Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/3137372e3133372e3132382e302f32302d3234203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32302d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          DKPcAWRSxlZGXRAzSE0bthfXdUGZXc0Z6BFhb1A3gSc=
Subject key identifier:   E4:AF:A5:7C:CD:B0:4C:10:2B:6D:79:8D:37:18:7A:6E:60:88:EB:DF
Certificate issuer:       /CN=4D11E330782D0C71C72C9C207177906BAC2BDEA6
Certificate serial:       5BF9FAACD44F92F7AE0AC1B6B38180B60F337888
Authority key identifier: 4D:11:E3:30:78:2D:0C:71:C7:2C:9C:20:71:77:90:6B:AC:2B:DE:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D11E330782D0C71C72C9C207177906BAC2BDEA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/3137372e3133372e3132382e302f32302d3234203d3e20323633303533.roa
Signing time:             Tue 07 Apr 2026 22:33:44 +0000
ROA not before:           Tue 07 Apr 2026 22:28:44 +0000
ROA not after:            Tue 06 Apr 2027 22:33:44 +0000
asID:                     263053
IP address blocks:        177.137.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/4D11E330782D0C71C72C9C207177906BAC2BDEA6.crl
                          rsync://rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/4D11E330782D0C71C72C9C207177906BAC2BDEA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D11E330782D0C71C72C9C207177906BAC2BDEA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 22:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f9:fa:ac:d4:4f:92:f7:ae:0a:c1:b6:b3:81:80:b6:0f:33:78:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D11E330782D0C71C72C9C207177906BAC2BDEA6
        Validity
            Not Before: Apr  7 22:28:44 2026 GMT
            Not After : Apr  6 22:33:44 2027 GMT
        Subject: CN=E4AFA57CCDB04C102B6D798D37187A6E6088EBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:75:e2:db:ca:98:1c:33:70:a5:44:86:f7:
                    7d:00:9a:3b:5b:6f:97:62:0d:35:34:85:f5:78:01:
                    00:60:82:ba:a9:7c:5d:c8:3f:1a:aa:ca:91:47:41:
                    6f:b3:5e:04:24:58:d2:13:22:ca:d3:48:53:73:47:
                    31:8f:8d:5f:78:47:27:8b:43:b0:44:5a:46:84:d1:
                    9e:7c:e4:63:fb:56:3e:b3:ae:32:11:35:3e:f7:ed:
                    e0:59:dc:b4:86:57:a4:f8:37:90:91:7d:4d:b4:fa:
                    a5:85:7a:c6:25:b4:cd:4b:9d:75:f7:a3:e7:64:5f:
                    73:1d:59:1a:a3:b1:b8:da:71:3a:a2:13:ca:b5:68:
                    87:fe:da:bb:c2:79:2b:c3:d5:dd:18:45:b8:6c:57:
                    c0:c5:0c:4a:70:5e:be:92:26:76:c5:7f:1a:fc:77:
                    fe:ef:7c:40:8b:75:5a:ef:a4:e1:2d:42:eb:3a:a0:
                    d6:fb:04:b2:b8:d8:57:3a:7a:2c:dd:2e:61:e1:87:
                    46:37:fe:92:a6:e3:a3:f9:14:bb:40:28:35:b5:7b:
                    f4:1e:c6:a6:d0:c3:da:a5:c3:61:75:1a:21:61:e6:
                    37:62:04:cb:74:98:eb:06:1c:91:b7:0f:c7:4b:65:
                    b9:d0:a7:8e:f8:0e:98:37:01:2c:88:e8:20:e6:b4:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:A5:7C:CD:B0:4C:10:2B:6D:79:8D:37:18:7A:6E:60:88:EB:DF
            X509v3 Authority Key Identifier:
                keyid:4D:11:E3:30:78:2D:0C:71:C7:2C:9C:20:71:77:90:6B:AC:2B:DE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/4D11E330782D0C71C72C9C207177906BAC2BDEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D11E330782D0C71C72C9C207177906BAC2BDEA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48eegF1oe764FesjU1KUaWBgMf8r8tnNc16JqdNbteyS/0/3137372e3133372e3132382e302f32302d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:2c:6a:02:75:dc:62:62:1a:4b:2d:fa:91:3c:0f:80:d1:
         59:4a:fd:7c:9c:82:38:eb:58:52:95:4f:62:e3:91:60:b8:36:
         61:a6:6e:a3:c9:1a:d7:52:c9:13:69:af:c3:f5:00:4b:1f:48:
         02:aa:a5:10:f2:63:f8:25:74:15:78:b5:76:e5:6a:09:c5:f6:
         cb:46:d9:12:d8:85:41:fe:93:b9:14:73:07:a0:8c:ce:92:15:
         ac:e2:17:7e:c5:b3:fa:9b:57:af:72:29:75:11:74:8b:33:07:
         91:3c:e6:4b:97:2c:55:9a:30:ad:87:a1:53:7e:19:95:c4:a0:
         8c:08:9d:23:b5:e8:2f:ed:03:d1:3f:86:58:d5:27:b5:57:5b:
         ba:d8:17:fa:49:73:36:b9:51:aa:92:32:fe:3e:0f:ab:da:e1:
         d2:28:da:2c:df:5d:9c:dd:07:2a:ce:66:83:05:59:b4:66:44:
         5b:5b:00:14:af:e5:5d:96:5c:0b:79:ff:c7:3c:fc:96:6a:21:
         05:29:5b:20:aa:47:99:b4:2d:9c:f2:8b:ef:a6:65:6a:c0:9b:
         bf:d7:47:e2:ac:e7:74:5f:dc:d7:a5:f4:fb:92:da:28:42:45:
         75:b5:7a:85:03:2e:d1:af:76:4a:b8:70:c8:c8:3a:a7:46:74:
         a2:58:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:58:54 2026 by rpki-client