Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138392e302f32342d3332203d3e20323632363439.roa
File:                     3137372e3130352e3138392e302f32342d3332203d3e20323632363439.roa (raw, json)
Hash identifier:          SEN8nAeHa8K+Vc86l5tDWqhLU/2Ztmh4qG3Pg+B87Yw=
Subject key identifier:   FB:4A:03:40:F3:E8:98:C9:B0:59:3B:18:8E:24:8F:31:45:93:44:85
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       1F313A0765C32D5D7CC0719215B06A0550D946EE
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138392e302f32342d3332203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:09 +0000
ROA not before:           Tue 28 Jul 2026 13:33:09 +0000
ROA not after:            Tue 27 Jul 2027 13:38:09 +0000
asID:                     262649
IP address blocks:        177.105.189.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:31:3a:07:65:c3:2d:5d:7c:c0:71:92:15:b0:6a:05:50:d9:46:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:09 2026 GMT
            Not After : Jul 27 13:38:09 2027 GMT
        Subject: CN=FB4A0340F3E898C9B0593B188E248F3145934485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:c3:18:2d:87:3d:c3:7f:b3:2f:4f:03:0c:
                    d9:b9:74:53:d9:65:43:18:9c:06:31:19:ae:55:67:
                    38:98:aa:21:42:07:73:bd:e1:64:3e:09:aa:ca:1b:
                    57:d1:94:25:a9:14:71:ad:ea:6f:d4:95:89:cc:ec:
                    e5:9f:66:e5:16:50:f6:1e:54:fa:fc:9c:c9:89:23:
                    5b:a0:fb:87:22:de:56:b9:bb:8c:07:50:bd:f3:04:
                    2e:8d:a6:0e:45:a2:73:21:7f:48:e5:8c:ab:cc:33:
                    08:83:ec:38:01:06:d0:b2:1a:57:09:39:dd:5c:6e:
                    09:84:4e:ca:ae:40:bd:03:83:15:40:16:76:2a:77:
                    e6:0d:ba:13:f4:f7:40:36:15:7b:be:ec:81:21:dd:
                    30:70:6f:d2:05:09:ce:a2:af:69:9f:7c:5a:15:09:
                    dd:59:a8:28:e3:fe:11:6f:c9:40:3e:8b:14:18:03:
                    41:56:20:78:27:7f:5d:80:6c:a9:b0:9a:ec:8d:1c:
                    e5:ef:38:8a:2e:e1:c4:74:83:66:22:f2:03:61:db:
                    5e:08:0f:34:77:04:eb:9e:f1:bc:76:fa:03:81:d8:
                    ed:99:c1:ed:fa:13:69:b7:f3:5a:d0:d7:42:95:12:
                    1e:5d:ce:83:72:b6:71:d2:14:a1:d3:32:b0:bf:ca:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4A:03:40:F3:E8:98:C9:B0:59:3B:18:8E:24:8F:31:45:93:44:85
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138392e302f32342d3332203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:1a:f0:93:18:62:16:60:d5:1d:9d:c3:6e:40:98:09:03:
         70:1a:09:63:67:43:d4:4a:66:d2:31:e9:7d:c3:23:8d:7d:b0:
         ef:e8:ac:fa:46:89:43:2a:f0:1c:86:65:ed:34:7a:6d:39:5e:
         36:35:da:df:06:a1:dc:39:aa:a5:83:16:e1:f3:04:03:c1:87:
         ea:8e:1e:f6:4c:a9:17:04:9b:c4:2a:d2:40:6e:9d:4c:1d:a8:
         5b:01:2d:3f:eb:93:55:80:2f:fc:e8:19:b6:07:27:63:9a:15:
         d9:b0:64:e5:03:cc:32:9e:1d:c8:06:e9:95:b7:0a:3e:69:b9:
         6e:22:50:93:63:85:83:58:9e:88:2c:af:53:8b:70:09:30:48:
         81:3b:3a:a4:67:e1:32:6a:ef:4c:a8:d0:cf:cf:36:4e:66:dd:
         ae:78:5f:64:1a:41:d1:19:55:1a:d0:6a:c8:c1:47:40:fc:89:
         8e:f2:bb:41:43:48:60:39:d8:a0:52:ef:7b:62:18:f4:74:a7:
         d3:b1:7e:b9:e9:a7:f6:90:de:90:9a:74:32:27:a4:a7:73:ce:
         0c:98:92:d4:ce:1d:4a:4e:fc:18:f3:65:e8:90:5a:95:c1:78:
         e2:42:b1:64:5e:ff:88:b3:ff:60:70:24:af:93:8e:20:ab:11:
         fa:6e:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----