Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
File:                     3137372e37332e34382e302f32312d3234203d3e20323632353635.roa (raw, json)
Hash identifier:          KTJE80UlABUztee3ArUe/NM7woXW2A8O1ywUpW39+oY=
Subject key identifier:   CD:35:13:B4:50:9B:27:BA:30:71:29:F2:ED:10:B2:68:8E:39:84:6E
Certificate issuer:       /CN=E62F8545624AB68EBF7211B6A74DE746D6123457
Certificate serial:       6299547D04169EFA2A1CDC05D314340E96A028F0
Authority key identifier: E6:2F:85:45:62:4A:B6:8E:BF:72:11:B6:A7:4D:E7:46:D6:12:34:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
Signing time:             Fri 23 Oct 2026 00:25:00 +0000
ROA not before:           Fri 23 Oct 2026 00:20:00 +0000
ROA not after:            Fri 22 Oct 2027 00:25:00 +0000
asID:                     262565
IP address blocks:        177.73.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.crl
                          rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:99:54:7d:04:16:9e:fa:2a:1c:dc:05:d3:14:34:0e:96:a0:28:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F8545624AB68EBF7211B6A74DE746D6123457
        Validity
            Not Before: Oct 23 00:20:00 2026 GMT
            Not After : Oct 22 00:25:00 2027 GMT
        Subject: CN=CD3513B4509B27BA307129F2ED10B2688E39846E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:c7:cc:2c:ac:c0:52:1a:87:95:d1:1a:01:
                    9c:45:b9:d8:cb:2f:f5:f4:d0:6c:93:23:42:c4:c9:
                    a0:0f:c1:7c:8b:13:ec:7f:f7:33:c9:f3:62:ae:43:
                    f8:df:04:81:6f:6f:f8:26:72:78:ab:af:31:2f:5c:
                    62:4c:56:a1:c8:c1:2f:54:30:27:22:9d:a8:20:28:
                    e1:c3:b1:a8:16:db:72:f5:78:a2:e8:e7:f6:f9:0d:
                    8a:18:aa:06:ef:a4:5d:26:75:23:a6:8c:04:e8:f2:
                    d1:4a:b6:f2:c8:91:97:63:e6:94:a5:74:a4:af:4f:
                    c7:8f:0b:6e:fe:c7:3b:30:39:1f:bd:4e:cc:bd:4f:
                    b1:61:23:24:9a:0e:9f:fb:b4:67:27:46:60:20:6c:
                    08:04:02:27:3c:66:36:60:4b:76:39:aa:a5:79:aa:
                    81:5c:ef:36:26:50:45:fb:59:2f:78:83:a4:74:db:
                    4d:cd:37:f6:b7:c6:20:9d:66:1f:2d:b9:90:49:50:
                    13:89:24:a8:72:97:c1:9d:15:9f:c0:62:54:e6:2f:
                    3e:28:a5:a5:6c:cc:bc:22:e3:ec:7d:24:ee:7e:50:
                    1f:6c:23:c5:30:24:28:2b:f4:d0:f7:ba:26:00:74:
                    01:8e:a4:10:93:90:24:b7:7f:9e:7b:90:1c:7a:cc:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:35:13:B4:50:9B:27:BA:30:71:29:F2:ED:10:B2:68:8E:39:84:6E
            X509v3 Authority Key Identifier:
                keyid:E6:2F:85:45:62:4A:B6:8E:BF:72:11:B6:A7:4D:E7:46:D6:12:34:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/E62F8545624AB68EBF7211B6A74DE746D6123457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F8545624AB68EBF7211B6A74DE746D6123457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:b3:02:44:5a:44:57:70:24:50:af:2e:5a:37:e1:69:21:
         25:ac:29:33:6e:72:4d:f7:79:9c:ab:99:27:b0:e3:63:0b:a4:
         f1:1d:6e:8f:5d:bf:f9:41:31:ff:a7:e0:29:d2:20:82:87:4d:
         de:40:36:c5:fe:88:fe:39:72:ed:5a:fa:ae:18:98:ef:c5:b4:
         cd:3b:34:dc:57:2b:a0:30:14:ff:c9:03:16:23:ee:52:ab:38:
         5c:73:26:78:b8:d9:21:43:7e:98:fb:e9:3f:72:d3:cb:94:60:
         34:27:2b:f7:62:1e:5a:49:20:d4:cf:7d:79:26:b6:7a:47:9b:
         e0:5a:5e:d2:8d:b9:3d:31:34:43:4b:aa:95:6f:b6:7c:f9:a4:
         fc:51:c9:cf:a2:98:7e:72:b0:ec:46:6c:40:dd:58:1f:1d:74:
         b0:57:be:ca:e4:0e:dd:b0:02:49:4d:08:2c:34:2f:d3:81:6c:
         55:07:fd:e8:99:97:7e:25:84:8c:44:c3:9c:d3:10:7e:1e:6f:
         fd:29:c2:95:91:32:4f:89:21:58:60:46:e2:4a:d4:3d:c6:df:
         3d:34:93:31:9b:86:ca:33:96:c4:aa:4d:62:cc:5a:78:ae:97:
         f9:11:e5:67:ab:11:ba:df:82:9d:e8:91:ac:63:c4:a0:91:52:
         c8:b1:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:52:23 2026 by rpki-client