Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa
File:                     AS61832.roa (raw, json)
Hash identifier:          5u9VnROgKiNZK36bSVy96mhn+JbkxkoQsltYT1sOgG8=
Subject key identifier:   99:D8:F5:AE:6E:DA:2D:71:AD:E0:CE:83:FD:A3:EB:88:22:C2:52:D9
Certificate issuer:       /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial:       24BFDCFD456B30236F7BC9F019B891072720F695
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa
Signing time:             Tue 27 Oct 2026 19:24:20 +0000
ROA not before:           Tue 27 Oct 2026 19:19:20 +0000
ROA not after:            Tue 26 Oct 2027 19:24:20 +0000
asID:                     61832
IP address blocks:        45.236.68.0/22 maxlen: 32
                          170.81.192.0/22 maxlen: 22
                          170.81.192.0/23 maxlen: 23
                          170.81.192.0/24 maxlen: 24
                          170.81.193.0/24 maxlen: 24
                          170.81.194.0/24 maxlen: 24
                          170.81.195.0/24 maxlen: 24
                          177.66.120.0/22 maxlen: 22
                          177.66.120.0/23 maxlen: 23
                          177.66.122.0/23 maxlen: 23
                          177.72.0.0/21 maxlen: 21
                          177.72.0.0/22 maxlen: 22
                          177.72.4.0/22 maxlen: 22
                          177.184.128.0/20 maxlen: 24
                          177.184.129.0/24 maxlen: 24
                          177.200.80.0/20 maxlen: 24
                          186.225.32.0/20 maxlen: 24
                          186.225.48.0/20 maxlen: 24
                          187.60.32.0/20 maxlen: 24
                          187.60.240.0/20 maxlen: 32
                          187.60.240.0/21 maxlen: 21
                          187.60.248.0/21 maxlen: 21
                          187.84.64.0/21 maxlen: 32
                          189.84.112.0/20 maxlen: 24
                          191.6.8.0/21 maxlen: 21
                          191.6.8.0/22 maxlen: 22
                          191.6.12.0/22 maxlen: 22
                          201.148.100.0/22 maxlen: 24
                          2804:1a04::/32 maxlen: 128
                          2804:1a04:9::/48 maxlen: 48
                          2804:1a04:a::/48 maxlen: 48
                          2804:1a04:1b::/48 maxlen: 48
                          2804:1a04:1c::/48 maxlen: 48
                          2804:1a04:1d::/48 maxlen: 48
                          2804:1a04:1e::/48 maxlen: 48
                          2804:1a04:1f::/48 maxlen: 48
                          2804:1a04:20::/48 maxlen: 48
                          2804:1a04:21::/48 maxlen: 48
                          2804:1a04:22::/48 maxlen: 48
                          2804:1a04:23::/48 maxlen: 48
                          2804:1a04:24::/48 maxlen: 48
                          2804:1a04:2c::/48 maxlen: 48
                          2804:1a04:2d::/48 maxlen: 48
                          2804:1a04:2e::/48 maxlen: 48
                          2804:1a04:80::/48 maxlen: 48
                          2804:1a04:81::/48 maxlen: 48
                          2804:1a04:85::/48 maxlen: 48
                          2804:1a04:87::/48 maxlen: 48
                          2804:1a04:88::/48 maxlen: 48
                          2804:1a04:89::/48 maxlen: 48
                          2804:1a04:8a::/48 maxlen: 48
                          2804:1a04:8b::/48 maxlen: 48
                          2804:1a04:180::/48 maxlen: 48
                          2804:1a04:181::/48 maxlen: 48
                          2804:1a04:400::/48 maxlen: 48
                          2804:1a04:4000::/34 maxlen: 34
                          2804:1a04:8800::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:dc:fd:45:6b:30:23:6f:7b:c9:f0:19:b8:91:07:27:20:f6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
        Validity
            Not Before: Oct 27 19:19:20 2026 GMT
            Not After : Oct 26 19:24:20 2027 GMT
        Subject: CN=99D8F5AE6EDA2D71ADE0CE83FDA3EB8822C252D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:cd:ab:e9:e5:4f:40:da:34:15:3a:86:1c:
                    e8:31:87:33:22:37:f0:3b:46:e5:d7:e5:a4:98:04:
                    53:af:4d:c8:5d:b6:f9:38:32:c0:d2:ce:d1:de:af:
                    75:7f:d3:9b:da:7c:43:5f:be:f7:55:a7:74:e0:b7:
                    e3:d1:19:46:31:87:51:8f:0a:b9:dd:ce:b9:82:9a:
                    a3:16:ea:90:ff:8e:e4:5f:60:0f:07:95:b7:67:8f:
                    af:ee:0e:69:94:8e:9f:bb:2b:3b:ca:54:8e:b2:ae:
                    24:5e:75:a6:eb:ff:40:7f:64:7f:15:0c:db:4e:92:
                    57:2a:ed:40:be:0c:1f:60:be:dc:40:9a:ea:0a:37:
                    fe:38:82:ab:c9:1d:ae:a2:66:3c:6b:00:80:b9:fc:
                    f7:e3:db:44:91:79:f8:3e:74:49:e2:91:dc:89:58:
                    e9:42:31:aa:76:38:61:e1:f9:f9:99:83:00:cb:a2:
                    d1:44:83:04:e3:56:c4:62:5f:ca:15:12:1a:e4:93:
                    e3:ab:b7:0a:fe:ed:90:e6:83:c8:b6:80:ef:0e:ef:
                    86:1a:f4:d8:69:00:d7:48:57:a5:91:eb:85:83:17:
                    db:2a:2f:84:ce:4a:5d:77:37:00:79:10:2a:ea:81:
                    69:4b:38:fb:b3:79:ee:eb:c6:49:26:2d:f9:d0:f2:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:F5:AE:6E:DA:2D:71:AD:E0:CE:83:FD:A3:EB:88:22:C2:52:D9
            X509v3 Authority Key Identifier:
                keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.68.0/22
                  170.81.192.0/22
                  177.66.120.0/22
                  177.72.0.0/21
                  177.184.128.0/20
                  177.200.80.0/20
                  186.225.32.0/19
                  187.60.32.0/20
                  187.60.240.0/20
                  187.84.64.0/21
                  189.84.112.0/20
                  191.6.8.0/21
                  201.148.100.0/22
                IPv6:
                  2804:1a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:18:53:cc:00:46:42:3a:dd:49:27:76:00:82:38:cb:c3:95:
         78:6c:0c:5b:7e:01:85:19:fd:6f:cb:9d:aa:d0:27:35:ae:02:
         ed:e4:1d:ba:55:f7:97:53:4b:83:ee:bc:e0:f4:73:47:ae:e7:
         8b:7c:d2:12:be:21:c3:08:1a:eb:57:f4:1b:39:ac:94:8c:e6:
         4a:a3:f5:32:6a:c2:ba:f2:5b:0a:85:eb:42:2f:b4:54:7f:5d:
         eb:24:b7:9c:83:2c:bd:f6:28:8f:cc:f2:01:34:ea:69:36:df:
         6b:f6:47:a9:01:a7:fd:c2:ba:dc:ff:79:44:7a:a6:87:cb:bf:
         67:b8:47:4a:e5:0e:e6:21:45:73:9d:76:47:5b:5c:8a:b2:0b:
         5f:d0:24:f7:39:de:95:39:e1:7d:0f:86:7a:d9:e6:fb:9f:f4:
         dc:1b:9c:ca:59:d0:42:2d:fd:15:8d:53:da:58:ef:0c:c3:0e:
         cd:77:54:ad:d0:80:75:db:94:4c:ca:b6:45:42:ac:3d:9b:9a:
         f1:c2:74:44:61:97:f8:3a:9e:1e:18:96:10:19:32:9e:a2:9d:
         06:21:a7:01:88:e3:63:6b:66:ed:b2:6c:ff:3e:fc:9b:1a:50:
         cb:93:f4:f0:2e:3b:0c:48:1c:7d:47:de:64:67:8b:32:90:51:
         c4:35:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:14:37 2026 by rpki-client