Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3139302e302f32342d3234203d3e20323632363439.roa
File:                     3137372e3130352e3139302e302f32342d3234203d3e20323632363439.roa (raw, json)
Hash identifier:          l34MADpGNmV2eDCYCyY2TWw5wEAGkq08MhcIN2hCsW0=
Subject key identifier:   BD:08:4E:D6:FA:30:0D:60:87:B8:C5:0A:F0:21:6D:12:2B:05:52:C9
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       7437707119D3810104032882AB3AC50AA553F900
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3139302e302f32342d3234203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:10 +0000
ROA not before:           Tue 28 Jul 2026 13:33:10 +0000
ROA not after:            Tue 27 Jul 2027 13:38:10 +0000
asID:                     262649
IP address blocks:        177.105.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:37:70:71:19:d3:81:01:04:03:28:82:ab:3a:c5:0a:a5:53:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:10 2026 GMT
            Not After : Jul 27 13:38:10 2027 GMT
        Subject: CN=BD084ED6FA300D6087B8C50AF0216D122B0552C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:19:b5:fa:13:f5:62:96:6c:35:f0:52:e0:
                    1a:c0:3a:9b:5e:73:68:2f:8c:02:f5:4c:42:62:45:
                    92:2a:06:9f:d1:6f:ae:7f:7f:23:7c:ec:a8:8e:64:
                    bc:57:58:4e:99:fd:db:54:eb:9c:57:cd:8e:f1:ae:
                    f5:54:0a:5d:ba:96:46:e5:ed:ec:e4:5f:5c:01:76:
                    af:1d:a5:0c:48:0d:67:c3:cf:5c:31:fb:9d:22:12:
                    99:db:49:91:03:1b:77:e1:1e:0c:71:96:38:9a:bc:
                    a2:b1:e7:6d:92:af:b5:d2:2e:7f:a0:8d:65:a8:ba:
                    cd:59:eb:86:51:ed:16:89:ad:61:9f:c7:70:ba:83:
                    fe:1a:e4:a6:bf:e7:7e:a8:04:1c:3a:a3:c9:a2:96:
                    52:a0:41:92:7c:01:21:7b:97:d7:c0:38:e1:75:e2:
                    ac:86:04:6b:b1:f7:e6:b8:84:75:9e:69:04:d2:da:
                    72:45:d5:64:99:48:a5:d2:1e:99:0b:f2:c4:d4:84:
                    cf:98:40:1b:21:30:a4:d9:b0:1d:61:89:b5:be:de:
                    84:8e:3b:df:b5:d6:68:8e:04:e1:8e:8c:b9:59:b1:
                    da:8d:c5:39:b4:57:36:69:fa:ed:18:6b:2f:c9:7b:
                    e4:b7:92:db:38:82:04:3b:fe:6e:07:c9:4c:78:5c:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:08:4E:D6:FA:30:0D:60:87:B8:C5:0A:F0:21:6D:12:2B:05:52:C9
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3139302e302f32342d3234203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:5e:ee:d1:3f:c4:eb:e2:a1:eb:39:19:eb:de:8e:a4:c4:
         16:36:13:34:00:bb:d5:0a:ad:47:e4:a4:93:bf:3b:e7:34:47:
         71:6c:f4:ab:78:2d:58:7d:8f:af:cd:23:78:a0:be:c1:be:b4:
         2d:87:eb:fb:88:08:5b:d1:c6:fe:2f:f7:3f:94:1d:2d:64:c3:
         8e:3f:27:91:e9:c9:bc:75:31:a0:47:3c:c3:9b:79:fc:b4:0d:
         94:57:ae:56:a9:08:1b:56:9a:1a:e3:19:8c:27:0e:18:23:e2:
         bf:b8:b5:60:12:ba:e0:ee:35:64:25:c4:fa:87:05:7a:3b:e3:
         41:85:6a:56:84:73:a0:36:23:5f:ef:c8:86:21:72:6c:4c:0d:
         7a:76:9f:83:c5:b7:21:66:77:a4:05:22:16:fc:5c:51:3d:f7:
         36:e1:b8:10:22:8c:43:70:c9:73:f4:1a:4b:cc:1f:25:5d:72:
         2b:94:e0:4b:a3:e4:6f:7e:1a:35:f6:78:5d:20:53:d6:9e:79:
         49:e5:86:f5:37:79:f7:8c:92:1f:3a:c7:c8:0f:0d:b1:e2:fb:
         fa:1f:a7:be:12:3f:b0:65:12:90:b2:bf:1c:ba:6f:1e:20:93:
         1b:dd:6e:46:dd:11:1a:4f:b9:35:2d:07:df:7d:bc:9b:89:0a:
         0b:3d:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----