Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232302e302f32332d3233203d3e20323733343433.roa
File:                     3137372e32312e3232302e302f32332d3233203d3e20323733343433.roa (raw, json)
Hash identifier:          /mKnWiAn7e42aNk4yLZTRWgcO1Jrk7/ilu4sNO46lvQ=
Subject key identifier:   EB:BA:36:1F:B6:C0:A2:B5:9B:52:DD:86:A2:3A:63:37:A6:D7:44:3E
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       16A8C3C086D9787C687C98344B5FE70E5D54ACD9
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232302e302f32332d3233203d3e20323733343433.roa
Signing time:             Mon 05 Oct 2026 19:12:25 +0000
ROA not before:           Mon 05 Oct 2026 19:07:25 +0000
ROA not after:            Mon 04 Oct 2027 19:12:25 +0000
asID:                     273443
IP address blocks:        177.21.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a8:c3:c0:86:d9:78:7c:68:7c:98:34:4b:5f:e7:0e:5d:54:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct  5 19:07:25 2026 GMT
            Not After : Oct  4 19:12:25 2027 GMT
        Subject: CN=EBBA361FB6C0A2B59B52DD86A23A6337A6D7443E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:4e:65:fe:a2:21:90:67:81:bb:2a:74:bb:
                    32:2f:4c:15:29:e0:15:d3:8e:de:e7:d9:41:2a:cf:
                    b7:a1:41:cd:06:c5:9e:17:2e:6b:3a:42:0a:ba:fd:
                    e1:3f:3d:62:8f:2d:01:a8:e1:47:d2:24:a5:b4:44:
                    35:82:22:e5:45:da:8c:47:ef:36:5d:aa:80:f7:a2:
                    c9:ba:fa:ae:da:4c:05:a5:ab:1f:e8:4c:d1:db:7c:
                    cf:28:de:17:43:11:fc:c7:96:af:51:17:d1:0b:5b:
                    ad:79:5e:f8:44:ba:fe:bf:46:28:f2:2d:0b:87:44:
                    8e:54:9f:ab:ca:d9:e0:9a:82:95:78:00:3c:7b:5a:
                    4c:c2:36:a3:9f:2b:6e:32:06:71:56:52:22:59:86:
                    12:db:6f:f0:e2:49:88:8e:8e:41:87:96:72:23:cb:
                    ca:c4:3a:ab:b8:07:ef:99:be:86:3b:4f:45:d9:6f:
                    14:40:20:dc:71:2f:05:a7:7c:af:57:ff:6a:c6:04:
                    7d:46:18:95:52:16:6a:4c:13:b3:ec:a0:e9:e8:f0:
                    d7:2b:43:ac:03:f5:75:16:3a:d2:c5:78:67:cc:84:
                    17:0f:0f:1f:4e:06:93:46:78:bd:82:1a:52:ee:39:
                    0d:58:d2:27:7d:95:1a:29:e4:fc:45:b3:76:ff:1f:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:36:1F:B6:C0:A2:B5:9B:52:DD:86:A2:3A:63:37:A6:D7:44:3E
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232302e302f32332d3233203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:17:60:cb:8f:92:5f:1e:de:32:a5:06:f9:60:f1:ea:cc:48:
         9a:c3:d5:1d:94:74:ab:33:07:9e:e3:bb:8b:02:54:c8:23:de:
         b1:a1:8a:39:2e:90:fd:50:a4:86:0a:c0:08:55:3a:20:8a:c2:
         c1:8a:3c:8a:bf:c3:24:92:0e:46:d7:c9:2e:04:f3:c5:6b:85:
         21:76:93:e5:00:30:12:18:c1:01:dd:26:2a:0f:c7:da:08:09:
         87:90:0d:b0:a0:71:9e:de:34:a7:be:a0:b0:c6:05:d3:72:4c:
         3a:8c:0d:37:25:20:3f:63:ac:0f:5e:39:14:2a:0c:7d:06:87:
         6c:d9:79:c5:1f:f2:16:ce:8f:b8:02:9b:d0:48:4a:29:22:e3:
         3f:bb:e2:6c:a9:13:6d:3c:fe:bc:3f:96:74:db:7d:af:77:0c:
         02:a5:0e:d4:89:31:26:9a:32:d2:43:98:7c:14:ef:0f:23:4d:
         46:02:d9:e4:d1:e8:0c:30:f8:48:2f:3c:1b:94:fe:90:52:57:
         96:39:90:eb:1f:72:13:41:4d:0f:8f:96:be:24:82:cb:36:49:
         a1:5f:2e:4e:9c:23:20:68:ac:10:3b:2b:14:22:1b:4d:3c:e9:
         ca:62:bf:d5:28:5e:a7:0a:7f:45:16:bd:9d:7f:42:e6:8e:92:
         f7:b9:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:39:33 2026 by rpki-client