Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39332e302f32342d3234203d3e20323632383035.roa
File:                     3137372e3132382e39332e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          i7ODabIP/7EWf/VhPqZA9X1C8pngAjW4dJTHwrMIlQ8=
Subject key identifier:   F6:7B:55:8E:39:9E:78:79:5A:CB:A9:28:64:13:A5:05:6E:9B:49:A7
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       6D49B3D367FA1B5D691108A7E17404BB821AE2B5
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39332e302f32342d3234203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:30 +0000
ROA not before:           Thu 13 Aug 2026 19:32:30 +0000
ROA not after:            Thu 12 Aug 2027 19:37:30 +0000
asID:                     262805
IP address blocks:        177.128.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:49:b3:d3:67:fa:1b:5d:69:11:08:a7:e1:74:04:bb:82:1a:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:30 2026 GMT
            Not After : Aug 12 19:37:30 2027 GMT
        Subject: CN=F67B558E399E78795ACBA9286413A5056E9B49A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:e6:a3:8d:a2:03:c0:86:e0:df:9e:db:6c:
                    9b:cf:87:9b:8d:c7:92:ee:fc:52:8c:fd:21:d4:35:
                    82:bd:3b:df:42:e0:43:96:9a:6f:6d:8a:2e:aa:f7:
                    51:8c:e9:6b:a7:94:2c:22:46:b0:84:5d:57:c0:99:
                    df:79:05:1f:8a:d3:ce:b2:3d:7b:98:99:71:d3:e5:
                    ea:d7:6f:41:a4:10:5b:ef:81:2f:0c:52:12:fa:94:
                    9d:95:97:b9:81:e6:f8:de:40:53:41:59:5f:56:30:
                    90:cd:16:a9:bb:aa:46:26:3a:d2:db:c0:f3:bc:11:
                    90:ce:9a:0a:bc:2e:31:7e:e3:bf:c7:80:6c:5e:a2:
                    81:f0:db:d3:2e:14:0b:42:6f:2f:40:d3:62:b0:dc:
                    c4:67:de:40:c5:2c:ce:83:77:75:21:6d:63:5f:2d:
                    d1:97:59:42:12:39:ad:a2:56:9a:63:73:8f:08:fc:
                    aa:f1:7c:d3:ef:0a:f2:67:d6:36:dd:99:7e:e6:ad:
                    58:18:38:20:53:d2:94:d3:c5:88:49:0b:84:0e:4d:
                    b4:d8:90:41:4b:a7:bd:7e:0b:ec:ee:54:07:7e:9f:
                    77:4b:4c:1b:8b:6a:a6:ff:a9:e6:af:9d:f7:40:b3:
                    77:74:72:94:a0:74:47:7d:b1:c5:23:4f:b2:a5:08:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:55:8E:39:9E:78:79:5A:CB:A9:28:64:13:A5:05:6E:9B:49:A7
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39332e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:2c:20:0f:94:cc:2a:c4:6f:64:55:a0:49:b3:69:c8:e1:7a:
         db:e9:eb:e9:45:3c:5d:e9:de:48:1a:13:0d:8b:e7:b7:79:bb:
         95:2e:ce:3b:8a:3e:21:22:c7:74:28:4a:11:53:da:bd:a9:f2:
         4e:ac:37:ab:a6:90:31:68:80:03:e7:40:89:9a:84:eb:27:72:
         13:29:6e:ee:8c:7b:b5:c3:b1:de:b6:ed:cc:75:eb:ca:5e:a0:
         5f:0f:ff:ab:23:cf:e1:7e:7f:8f:3f:72:c5:15:d8:cd:2d:0c:
         e4:3f:1a:53:14:4f:77:0d:03:e4:44:3d:aa:a3:f8:a8:57:96:
         8f:ca:2d:82:e8:d8:aa:ff:e8:42:a5:1a:2d:bc:19:bf:e5:56:
         80:f0:4b:c5:e4:8e:a7:73:ed:18:a9:35:e9:d4:8b:0c:a2:9a:
         64:3c:4d:8d:1f:1c:77:eb:cd:00:55:6f:4e:4a:e0:66:5c:4d:
         6e:2e:8f:a1:ad:41:ff:c2:47:16:7c:12:6f:af:13:ec:ca:b2:
         fc:e7:97:90:60:cd:4d:d6:4c:bd:f8:1b:15:18:b2:50:13:f3:
         e4:ef:49:33:85:7b:e0:f7:1f:7a:ec:71:59:11:aa:07:f6:93:
         fd:27:60:30:3b:4f:fb:25:16:a2:21:03:05:03:42:e8:33:ba:
         b3:f2:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:32 2026 by rpki-client