Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3234203d3e203532353237.roa
File:                     3137372e3135322e38302e302f32312d3234203d3e203532353237.roa (raw, json)
Hash identifier:          UYMRt0IT7eq1m/rlg5aspb6GSnOIzwZdA5PHZM/M7mE=
Subject key identifier:   44:2A:82:6B:8F:BC:9A:ED:C1:0D:6E:51:DE:F3:B2:AE:B1:0D:27:4A
Certificate issuer:       /CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8
Certificate serial:       3662EE6DF1BBACD4730414B0BDC27B6C55228073
Authority key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3234203d3e203532353237.roa
Signing time:             Tue 22 Sep 2026 13:55:30 +0000
ROA not before:           Tue 22 Sep 2026 13:50:30 +0000
ROA not after:            Tue 21 Sep 2027 13:55:30 +0000
asID:                     52527
IP address blocks:        177.152.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 21:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:62:ee:6d:f1:bb:ac:d4:73:04:14:b0:bd:c2:7b:6c:55:22:80:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8
        Validity
            Not Before: Sep 22 13:50:30 2026 GMT
            Not After : Sep 21 13:55:30 2027 GMT
        Subject: CN=442A826B8FBC9AEDC10D6E51DEF3B2AEB10D274A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:b3:ff:ee:c3:6c:ee:27:90:a8:39:36:b3:
                    a0:f1:31:8f:3d:3d:96:8d:c5:fe:9e:51:f4:35:56:
                    18:2f:c6:e0:0c:cd:61:14:c9:3e:74:79:95:3c:a0:
                    96:cf:02:7a:2a:7f:8c:54:d7:c8:21:be:be:7a:93:
                    49:e4:0e:ee:82:38:5f:75:10:25:89:b3:ce:b4:85:
                    bc:0a:e8:77:95:99:d0:64:8b:17:a9:15:9e:02:6b:
                    26:ad:7a:cb:0e:c7:a0:8b:56:0f:57:b0:14:d9:4f:
                    45:ad:52:6f:42:2c:fb:03:0c:a3:f7:00:22:26:aa:
                    31:42:a8:be:34:71:b9:d4:7a:ea:4a:8f:63:d5:72:
                    d7:14:4c:68:e0:33:91:91:31:05:cb:d8:fb:4c:d2:
                    74:48:9d:13:ff:f5:a9:09:84:36:76:97:cc:12:8a:
                    42:eb:5d:82:33:99:c7:0a:86:92:17:56:45:32:ba:
                    e6:f7:f0:6b:db:6e:4c:85:c9:ea:1b:8a:ab:9d:8f:
                    70:01:67:bc:b5:64:8c:fb:a8:5a:d4:08:25:b2:de:
                    9c:e7:44:fe:90:b8:1e:bb:ec:fe:c9:f4:cd:dd:42:
                    d6:d3:8e:bd:3a:4b:32:e5:0f:bf:e6:a9:6f:75:15:
                    52:0d:0b:53:9a:28:86:7f:c9:39:57:22:44:3a:8e:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2A:82:6B:8F:BC:9A:ED:C1:0D:6E:51:DE:F3:B2:AE:B1:0D:27:4A
            X509v3 Authority Key Identifier:
                keyid:35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:0c:de:73:6f:cb:62:ba:30:ed:4f:bd:63:03:76:27:3d:
         ab:1f:3c:6d:65:cd:84:2d:aa:c9:18:1a:5c:a8:12:a8:46:a7:
         c4:19:29:31:35:50:e2:bf:8e:20:be:df:20:5e:72:24:b2:a6:
         fb:68:5e:f6:cc:d2:9f:1b:d5:24:00:1b:3f:f4:14:8d:85:d2:
         a0:65:0b:23:6a:9f:ac:23:2d:ac:4e:aa:2f:0c:23:f2:7c:46:
         f4:f7:44:ab:20:b5:f2:bd:f1:62:b7:33:ed:36:c4:cb:80:39:
         c3:43:c1:68:44:91:cb:42:62:12:8a:2d:0c:43:cf:02:de:18:
         40:d1:06:2e:5f:17:7f:2a:b2:f1:44:c8:ca:e9:71:53:aa:f8:
         e7:a5:ee:11:b2:d2:72:f4:7b:92:8a:f5:fc:84:ae:9c:37:e9:
         51:1a:3b:a0:47:a0:ae:61:a4:33:1f:b9:4b:a4:23:6e:8b:5a:
         39:e7:bd:61:4c:5e:f8:c5:db:af:3f:03:9f:d7:25:9d:e9:bf:
         7e:78:b0:4b:26:f4:ab:5e:96:d6:5a:36:93:8a:d7:11:e6:ec:
         e7:c6:9c:d3:31:cb:8a:08:60:14:02:69:c0:83:59:18:a3:85:
         d0:93:54:09:2b:ba:2d:f8:e6:17:14:5e:19:4d:4a:b7:8c:6e:
         7e:1f:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:15:34 2026 by rpki-client