Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3138302e302f32342d3234203d3e20323634393834.roa
File:                     3137372e3132382e3138302e302f32342d3234203d3e20323634393834.roa (raw, json)
Hash identifier:          TNwB9qXsZJrX9e+64Tz38jjxBlhXOwwqTi2AqWzr09w=
Subject key identifier:   71:51:C0:1E:83:E6:12:AA:EA:0A:57:A3:0C:18:2A:FC:DF:4C:2F:10
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       0FA8D680709997C7721F4E224E8998B460C6E9A8
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3138302e302f32342d3234203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        177.128.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a8:d6:80:70:99:97:c7:72:1f:4e:22:4e:89:98:b4:60:c6:e9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=7151C01E83E612AAEA0A57A30C182AFCDF4C2F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:57:c2:34:ef:28:bc:1f:24:26:3a:dc:22:
                    2e:5c:02:95:cd:18:8f:a3:71:d7:d7:1b:7b:5b:27:
                    06:01:a9:be:d8:be:6d:88:cd:84:45:3c:61:55:59:
                    21:2c:00:65:5f:91:eb:a4:48:b0:55:69:bb:f5:ff:
                    ec:5f:0f:b2:d9:c9:36:60:0e:a9:96:0e:ab:df:14:
                    56:ad:07:43:75:7f:a3:4e:f7:51:f8:27:c7:10:00:
                    61:08:8a:d1:32:4f:72:37:b2:a0:34:5b:73:f2:d8:
                    62:6a:74:bc:1d:00:ff:bd:4f:d4:88:61:5c:78:00:
                    e2:b2:3d:16:cb:68:2c:33:94:44:e5:0a:40:d1:7c:
                    d2:4b:ec:a0:ee:e8:8e:23:a1:24:76:5b:e7:69:f8:
                    e8:03:60:fb:43:ce:f3:c6:7f:5e:a9:00:ce:b0:e5:
                    5e:cb:8f:73:4f:c8:70:43:ae:ed:18:f1:7d:c4:99:
                    24:a9:80:03:47:f0:c4:fe:b3:bd:3a:e5:f1:15:d7:
                    19:00:8e:03:45:e4:56:7c:1a:dd:a3:f6:78:29:0a:
                    31:90:47:dd:76:1f:bb:b1:5a:c6:53:b2:6e:37:6e:
                    e0:b8:05:db:f9:70:03:5e:f8:b9:cb:44:a0:a1:f4:
                    af:74:0c:de:bb:2c:44:2d:86:34:ba:6c:11:1c:6d:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:C0:1E:83:E6:12:AA:EA:0A:57:A3:0C:18:2A:FC:DF:4C:2F:10
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3138302e302f32342d3234203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:49:8b:76:e8:0c:a6:2e:05:6c:ca:1b:a5:7f:7b:ba:29:d6:
         9f:4b:7a:c9:64:53:5e:6c:90:1f:ec:fe:99:a2:d8:1a:6c:cd:
         9e:de:95:62:a9:7f:30:51:31:e0:a2:92:43:54:10:70:d9:3d:
         ff:6e:ac:ff:b8:87:36:4f:fe:cf:d7:ec:1b:bc:3c:65:0e:af:
         1c:85:cc:4b:cd:d9:95:8c:7d:14:a6:b3:28:33:a0:05:32:44:
         14:5e:b2:47:a1:38:ff:4b:e2:db:10:57:9a:56:d4:1c:63:58:
         07:e4:b1:fe:c8:32:bb:00:88:0a:b7:e3:56:a0:98:8b:19:b5:
         87:d9:7c:ba:b2:0f:06:2b:b0:e9:75:ee:73:59:1e:1e:b9:88:
         e9:d6:c9:1d:e1:07:f9:07:a5:2d:35:05:c9:1d:bc:08:0d:8f:
         b1:ef:c4:ef:de:cc:96:dd:ce:bf:e0:95:e1:85:fc:aa:1a:81:
         55:e9:38:97:f7:f0:17:c2:61:4a:70:1d:cc:6b:2f:e4:93:6c:
         7b:c7:84:37:16:87:b5:44:f0:6d:d6:eb:8d:5e:b2:59:6a:ef:
         66:a2:52:25:c6:ca:e5:81:e4:6b:51:de:42:03:7d:d2:23:3a:
         f1:0c:bd:5c:7f:07:2c:fe:65:55:2e:95:3b:0d:2b:75:59:ca:
         38:51:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:17 2026 by rpki-client