Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
File:                     3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa (raw, json)
Hash identifier:          egBhCwkfsaNcxXZwcq1XcN0dO338Y6VzZAQksrXe5LU=
Subject key identifier:   41:B9:13:1B:7F:CC:FE:8E:07:72:B4:D9:D3:0B:7A:26:EC:A8:43:B0
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       5023FF0E4F8D25CB6813CCF60E81902305529AFF
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:31:49 +0000
ROA not before:           Mon 10 Aug 2026 17:26:49 +0000
ROA not after:            Mon 09 Aug 2027 17:31:49 +0000
asID:                     28171
IP address blocks:        177.137.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:ff:0e:4f:8d:25:cb:68:13:cc:f6:0e:81:90:23:05:52:9a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:26:49 2026 GMT
            Not After : Aug  9 17:31:49 2027 GMT
        Subject: CN=41B9131B7FCCFE8E0772B4D9D30B7A26ECA843B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:20:72:a1:f4:2a:5a:30:8b:61:d5:20:b2:
                    1d:0f:75:e0:d3:07:13:c7:87:8c:bb:19:5d:2d:38:
                    e5:b4:ef:e8:c6:5b:8e:2a:3a:1d:80:9d:b2:e5:b3:
                    85:cc:ad:85:bf:28:d4:4e:5b:31:c1:83:12:86:74:
                    44:46:ae:c8:ed:35:c8:9b:a5:9d:88:fe:d9:1c:d8:
                    b0:b5:ab:2c:1c:f3:4d:e8:ed:67:5f:f6:1d:2e:b3:
                    7d:0e:2c:dc:f4:cf:ab:4e:b9:b0:fe:c3:ab:d5:f6:
                    47:cc:1e:ce:b4:d3:0f:f4:9c:ce:5b:8c:70:39:55:
                    09:21:de:b7:ba:c0:8d:56:ac:5f:78:73:19:cc:a2:
                    a9:35:41:33:79:f2:2f:ef:45:b1:fb:e3:a7:ff:97:
                    17:95:86:4c:73:2f:a0:ed:ad:f7:3b:f1:e0:31:61:
                    d6:e2:2d:71:2e:f2:46:42:f3:f6:19:56:c7:1f:ab:
                    f2:b8:17:86:c4:d3:09:8d:26:72:d6:dd:a9:aa:0b:
                    2a:bd:db:98:3d:36:b0:d6:b4:84:57:ae:33:04:49:
                    d9:48:48:0d:56:94:7a:d5:ce:50:65:51:c8:ef:dd:
                    90:02:56:ac:03:31:2f:0d:fb:84:87:d2:bb:04:0e:
                    0d:2f:10:63:bd:59:a6:c3:3a:9c:97:65:8b:36:40:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:13:1B:7F:CC:FE:8E:07:72:B4:D9:D3:0B:7A:26:EC:A8:43:B0
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:51:40:af:47:9d:de:c2:9b:ea:6e:5b:96:50:f4:45:83:
         94:16:ce:17:23:61:d9:14:5b:e2:89:d4:67:c5:3c:84:3b:cd:
         4e:74:17:d5:3e:2e:69:05:d3:69:e3:05:81:86:c9:ae:03:d0:
         00:13:68:82:80:23:cb:ca:a5:f7:db:9f:33:21:da:42:ad:4d:
         ff:c0:45:77:56:c7:e8:47:8e:c4:7e:f4:73:ed:a5:44:5b:9a:
         6a:d0:55:6d:78:92:3b:3d:c1:74:e6:c7:95:04:7b:30:b6:86:
         76:3d:88:70:8e:a5:8f:c0:2c:fe:ef:81:46:4d:ba:2b:9d:43:
         b2:2f:b7:c1:15:4f:e4:e1:fc:3b:85:f0:99:2e:ab:9b:7f:49:
         8e:9e:d5:15:ba:78:4a:45:49:54:13:fa:f3:fd:37:0b:71:9a:
         39:95:76:c0:ad:4f:45:73:64:5a:cb:29:9e:dd:97:db:0f:db:
         e8:9d:27:6e:20:6e:b5:8e:16:9f:a2:99:8c:c5:1e:99:2d:5b:
         ee:ad:51:e8:3a:d7:ea:90:f9:93:d9:d3:9c:17:e3:82:5b:6d:
         b1:5e:7c:7c:ee:ae:e1:a0:0a:b3:09:80:2e:b0:af:48:a7:dd:
         ed:30:60:1a:a2:0d:05:4b:03:ab:a6:36:4e:2d:c8:c1:f6:8c:
         19:60:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:44:20 2026 by rpki-client