Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32332d3233203d3e20323632333031.roa
File:                     3137372e38372e3131322e302f32332d3233203d3e20323632333031.roa (raw, json)
Hash identifier:          GRdvEn6ac9JI+LBaQ2drFuLjp1kUckE9pUxuTX10Qt0=
Subject key identifier:   B3:01:1E:BF:6F:5B:1A:83:C9:59:53:EA:F9:C2:AD:1E:6D:45:76:C9
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       579962B91AB0DC04C118EC145D6C82D9B6068AAB
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32332d3233203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:29 +0000
ROA not before:           Fri 07 Aug 2026 14:01:29 +0000
ROA not after:            Fri 06 Aug 2027 14:06:29 +0000
asID:                     262301
IP address blocks:        177.87.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:99:62:b9:1a:b0:dc:04:c1:18:ec:14:5d:6c:82:d9:b6:06:8a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:29 2026 GMT
            Not After : Aug  6 14:06:29 2027 GMT
        Subject: CN=B3011EBF6F5B1A83C95953EAF9C2AD1E6D4576C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:af:ef:68:f8:60:00:ad:38:6b:95:46:43:
                    2b:65:7f:8f:4d:62:7c:85:ea:24:9a:19:6e:31:3d:
                    b1:a0:74:de:0c:65:00:3b:ea:56:11:21:81:cd:aa:
                    51:9e:52:26:39:58:f1:d7:d5:98:5a:73:fc:15:1b:
                    06:85:4b:0b:89:28:8a:51:9a:b2:0e:22:fd:14:83:
                    e8:6d:9f:61:46:4e:87:1d:62:58:44:ab:4b:34:57:
                    ed:26:c7:1b:e7:08:19:9d:4d:fe:4d:5b:6d:60:e1:
                    e4:27:a9:14:76:68:5f:72:7d:74:de:1b:ac:16:fc:
                    dd:21:d8:cb:4e:8c:f4:2e:5e:de:74:1f:98:3a:a4:
                    a2:3f:7b:8d:54:5b:1d:3b:fd:d4:bc:c4:8a:fa:06:
                    f4:f7:e5:70:8b:d3:80:3f:af:57:7b:47:fc:56:70:
                    64:f2:46:a2:93:a3:8e:41:84:45:37:6d:11:f2:08:
                    95:70:e1:a7:c2:4a:cf:b9:84:a4:30:c2:72:68:b4:
                    e5:c7:cb:7a:7e:31:ea:04:b6:63:0e:e9:8b:03:da:
                    4e:4a:da:d9:fc:fe:6c:76:e8:fc:c6:4c:b9:a7:72:
                    72:5c:b3:43:c0:4c:27:dd:6b:7a:91:41:ab:52:a0:
                    99:c9:00:cb:1b:a3:8f:14:0e:82:0b:f4:07:d5:0f:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:01:1E:BF:6F:5B:1A:83:C9:59:53:EA:F9:C2:AD:1E:6D:45:76:C9
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32332d3233203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:77:dc:5a:d9:5d:15:d3:8f:75:81:17:99:cf:21:2f:ed:e2:
         06:ec:34:0f:38:18:a3:53:23:91:41:50:49:fd:d3:2f:7e:e3:
         e9:8a:cf:16:07:3c:8a:6b:76:bb:46:8a:f2:25:f9:68:38:42:
         f2:48:0b:16:ff:56:b0:f2:00:eb:42:b0:b0:4e:15:a2:80:90:
         40:c0:9d:6d:75:04:ff:38:ad:fe:d0:95:14:a2:62:96:eb:35:
         74:e4:fb:1f:61:1f:fd:35:27:28:bd:b5:f6:9b:18:fb:b1:26:
         5f:1b:1f:76:db:03:7e:f6:d3:ae:26:3e:71:6c:a1:95:5c:f8:
         ea:73:3c:0c:86:ed:2d:53:8f:27:3d:56:fe:88:2a:84:a3:dd:
         b0:9f:32:04:8f:40:3b:9b:11:6e:de:64:7c:13:3f:00:fe:b3:
         81:ed:e3:23:83:ce:7e:d5:c0:bf:dd:57:1e:86:f5:55:29:a1:
         76:e0:43:8d:05:2c:5a:da:06:93:08:79:54:d1:91:46:7a:9c:
         e0:3d:02:97:91:47:88:dc:13:44:22:6f:7b:f5:2d:8f:9a:9c:
         b1:b5:e9:b0:85:60:2b:e2:04:1a:32:8e:e9:95:cc:fd:a0:a0:
         ae:0c:59:26:b8:51:e6:20:75:d5:9e:5b:91:5d:9b:dd:1a:47:
         ad:41:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:57 2026 by rpki-client