT2rzzU=
Subject key identifier:   88:4B:98:0B:E6:03:B1:5C:07:B2:CD:32:D5:8E:AB:E6:96:19:41:F9
Certificate issuer:       /CN=E8BB3D15068B9B0465030BF44863CBCB88D5149C
Certificate serial:       73F891573B9192FDDAE3CF972DC0AEBCBF6DB769
Authority key identifier: E8:BB:3D:15:06:8B:9B:04:65:03:0B:F4:48:63:CB:CB:88:D5:14:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e39332e3138382e302f32322d3234203d3e20323632353330.roa
Signing time:             Tue 15 Sep 2026 18:46:10 +0000
ROA not before:           Tue 15 Sep 2026 18:41:10 +0000
ROA not after:            Tue 14 Sep 2027 18:46:10 +0000
asID:                     262530
IP address blocks:        177.93.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f8:91:57:3b:91:92:fd:da:e3:cf:97:2d:c0:ae:bc:bf:6d:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8BB3D15068B9B0465030BF44863CBCB88D5149C
        Validity
            Not Before: Sep 15 18:41:10 2026 GMT
            Not After : Sep 14 18:46:10 2027 GMT
        Subject: CN=884B980BE603B15C07B2CD32D58EABE6961941F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:59:f3:80:d5:f3:06:eb:32:ab:50:40:37:
                    16:23:b1:5d:f6:b7:e0:af:7a:c8:cc:35:ac:0b:a9:
                    da:c5:ee:a9:db:d9:4d:b1:1b:7e:78:40:73:34:45:
                    b5:ab:cd:b7:74:96:4c:12:6f:76:f9:50:81:fd:71:
                    c5:c5:6a:86:e7:15:f5:7b:82:2c:4e:40:68:13:da:
                    f8:10:65:46:86:4c:7a:89:29:65:68:47:d1:c8:4c:
                    5a:ea:65:8d:2f:69:06:27:c5:95:76:e3:e5:40:dc:
                    d6:8b:9c:ec:43:13:dd:7f:2a:f4:36:e3:5b:6b:30:
                    72:c1:98:c4:77:a7:fc:06:41:c8:4c:38:85:36:89:
                    23:a5:16:10:c4:15:19:b3:a2:4e:bb:78:dd:44:23:
                    72:52:1a:d3:6d:56:84:1d:83:1a:a4:a3:69:cf:3e:
                    93:14:7d:87:93:36:ce:da:fe:fd:5f:4b:3a:11:a1:
                    f6:68:ce:4f:fd:c9:96:20:9b:c0:d7:0b:76:11:55:
                    07:a4:59:56:dc:13:ba:eb:3f:65:2d:c3:a9:df:37:
                    dd:c6:c0:94:37:a5:5c:1b:7c:0c:48:79:6b:45:06:
                    1c:7b:dc:17:cc:9a:86:b1:71:bf:74:5e:cc:79:28:
                    92:98:72:72:bd:e7:35:03:29:f6:eb:df:0d:ca:f0:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:98:0B:E6:03:B1:5C:07:B2:CD:32:D5:8E:AB:E6:96:19:41:F9
            X509v3 Authority Key Identifier:
                keyid:E8:BB:3D:15:06:8B:9B:04:65:03:0B:F4:48:63:CB:CB:88:D5:14:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8BB3D15068B9B0465030BF44863CBCB88D5149C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137372e39332e3138382e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:20:06:c1:45:ee:6a:7e:a7:22:b4:6a:b3:5e:93:e5:9e:f8:
         a5:0b:76:62:13:d1:52:f8:ae:3c:67:04:5a:71:8e:ae:d0:1c:
         22:80:a0:c3:f6:26:ae:bc:d5:f4:17:ab:8a:e9:b3:2e:71:a2:
         b9:c1:fa:d1:51:f6:48:87:8a:ed:e9:09:85:17:6a:d9:23:9a:
         b2:5d:c6:14:78:44:7a:b9:04:89:0f:92:28:36:ef:0c:b5:d9:
         af:f8:03:ef:f1:e3:b0:ad:7c:61:2a:54:82:f2:a4:79:07:c8:
         3b:72:af:e6:f3:f6:cf:74:54:c2:33:ee:dc:35:cd:90:48:0a:
         04:e6:49:45:e4:1d:f1:46:b7:b2:79:c9:39:35:93:fa:6c:2e:
         99:66:9c:c0:bf:6f:32:b3:1e:d8:aa:2c:9f:08:bf:7f:25:2b:
         21:5f:5a:5e:bd:19:83:bf:35:b1:93:c6:0b:22:52:2f:02:75:
         30:b2:a2:81:1e:1e:2f:85:c9:05:22:d8:bb:85:6f:3a:fb:e0:
         7d:6b:84:08:77:dd:c5:5e:9d:12:6b:0c:3a:fe:31:73:d0:66:
         b0:44:9e:96:28:18:65:e3:0b:5c:f0:6b:e7:dd:f3:ee:31:73:
         a1:f8:cd:bc:fb:fd:63:8a:87:5b:13:1f:1c:07:e6:7a:13:ee:
         32:4a:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----