Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34372e302f32342d3234203d3e20323633353931.roa
File:                     3137372e31302e34372e302f32342d3234203d3e20323633353931.roa (raw, json)
Hash identifier:          0T5SPCa+NYjuTuPszBHOQKfdTMpK7W1y4SdMKlCHTS8=
Subject key identifier:   93:31:49:E4:52:62:7B:CF:14:4B:02:C7:95:FA:29:05:E3:B5:9C:C4
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       506498F7E55C210B645B3BEBFE80206327F24FD6
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34372e302f32342d3234203d3e20323633353931.roa
Signing time:             Mon 24 Aug 2026 13:37:09 +0000
ROA not before:           Mon 24 Aug 2026 13:32:09 +0000
ROA not after:            Mon 23 Aug 2027 13:37:09 +0000
asID:                     263591
IP address blocks:        177.10.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 17:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:98:f7:e5:5c:21:0b:64:5b:3b:eb:fe:80:20:63:27:f2:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Aug 24 13:32:09 2026 GMT
            Not After : Aug 23 13:37:09 2027 GMT
        Subject: CN=933149E452627BCF144B02C795FA2905E3B59CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:5b:14:25:46:b0:9f:38:0b:84:57:75:8e:
                    6b:78:3a:87:21:28:6e:d2:f5:66:ed:46:94:d7:d3:
                    98:f9:e2:e1:98:78:2f:27:c0:40:10:8f:8e:8f:38:
                    63:03:10:93:af:a7:53:03:c2:da:18:48:07:c9:93:
                    61:4a:b3:07:29:ae:66:d5:8c:15:f8:4c:cd:ad:51:
                    ee:f3:81:81:74:52:94:54:bb:db:e8:7b:49:ae:11:
                    4a:ed:37:56:1d:90:10:0a:4e:94:64:fd:76:2b:52:
                    7a:5d:53:f7:4b:27:ea:94:37:0a:4e:13:c5:0c:62:
                    b6:e4:47:bb:9f:eb:13:d3:f4:25:06:ed:16:58:1c:
                    b6:18:2e:57:d6:37:6e:52:a2:89:12:97:97:ed:68:
                    7c:49:b3:21:e9:cf:9f:6c:46:eb:cf:e4:09:7f:6a:
                    f9:be:9c:e4:71:40:06:6e:1c:c6:f9:95:41:10:53:
                    ba:a9:0d:fc:5d:b9:f6:0b:f0:c7:4b:66:59:f4:dc:
                    6f:3e:91:36:f1:a5:65:c7:b2:32:af:a6:2f:de:df:
                    af:59:51:df:a7:7b:83:e6:c6:a1:0d:ec:ac:64:d7:
                    5d:fb:e9:d7:3a:69:b5:e5:04:aa:97:c1:1c:b2:b1:
                    7d:35:78:8c:f4:53:b7:f1:e3:26:b3:7d:be:2a:32:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:49:E4:52:62:7B:CF:14:4B:02:C7:95:FA:29:05:E3:B5:9C:C4
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34372e302f32342d3234203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:9c:c7:6a:b9:26:fe:00:7e:8d:d5:ba:e6:25:13:9e:68:
         64:50:42:72:0e:36:aa:0b:22:40:a4:c0:5f:84:a1:a1:03:a9:
         8f:20:f8:ca:7f:b7:f5:c9:3a:c2:03:55:8b:6a:ad:81:7f:86:
         25:1d:60:23:75:d3:50:b2:b6:0c:49:00:cc:3a:ff:45:f6:17:
         0b:6a:6b:86:af:4f:ba:2b:59:aa:f2:6c:ae:ca:af:46:74:7e:
         c6:64:e4:25:0d:f8:e9:4d:d6:0d:54:7e:89:bf:5f:2a:9c:8a:
         55:3a:a8:dc:9e:b7:d8:1c:1b:72:ef:1b:f6:12:f0:ab:a5:0b:
         fc:bf:ec:da:60:87:74:61:61:19:0b:b9:8f:03:c6:09:92:07:
         85:68:fe:a0:ae:9e:ad:5c:38:3d:52:7b:a3:40:5e:0c:a2:b0:
         b2:a0:b4:e8:92:3a:16:2d:bf:d2:32:77:85:e4:ed:b5:d8:51:
         e4:69:cf:cf:65:74:40:cd:af:af:ff:1e:74:93:90:d4:76:fc:
         3f:ab:f9:ce:b6:63:70:00:5d:34:cc:89:8e:06:18:f8:14:ac:
         27:20:14:66:56:58:f5:9c:52:e1:47:b9:77:24:e9:12:8e:77:
         f8:33:27:07:80:71:0a:f8:ac:a3:b8:9e:5e:24:32:27:28:1f:
         9d:ee:60:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUGSY9+VcIQtkWzvr/oAgYyfyT9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E5NDFCQTRGNjRGNDIyMDM1QUE4NEU0NkZEMTRDQkFC
RDgyNUI0OTAeFw0yNjA4MjQxMzMyMDlaFw0yNzA4MjMxMzM3MDlaMDMxMTAvBgNV
BAMTKDkzMzE0OUU0NTI2MjdCQ0YxNDRCMDJDNzk1RkEyOTA1RTNCNTlDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWFsUJUawnzgLhFd1jmt4Ooch
KG7S9WbtRpTX05j54uGYeC8nwEAQj46POGMDEJOvp1MDwtoYSAfJk2FKswcprmbV
jBX4TM2tUe7zgYF0UpRUu9voe0muEUrtN1YdkBAKTpRk/XYrUnpdU/dLJ+qUNwpO
E8UMYrbkR7uf6xPT9CUG7RZYHLYYLlfWN25SookSl5ftaHxJsyHpz59sRuvP5Al/
avm+nORxQAZuHMb5lUEQU7qpDfxdufYL8MdLZln03G8+kTbxpWXHsjKvpi/e369Z
Ud+ne4PmxqEN7Kxk11376dc6abXlBKqXwRyysX01eIz0U7fx4yazfb4qMpqfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkzFJ5FJie88USwLHlfopBeO1nMQwHwYDVR0j
BBgwFoAUepQbpPZPQiA1qoTkb9FMur2CW0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFXeGtQbUZvelFlejZ3MWRScUY2ckhBanhDSkJyaE4yVXpnY0JiV2hL
c3UvMC83QTk0MUJBNEY2NEY0MjIwMzVBQTg0RTQ2RkQxNENCQUJEODI1QjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBOTQxQkE0RjY0RjQyMjAz
NUFBODRFNDZGRDE0Q0JBQkQ4MjVCNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRV3hrUG1Gb3pRZXo2dzFkUnFGNnJIQWp4Q0pCcmhOMlV6Z2NCYldoS3N1LzAv
MzEzNzM3MmUzMTMwMmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQovMA0GCSqGSIb3DQEBCwUAA4IBAQBtJpzHarkm
/gB+jdW65iUTnmhkUEJyDjaqCyJApMBfhKGhA6mPIPjKf7f1yTrCA1WLaq2Bf4Yl
HWAjddNQsrYMSQDMOv9F9hcLamuGr0+6K1mq8myuyq9GdH7GZOQlDfjpTdYNVH6J
v18qnIpVOqjcnrfYHBty7xv2EvCrpQv8v+zaYId0YWEZC7mPA8YJkgeFaP6grp6t
XDg9UnujQF4MorCyoLTokjoWLb/SMneF5O212FHkac/PZXRAza+v/x50k5DUdvw/
q/nOtmNwAF00zImOBhj4FKwnIBRmVlj1nFLhR7l3JOkSjnf4MycHgHEK+KyjuJ5e
JDInKB+d7mBe
-----END CERTIFICATE-----
Generated at Tue Aug 25 11:13:04 2026 by rpki-client