Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          IiKAFtCQjz9KpcPtGuXDTRdtNYdAMY6vyQMGpRK1pkM=
Subject key identifier:   84:8C:5D:59:3B:B4:1B:28:2E:0C:EF:05:EE:CF:E7:D0:C2:06:A1:0B
Certificate issuer:       /CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
Certificate serial:       41681A3BB92F7C1E015DF854CF60B007BECFB8D8
Authority key identifier: 08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa
Signing time:             Thu 21 May 2026 15:04:39 +0000
ROA not before:           Thu 21 May 2026 14:59:39 +0000
ROA not after:            Thu 20 May 2027 15:04:39 +0000
asID:                     262653
IP address blocks:        177.105.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:68:1a:3b:b9:2f:7c:1e:01:5d:f8:54:cf:60:b0:07:be:cf:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
        Validity
            Not Before: May 21 14:59:39 2026 GMT
            Not After : May 20 15:04:39 2027 GMT
        Subject: CN=848C5D593BB41B282E0CEF05EECFE7D0C206A10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:da:37:1e:f0:d0:90:82:03:66:32:e1:a6:
                    42:64:d3:70:d7:39:fc:40:74:0a:8d:32:b9:f3:04:
                    a6:d4:71:a1:ba:91:c8:f9:df:38:b8:66:ae:ae:c8:
                    2c:c8:9c:7b:bc:f2:97:fe:0c:3b:6f:85:1e:86:9c:
                    95:f6:b9:fd:28:51:0a:ac:6d:50:e6:1c:0b:04:fd:
                    c8:ab:51:8e:91:8f:7f:1e:de:4e:ab:e6:c3:f5:12:
                    88:d4:da:cf:12:92:e7:4d:28:71:49:dd:a2:70:46:
                    22:22:5f:2f:93:e6:63:73:53:68:34:8b:12:9f:ce:
                    13:3b:fd:e9:b2:ac:49:fb:c2:3c:67:c9:c1:af:2d:
                    7a:b0:c6:04:03:5e:86:ea:00:b9:0d:a0:ec:3c:fe:
                    62:ad:7d:58:50:04:9d:91:f4:9b:56:53:6d:da:c9:
                    4e:80:10:d5:e2:72:ef:2d:24:3c:f5:98:5a:5d:d9:
                    f8:c0:0c:46:d2:60:27:a0:25:06:b3:ce:be:0a:5a:
                    70:40:cc:17:94:67:a8:91:f0:ea:ab:08:29:53:3c:
                    e6:07:f2:5a:84:44:fc:31:e8:f2:f6:82:78:f9:ef:
                    ec:18:38:f6:45:2d:1f:39:ae:c8:93:dd:99:3f:85:
                    05:9f:25:0c:f9:67:8b:48:3f:f0:4a:0f:ce:ce:fe:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8C:5D:59:3B:B4:1B:28:2E:0C:EF:05:EE:CF:E7:D0:C2:06:A1:0B
            X509v3 Authority Key Identifier:
                keyid:08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:8e:4c:38:b7:7d:6a:f3:63:3e:3b:43:1e:ad:ac:6c:65:4a:
         ae:84:0e:64:a8:3b:ee:a0:fe:d5:13:df:11:70:30:02:b5:49:
         4d:54:ae:aa:e0:85:5f:e8:13:b5:40:51:f1:3b:f9:10:ce:e9:
         87:0a:d6:ed:8d:d1:96:07:a0:b7:e8:0a:b1:b5:bf:5a:1c:2a:
         f9:77:02:78:52:3d:53:d8:01:66:71:81:df:23:a3:2e:94:dd:
         31:22:79:7d:43:eb:e3:29:ba:aa:cd:3f:96:71:c0:f3:ce:e8:
         67:49:2a:9e:15:ac:8c:08:87:b3:37:17:f5:bc:48:10:5f:37:
         ee:34:26:c2:01:42:99:22:73:06:95:00:45:ac:81:3b:0f:2b:
         f4:84:fd:0b:45:35:8e:ca:41:6c:60:a8:c6:24:57:55:84:67:
         ed:1c:5a:50:0d:60:7a:b9:f2:90:50:13:57:a6:86:50:82:b7:
         92:87:f2:98:e9:88:5b:90:a3:0d:6e:fe:0e:4b:0b:08:2a:0a:
         30:8a:7f:a2:9b:f2:56:51:e0:0a:af:19:77:5e:6f:1d:b9:a6:
         24:50:d1:75:d9:fe:0e:b1:60:5f:05:91:9e:21:ce:36:14:3b:
         d7:78:43:23:bb:69:39:91:9a:4c:21:62:dc:44:14:c7:9f:ca:
         97:8e:38:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQWgaO7kvfB4BXfhUz2CwB77PuNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1RjM0M0I1OUM1QzMwMzdCNUYwRUUwMjYwRkQ2RDVF
QjdDQUNCNDAeFw0yNjA1MjExNDU5MzlaFw0yNzA1MjAxNTA0MzlaMDMxMTAvBgNV
BAMTKDg0OEM1RDU5M0JCNDFCMjgyRTBDRUYwNUVFQ0ZFN0QwQzIwNkExMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2to3HvDQkIIDZjLhpkJk03DX
OfxAdAqNMrnzBKbUcaG6kcj53zi4Zq6uyCzInHu88pf+DDtvhR6GnJX2uf0oUQqs
bVDmHAsE/cirUY6Rj38e3k6r5sP1EojU2s8SkudNKHFJ3aJwRiIiXy+T5mNzU2g0
ixKfzhM7/emyrEn7wjxnycGvLXqwxgQDXobqALkNoOw8/mKtfVhQBJ2R9JtWU23a
yU6AENXicu8tJDz1mFpd2fjADEbSYCegJQazzr4KWnBAzBeUZ6iR8OqrCClTPOYH
8lqERPwx6PL2gnj57+wYOPZFLR85rsiT3Zk/hQWfJQz5Z4tIP/BKD87O/txlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhIxdWTu0GyguDO8F7s/n0MIGoQswHwYDVR0j
BBgwFoAUCF80O1nFwwN7Xw7gJg/W1et8rLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8wODVGMzQzQjU5QzVDMzAzN0I1RjBFRTAyNjBGRDZENUVCN0NBQ0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUYzNDNCNTlDNUMzMDM3
QjVGMEVFMDI2MEZENkQ1RUI3Q0FDQjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArFp3DANBgkqhkiG9w0BAQsFAAOCAQEAvo5M
OLd9avNjPjtDHq2sbGVKroQOZKg77qD+1RPfEXAwArVJTVSuquCFX+gTtUBR8Tv5
EM7phwrW7Y3Rlgegt+gKsbW/Whwq+XcCeFI9U9gBZnGB3yOjLpTdMSJ5fUPr4ym6
qs0/lnHA887oZ0kqnhWsjAiHszcX9bxIEF837jQmwgFCmSJzBpUARayBOw8r9IT9
C0U1jspBbGCoxiRXVYRn7RxaUA1gernykFATV6aGUIK3kofymOmIW5CjDW7+DksL
CCoKMIp/opvyVlHgCq8Zd15vHbmmJFDRddn+DrFgXwWRniHONhQ713hDI7tpOZGa
TCFi3EQUx5/Kl444tw==
-----END CERTIFICATE-----
Generated at Sun May 24 20:15:33 2026 by rpki-client