Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          kLzmKqZ1b9uWOp7XRbbQDm0lXff5TnaEQMVs5CdVdvI=
Subject key identifier:   2C:46:AD:CF:39:BB:47:37:E1:36:D2:78:A6:EC:7C:D2:03:DD:FF:4E
Certificate issuer:       /CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
Certificate serial:       2EAA19DFC9B33FBC8A09051562A19EA3187E81AA
Authority key identifier: 08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 21 May 2026 15:04:46 +0000
ROA not before:           Thu 21 May 2026 14:59:46 +0000
ROA not after:            Thu 20 May 2027 15:04:46 +0000
asID:                     262653
IP address blocks:        177.105.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:aa:19:df:c9:b3:3f:bc:8a:09:05:15:62:a1:9e:a3:18:7e:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
        Validity
            Not Before: May 21 14:59:46 2026 GMT
            Not After : May 20 15:04:46 2027 GMT
        Subject: CN=2C46ADCF39BB4737E136D278A6EC7CD203DDFF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:fb:ca:18:88:ba:8b:dd:bf:c3:16:e8:35:
                    8a:d9:0d:b4:12:2c:76:bd:f1:f1:1d:53:9a:06:14:
                    60:be:4a:d9:88:ab:4d:0f:8c:df:c0:99:6b:30:d4:
                    cf:de:a0:5b:85:51:d1:db:d8:09:ae:3c:7c:44:68:
                    42:a9:63:90:95:0d:c4:c7:c7:e6:9f:22:04:dc:53:
                    8b:00:56:c9:05:f0:ec:45:0f:cf:8a:ed:f1:a7:73:
                    e7:13:49:af:d9:60:01:0b:e6:29:09:98:ae:8b:c7:
                    e5:06:f6:ea:88:ed:49:1c:f2:48:d6:e3:2e:8c:c2:
                    01:2a:85:af:cd:0e:ec:e9:da:f8:47:77:50:b9:0d:
                    61:41:f1:d2:5d:6b:c3:61:8a:62:1d:48:84:29:7c:
                    a4:ed:61:4f:8b:9d:dc:58:2d:fb:93:f2:13:0a:15:
                    c4:a1:20:f6:04:29:f7:b2:64:a6:52:8b:51:cc:a2:
                    93:d5:db:16:e2:38:1d:d0:d0:f3:ad:77:cc:fb:0f:
                    9a:cd:59:65:2d:d0:de:d4:b2:ea:5a:49:3b:9c:98:
                    59:cd:c6:49:63:a6:92:46:73:4f:2c:05:3a:c1:6c:
                    48:a4:a6:03:48:36:8e:87:5e:ad:98:b1:c9:d1:97:
                    f0:d6:80:c3:c7:7e:d6:43:8e:d6:87:82:73:2c:e5:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:AD:CF:39:BB:47:37:E1:36:D2:78:A6:EC:7C:D2:03:DD:FF:4E
            X509v3 Authority Key Identifier:
                keyid:08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0c:e5:19:a6:96:89:bc:20:6a:63:5d:3a:c6:c0:5e:68:16:
         23:ac:44:b8:94:97:9e:36:4d:57:8f:63:e0:fd:4e:d7:92:c5:
         0f:ae:74:3f:46:cf:a1:fd:7b:6e:95:8f:ad:41:e3:73:b6:eb:
         bf:4a:72:ee:73:06:51:42:fb:13:83:48:05:25:6e:13:35:44:
         3d:e1:61:a9:e0:c4:f8:78:b3:61:c6:65:f6:ba:68:52:89:05:
         5d:ad:b1:71:2b:7a:de:d7:c9:65:e4:47:00:69:4d:4c:58:08:
         a6:7d:63:40:d4:be:97:fc:3e:29:85:34:de:5f:a5:5e:61:5c:
         27:66:32:6d:64:f3:88:02:12:27:b9:b2:ff:a9:cf:87:17:a2:
         03:29:0c:e5:84:ff:0b:96:d7:cd:5a:99:66:9b:13:f3:71:01:
         2b:e1:4b:04:4b:13:51:8e:d8:96:4c:18:9a:c5:cf:74:57:4e:
         32:01:c1:0f:d2:1d:6b:9c:1f:e2:23:c0:c3:00:4d:f5:e8:ba:
         d0:10:46:8a:bb:9b:1a:f0:65:f7:17:e2:5f:e7:3c:98:6e:4e:
         dd:17:af:15:83:84:f9:b3:6d:16:46:70:3d:10:82:1f:09:95:
         54:a2:5b:53:c4:53:fd:81:74:3d:15:e4:a0:75:78:75:a2:db:
         08:11:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:15:32 2026 by rpki-client