Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e38382e302f32332d3233203d3e20323634333836.roa
File:                     3137372e33382e38382e302f32332d3233203d3e20323634333836.roa (raw, json)
Hash identifier:          BJ98NYBijhnPmpnMbWGGM9ocfj2/KPyK+dSjRQY+7yg=
Subject key identifier:   E2:22:FB:65:25:EC:DC:27:55:F5:4C:AF:1D:53:5B:D9:92:59:52:42
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       49D230EAD31764E3EA7FD8934462DAEB220D7BD2
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e38382e302f32332d3233203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:21:06 +0000
ROA not before:           Fri 21 Aug 2026 20:16:06 +0000
ROA not after:            Fri 20 Aug 2027 20:21:06 +0000
asID:                     264386
IP address blocks:        177.38.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d2:30:ea:d3:17:64:e3:ea:7f:d8:93:44:62:da:eb:22:0d:7b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:16:06 2026 GMT
            Not After : Aug 20 20:21:06 2027 GMT
        Subject: CN=E222FB6525ECDC2755F54CAF1D535BD992595242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:f4:8b:35:2d:63:9c:83:da:22:a9:1f:0a:
                    bc:6e:96:ec:fe:e0:a0:4a:b9:6f:b8:60:79:e1:e2:
                    90:72:c1:10:e2:69:ba:f9:36:7c:4c:1b:c8:1c:08:
                    87:17:e9:0e:98:bb:d2:49:11:e9:d8:c4:75:b1:22:
                    3f:fd:ed:2b:2b:58:59:19:0c:36:cc:98:f1:97:af:
                    37:41:14:c4:30:0e:a4:02:44:1d:dc:fa:d1:82:f3:
                    21:6a:5e:28:fc:f8:18:90:5c:3a:4d:a3:34:18:0e:
                    6a:07:f7:56:e3:87:f4:d7:83:94:4f:27:56:dd:46:
                    f9:e8:ec:ed:48:b7:92:46:6d:81:e0:e6:52:1b:64:
                    60:1b:d2:a6:2e:38:75:fa:d6:dd:54:41:a8:51:31:
                    de:05:b0:d6:5a:02:84:b8:f1:9c:8d:b7:79:1c:89:
                    78:5e:e6:9f:5b:08:86:e9:fe:c5:84:b1:f9:51:8c:
                    83:c5:e5:38:d8:83:fe:2a:ab:78:49:c1:c4:b9:00:
                    95:22:fd:22:cc:ab:d7:f1:4c:11:d5:c7:db:c0:a6:
                    68:7a:4c:92:54:7f:21:ef:b2:98:ff:2a:7c:bd:fe:
                    b3:2b:fe:c1:17:09:cc:e9:ff:02:55:7c:0c:f1:83:
                    12:22:d3:11:41:e8:04:07:98:f0:e3:80:b9:58:44:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:FB:65:25:EC:DC:27:55:F5:4C:AF:1D:53:5B:D9:92:59:52:42
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e38382e302f32332d3233203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:27:07:e5:0a:69:2a:8e:b5:8e:93:55:4e:8d:c8:6f:2c:f1:
         80:e0:d7:03:88:c2:fa:75:99:84:4d:46:3b:fa:59:06:7b:45:
         63:98:5a:a4:89:63:ce:40:0a:6f:2a:3a:0e:ae:98:11:72:cf:
         6f:0c:cf:16:95:44:67:f0:a1:6b:44:2c:ec:1e:d3:24:ea:c9:
         be:d2:79:ba:6c:e5:c8:a1:be:55:e3:d9:9f:f7:2a:b9:9d:21:
         af:30:62:fa:bd:64:3e:3c:48:0d:83:0b:88:10:77:ad:1a:ee:
         8e:47:30:7c:29:09:49:ad:00:3e:af:fa:4c:e0:63:8c:0a:07:
         09:a3:c9:67:fc:dc:fd:67:e0:68:68:d6:ef:dd:a9:1f:c6:ca:
         09:d2:61:9a:b5:0a:a1:e6:c8:78:72:d4:2a:63:c3:01:66:c1:
         f0:85:06:7f:3f:78:89:ca:32:c9:40:62:e9:9d:74:86:06:a0:
         bd:d0:bc:a3:f7:e1:61:12:ba:60:17:a1:6f:1b:20:73:86:b5:
         84:dc:cc:9d:06:ad:16:0a:70:f6:aa:11:86:28:c7:a4:4a:75:
         dd:f4:69:10:10:75:f9:89:74:7a:28:a2:4c:da:43:26:d8:a9:
         77:a4:13:7a:cc:d5:c6:78:8f:4c:63:13:cc:36:91:e2:21:02:
         e7:f8:04:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSdIw6tMXZOPqf9iTRGLa6yINe9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjczNzkyNzFGN0JFRkYxQzBBREY0RjcxNUY5NEUyQ0Ey
OTEyRERFRDAeFw0yNjA4MjEyMDE2MDZaFw0yNzA4MjAyMDIxMDZaMDMxMTAvBgNV
BAMTKEUyMjJGQjY1MjVFQ0RDMjc1NUY1NENBRjFENTM1QkQ5OTI1OTUyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHfSLNS1jnIPaIqkfCrxuluz+
4KBKuW+4YHnh4pBywRDiabr5NnxMG8gcCIcX6Q6Yu9JJEenYxHWxIj/97SsrWFkZ
DDbMmPGXrzdBFMQwDqQCRB3c+tGC8yFqXij8+BiQXDpNozQYDmoH91bjh/TXg5RP
J1bdRvno7O1It5JGbYHg5lIbZGAb0qYuOHX61t1UQahRMd4FsNZaAoS48ZyNt3kc
iXhe5p9bCIbp/sWEsflRjIPF5TjYg/4qq3hJwcS5AJUi/SLMq9fxTBHVx9vApmh6
TJJUfyHvspj/Kny9/rMr/sEXCczp/wJVfAzxgxIi0xFB6AQHmPDjgLlYRExLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4iL7ZSXs3CdV9UyvHVNb2ZJZUkIwHwYDVR0j
BBgwFoAUZzeScfe+/xwK309xX5TiyikS3e0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC82NzM3OTI3MUY3QkVGRjFDMEFERjRGNzE1Rjk0RTJDQTI5MTJEREVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3Mzc5MjcxRjdCRUZGMUMw
QURGNEY3MTVGOTRFMkNBMjkxMkRERUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzEzNzM3MmUzMzM4MmUzODM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSZYMA0GCSqGSIb3DQEBCwUAA4IBAQAmJwflCmkq
jrWOk1VOjchvLPGA4NcDiML6dZmETUY7+lkGe0VjmFqkiWPOQApvKjoOrpgRcs9v
DM8WlURn8KFrRCzsHtMk6sm+0nm6bOXIob5V49mf9yq5nSGvMGL6vWQ+PEgNgwuI
EHetGu6ORzB8KQlJrQA+r/pM4GOMCgcJo8ln/Nz9Z+BoaNbv3akfxsoJ0mGatQqh
5sh4ctQqY8MBZsHwhQZ/P3iJyjLJQGLpnXSGBqC90Lyj9+FhErpgF6FvGyBzhrWE
3MydBq0WCnD2qhGGKMekSnXd9GkQEHX5iXR6KKJM2kMm2Kl3pBN6zNXGeI9MYxPM
NpHiIQLn+AR4
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:42 2026 by rpki-client