Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131342e302f32342d3234203d3e20323632333031.roa
File:                     3137372e38372e3131342e302f32342d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          nk8dQd/y3M/5FURLSwWGJw9HOnpOlDCGAfSy47U6DnA=
Subject key identifier:   2C:77:34:13:FA:35:86:60:EC:48:C8:8A:48:7A:24:59:EC:CB:76:F1
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       63ED835DFA83A2289F3AD38A2440503A830AEB56
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131342e302f32342d3234203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:29 +0000
ROA not before:           Fri 07 Aug 2026 14:01:29 +0000
ROA not after:            Fri 06 Aug 2027 14:06:29 +0000
asID:                     262301
IP address blocks:        177.87.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:83:5d:fa:83:a2:28:9f:3a:d3:8a:24:40:50:3a:83:0a:eb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:29 2026 GMT
            Not After : Aug  6 14:06:29 2027 GMT
        Subject: CN=2C773413FA358660EC48C88A487A2459ECCB76F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:5f:b3:88:f9:bf:2b:97:9e:0c:01:b0:7c:
                    78:b6:ea:0c:ed:e6:f4:d1:89:d0:72:fc:58:6f:ab:
                    81:5e:38:a2:7a:c4:53:dd:f2:cb:31:c5:78:3e:2a:
                    36:47:50:50:29:3c:cd:00:5f:52:96:14:dc:48:66:
                    4e:45:b8:17:2c:05:c1:64:c9:94:25:0c:ba:29:3c:
                    2b:f7:2e:fe:84:73:b6:de:a4:58:7c:79:cd:63:ab:
                    9d:5f:9e:20:91:62:21:55:55:ff:9c:8e:b7:af:b9:
                    4f:ca:9c:67:f5:3e:20:da:78:1a:12:d9:a7:0a:55:
                    04:ef:1d:c0:6b:8a:3e:8d:52:0f:db:29:0a:23:ce:
                    f1:ff:5c:a7:3f:6b:80:e7:96:cd:3d:7f:d7:d5:73:
                    9b:4f:c9:71:f5:3b:ed:03:d3:eb:50:99:c1:ef:f5:
                    15:43:f5:a3:21:6e:c4:17:ee:48:4d:56:3f:b0:8a:
                    c6:9c:8a:c2:6b:f0:0a:30:9d:7f:22:44:5c:00:f3:
                    97:c8:cb:4e:ce:4d:fa:8d:92:74:b5:46:d8:24:25:
                    83:e3:a1:0f:26:f5:be:7e:82:19:33:08:fc:9f:db:
                    4f:05:be:4e:8f:96:39:50:2b:44:7f:86:67:47:47:
                    92:a8:12:3f:57:38:81:a5:75:39:f5:b7:a3:0f:97:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:34:13:FA:35:86:60:EC:48:C8:8A:48:7A:24:59:EC:CB:76:F1
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131342e302f32342d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:98:25:26:89:41:b5:9f:52:01:42:8d:0e:2a:f8:bc:69:cf:
         9c:c9:88:23:6a:80:0f:00:ab:7b:a8:f3:98:8f:b0:de:3b:ab:
         d2:db:4b:15:22:ae:23:13:83:77:67:0d:d1:2b:49:6d:c5:40:
         14:0f:1b:b6:ff:dc:c4:76:be:d2:3e:1a:ec:36:60:00:4c:c9:
         5a:c4:3f:d2:c3:cb:bd:9f:f6:05:0e:32:08:37:e5:35:10:4f:
         8a:93:cd:8f:e9:4c:e8:64:18:34:ae:06:ed:d2:53:9e:77:44:
         4f:d2:8c:e8:ca:75:b2:52:c9:1b:7f:e7:fb:fa:61:ad:e8:dc:
         03:62:dc:56:3e:7e:6e:35:48:5e:21:6a:97:52:35:19:48:56:
         d3:b3:c3:10:d2:54:4e:0d:79:1f:84:a8:02:63:63:11:8f:72:
         c1:fd:e5:df:02:b0:90:e6:5a:27:8d:3b:d1:ac:67:4f:fa:a3:
         75:e7:29:4f:be:7e:e1:5e:f1:1d:0b:1e:3b:19:98:fb:5a:83:
         2d:4f:5e:a8:b0:93:1f:be:02:f8:6a:92:f7:38:08:91:42:04:
         70:44:dd:14:b9:7b:ed:2e:d8:79:04:fe:50:68:da:fb:00:24:
         75:5b:3a:a8:28:0d:ed:3c:0c:a2:47:1e:fe:e2:d2:9c:2d:5f:
         ff:42:bb:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY+2DXfqDoiifOtOKJEBQOoMK61YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMDE5NTUwRjY1MzAwNjA0Qjc4NzAzOTg3Mjc4MjAw
RjhFMDc5RTAeFw0yNjA4MDcxNDAxMjlaFw0yNzA4MDYxNDA2MjlaMDMxMTAvBgNV
BAMTKDJDNzczNDEzRkEzNTg2NjBFQzQ4Qzg4QTQ4N0EyNDU5RUNDQjc2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSl+ziPm/K5eeDAGwfHi26gzt
5vTRidBy/Fhvq4FeOKJ6xFPd8ssxxXg+KjZHUFApPM0AX1KWFNxIZk5FuBcsBcFk
yZQlDLopPCv3Lv6Ec7bepFh8ec1jq51fniCRYiFVVf+cjrevuU/KnGf1PiDaeBoS
2acKVQTvHcBrij6NUg/bKQojzvH/XKc/a4Dnls09f9fVc5tPyXH1O+0D0+tQmcHv
9RVD9aMhbsQX7khNVj+wisacisJr8AownX8iRFwA85fIy07OTfqNknS1RtgkJYPj
oQ8m9b5+ghkzCPyf208Fvk6PljlQK0R/hmdHR5KoEj9XOIGldTn1t6MPl/KVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULHc0E/o1hmDsSMiKSHokWezLdvEwHwYDVR0j
BBgwFoAUhSAZVQ9lMAYEt4cDmHJ4IA+OB54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC84NTIwMTk1NTBGNjUzMDA2MDRCNzg3MDM5ODcyNzgyMDBGOEUwNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjAxOTU1MEY2NTMwMDYw
NEI3ODcwMzk4NzI3ODIwMEY4RTA3OUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzEzNzM3MmUzODM3MmUzMTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxV3IwDQYJKoZIhvcNAQELBQADggEBAJCYJSaJ
QbWfUgFCjQ4q+Lxpz5zJiCNqgA8Aq3uo85iPsN47q9LbSxUiriMTg3dnDdErSW3F
QBQPG7b/3MR2vtI+Guw2YABMyVrEP9LDy72f9gUOMgg35TUQT4qTzY/pTOhkGDSu
Bu3SU553RE/SjOjKdbJSyRt/5/v6Ya3o3ANi3FY+fm41SF4hapdSNRlIVtOzwxDS
VE4NeR+EqAJjYxGPcsH95d8CsJDmWieNO9GsZ0/6o3XnKU++fuFe8R0LHjsZmPta
gy1PXqiwkx++Avhqkvc4CJFCBHBE3RS5e+0u2HkE/lBo2vsAJHVbOqgoDe08DKJH
Hv7i0pwtX/9Cuxw=
-----END CERTIFICATE-----
Generated at Sun Aug 23 06:00:07 2026 by rpki-client