Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa
File:                     3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          W0VQCYyJC5qQfJ8NZ+HDt2cXr1+KvnMltwrzZQJf5Bg=
Subject key identifier:   37:E3:AA:65:86:9B:D6:2E:1C:BE:4C:71:28:DF:40:81:C5:08:62:E8
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       66350C652AC2A2566DC77E59698D5246CFDC3691
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:34:50 +0000
ROA not before:           Fri 14 Aug 2026 19:29:50 +0000
ROA not after:            Fri 13 Aug 2027 19:34:50 +0000
asID:                     262773
IP address blocks:        177.70.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:35:0c:65:2a:c2:a2:56:6d:c7:7e:59:69:8d:52:46:cf:dc:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:29:50 2026 GMT
            Not After : Aug 13 19:34:50 2027 GMT
        Subject: CN=37E3AA65869BD62E1CBE4C7128DF4081C50862E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:42:11:49:74:0d:66:de:9d:c1:46:fb:8c:
                    33:55:97:80:3c:2a:64:0e:94:51:02:42:f6:88:c3:
                    d3:3b:67:c3:c7:6f:01:0b:64:1d:08:fd:07:ac:e8:
                    0c:1b:1f:9c:cc:5c:52:f8:e6:83:8a:5b:33:cc:d6:
                    0d:57:06:d5:f2:95:3f:4c:12:9f:38:07:6a:fc:6f:
                    bb:88:2a:5f:e1:71:91:66:91:8e:19:7e:5a:9b:31:
                    6b:5c:de:ab:80:c3:f7:ca:80:c1:db:c7:f1:6d:88:
                    d1:9c:bc:f2:2e:c7:a7:40:6a:3d:9f:72:7c:49:e2:
                    9d:9a:9e:c1:ff:c9:63:1c:21:50:5d:4b:a7:3b:7d:
                    f5:29:26:2d:45:0d:30:4b:ff:a6:b8:9b:e1:8f:01:
                    37:ce:9b:81:57:58:8f:95:63:31:4d:f8:97:6c:64:
                    78:6d:72:f4:33:d1:a0:46:8f:b7:dc:91:58:b5:48:
                    5f:16:3a:86:cf:30:a0:61:f9:2b:77:65:bf:30:dd:
                    79:60:47:7b:b6:cd:35:96:2a:04:e6:ca:17:92:92:
                    f1:58:06:d0:39:38:a6:4a:c1:f1:ce:a8:9e:38:21:
                    4b:d0:f4:8f:46:83:48:cb:7d:a3:30:db:44:a4:e8:
                    3a:d9:98:16:d0:0e:b9:04:b5:c2:6d:5f:d3:37:a3:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E3:AA:65:86:9B:D6:2E:1C:BE:4C:71:28:DF:40:81:C5:08:62:E8
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:0a:18:b1:66:6e:81:86:cd:5d:8d:32:b9:0b:01:e3:ed:
         91:c8:af:8f:e0:da:ba:32:65:be:9e:bc:ac:56:94:3b:76:d9:
         aa:08:1b:fa:4f:f7:05:5c:ee:00:38:c2:93:62:a1:b3:66:06:
         f4:d2:94:ee:e5:16:2d:c7:02:b0:33:c0:43:86:62:84:f8:7a:
         45:ae:da:94:a6:18:54:b2:c5:68:76:db:95:ad:aa:de:c7:87:
         1a:ef:56:59:0b:88:4b:89:4d:d9:cd:a0:b6:30:b4:3c:14:31:
         88:b1:93:e0:ce:8e:81:61:04:5c:49:cc:37:e3:19:a0:aa:42:
         b6:4a:20:84:93:42:64:37:88:c3:f9:5c:e6:96:85:d3:de:00:
         1e:4e:2a:dd:2a:5b:cd:d9:4b:74:51:93:6a:11:08:e6:48:3a:
         3a:99:25:2c:c3:1d:8c:47:c8:f8:0c:38:f0:c9:20:f5:20:b8:
         3d:05:42:f6:b9:a5:45:6d:24:1f:53:aa:61:cd:7a:12:a7:e9:
         a0:0a:fb:e1:0f:77:c4:9f:c8:62:93:7d:4f:27:99:c1:da:03:
         2a:37:bf:55:12:43:02:19:09:3b:5e:8c:d1:af:15:22:3e:83:
         dd:2f:b4:c7:85:bb:b8:9e:c6:06:3b:9f:6e:23:8f:8c:d9:d4:
         b4:e5:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:37:04 2026 by rpki-client