Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa
File:                     3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          WEDRTR070ZhJdfpa6TtqfYsFRcdau2Xf7NRWukc0BR4=
Subject key identifier:   90:B7:A3:DA:A2:A3:36:12:D3:97:C7:65:BA:52:02:23:7E:D2:F9:2E
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       31C702EF763A3A7E2BE65A6A1DD00C0B84EF5A5A
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 30 Sep 2026 21:05:32 +0000
ROA not before:           Wed 30 Sep 2026 21:00:32 +0000
ROA not after:            Wed 29 Sep 2027 21:05:32 +0000
asID:                     271700
IP address blocks:        177.67.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:02:ef:76:3a:3a:7e:2b:e6:5a:6a:1d:d0:0c:0b:84:ef:5a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Sep 30 21:00:32 2026 GMT
            Not After : Sep 29 21:05:32 2027 GMT
        Subject: CN=90B7A3DAA2A33612D397C765BA5202237ED2F92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:e6:00:9d:28:03:ec:c1:35:60:2b:e0:5a:
                    58:82:9a:f8:34:90:44:c4:f6:ed:d5:11:5d:a0:04:
                    43:d7:11:55:9a:8c:ad:2f:f2:9c:a0:d0:c1:3d:63:
                    85:d6:61:f2:f4:74:3d:14:25:14:b8:15:e3:7d:01:
                    1c:47:a8:89:c8:96:43:5b:bf:69:bb:2b:87:ac:cf:
                    97:b1:ce:a7:98:f6:dd:e1:01:2c:ba:30:ce:5a:21:
                    b0:4d:13:d1:d1:d2:a8:4d:26:cb:d0:9f:1c:ba:f0:
                    ca:d8:51:b1:70:66:1f:30:0b:9c:63:5a:1d:bf:bc:
                    a6:67:49:52:2c:b8:f8:52:22:e8:a5:5b:16:31:e4:
                    83:9a:fd:42:32:5e:87:fb:99:37:e6:db:27:cc:65:
                    b1:f3:9c:b6:aa:5c:cc:da:2e:0b:ed:85:90:29:fe:
                    12:10:29:37:fc:d8:a8:2d:fa:28:13:cd:20:6a:ed:
                    dc:29:6e:6b:89:80:14:a2:89:33:be:f4:46:c0:0d:
                    43:9f:61:5f:95:ad:94:70:64:ce:8a:25:74:3a:03:
                    4a:9e:2e:14:b7:51:dc:f8:3a:15:0d:a0:13:f3:f4:
                    2c:d7:c9:4a:2d:8a:4a:05:ab:ac:01:9f:50:2b:63:
                    21:ec:ca:89:cd:a0:a7:07:4f:d6:13:da:31:34:28:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:A3:DA:A2:A3:36:12:D3:97:C7:65:BA:52:02:23:7E:D2:F9:2E
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:78:1d:73:88:41:cb:f2:1e:44:f3:5f:93:d6:e0:57:ad:93:
         a3:c5:2f:5d:14:70:39:a2:9f:70:bd:f8:1e:20:49:25:b7:d6:
         3a:71:6a:d0:74:49:af:bf:27:59:e0:b3:96:aa:7c:7d:2b:f5:
         8d:74:5c:fe:da:48:07:21:0e:d8:a3:56:9c:46:cb:8d:df:02:
         50:12:3f:9c:00:d2:05:e0:f3:e8:d5:d1:7a:11:e1:25:fb:60:
         7b:81:1f:35:08:4c:c1:dd:9e:c4:9a:db:c9:7a:e1:d5:97:9c:
         45:59:09:51:1d:f9:bd:b2:15:ef:29:18:b7:2a:1e:db:e1:64:
         83:64:4b:f7:7e:6f:f9:06:02:ac:4b:a0:eb:45:be:18:1d:7f:
         15:82:ca:55:45:38:52:2c:f0:e7:05:eb:28:3f:2e:43:f4:05:
         36:e1:3d:69:b4:e6:f6:7a:1b:b1:8b:97:51:64:39:df:fd:79:
         16:ef:d0:fb:d4:5e:e0:1f:ca:0c:f6:f9:66:fb:dd:6a:f6:f0:
         fc:e1:e1:78:fe:c1:bd:f7:f8:8f:b1:81:ba:98:05:4c:b2:f8:
         ad:cb:02:af:ba:13:0d:c7:fc:04:0f:95:2f:b5:6d:e4:5d:42:
         d6:b2:e2:6d:d9:d7:d2:31:7c:b4:36:ca:51:4a:1a:fe:60:92:
         78:21:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 01:27:13 2026 by rpki-client