Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa
File:                     3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa (raw, json)
Hash identifier:          xz6DsVEuqM9pTOuVhswZzVRnjy0nzplVOcgfUWt64lI=
Subject key identifier:   7F:0B:C7:9A:63:28:37:82:D5:FC:08:23:85:50:A0:3A:46:68:FC:4B
Certificate issuer:       /CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
Certificate serial:       4685755D5BC74555E91076C548A62C411D52133B
Authority key identifier: CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa
Signing time:             Tue 31 Mar 2026 20:47:22 +0000
ROA not before:           Tue 31 Mar 2026 20:42:22 +0000
ROA not after:            Tue 30 Mar 2027 20:47:22 +0000
asID:                     270514
IP address blocks:        177.11.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl
                          rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:75:5d:5b:c7:45:55:e9:10:76:c5:48:a6:2c:41:1d:52:13:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
        Validity
            Not Before: Mar 31 20:42:22 2026 GMT
            Not After : Mar 30 20:47:22 2027 GMT
        Subject: CN=7F0BC79A63283782D5FC08238550A03A4668FC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:ad:a4:99:ba:04:6b:ba:d0:5b:b0:c5:d6:
                    a9:6b:ab:66:a2:f2:c4:cc:e3:ac:58:a3:83:8c:19:
                    3e:ed:f4:6f:0c:e5:10:23:f2:e8:29:7d:e1:e2:d9:
                    27:86:9c:8b:f0:6e:3d:2f:33:3d:ec:9c:fb:4f:a8:
                    61:97:35:8d:6f:94:70:fd:2f:32:9e:8b:d3:d9:36:
                    85:f9:ec:b6:01:b1:1d:8a:10:0f:fe:6a:91:aa:02:
                    7b:d5:58:69:d4:0e:59:b4:11:5a:f0:44:41:0c:ac:
                    55:ec:54:d9:ad:ea:dc:12:75:0c:48:d1:f5:0a:3d:
                    27:30:21:19:c3:c0:60:44:2a:dd:57:22:bc:0a:8b:
                    f4:8a:92:9e:9c:1d:d5:16:77:45:b0:99:74:a3:eb:
                    01:83:b3:70:67:27:de:8c:0b:e3:17:74:33:97:ef:
                    6e:25:27:39:a6:39:67:1d:f4:6f:17:6e:d4:0c:75:
                    50:75:83:28:bb:46:25:d2:36:b2:4d:db:fe:77:29:
                    7c:94:e1:04:a3:44:80:f8:5c:d8:3f:dc:38:a4:e3:
                    a3:1d:06:bc:4c:df:47:fe:1f:a9:cb:f2:aa:ad:2e:
                    bf:5a:b2:fe:86:36:6a:99:ce:78:ff:e5:05:cb:b4:
                    11:80:a3:02:5a:b2:a3:27:bb:ef:35:a9:9e:dd:07:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0B:C7:9A:63:28:37:82:D5:FC:08:23:85:50:A0:3A:46:68:FC:4B
            X509v3 Authority Key Identifier:
                keyid:CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:72:3f:b0:6c:d7:95:86:e6:68:6c:f9:b6:b4:7a:1d:1f:f2:
         1b:38:1a:02:1d:16:5c:d9:3f:92:86:90:dc:ec:30:d5:06:83:
         98:c4:24:ad:59:6c:5b:45:79:3f:36:21:4a:70:36:76:1c:6d:
         ba:ca:ad:11:1f:d4:61:3f:af:ec:75:71:28:c1:e1:f2:46:cc:
         cc:81:7b:e8:73:09:60:69:f2:0a:a1:9a:37:19:2f:2b:b5:57:
         3d:91:a8:40:12:fb:75:98:5b:eb:4c:a1:05:f5:1b:5b:71:88:
         b0:1e:c2:14:10:d6:e2:3d:70:fa:ab:d8:b0:cb:ac:b8:96:47:
         c4:6e:54:21:f1:d7:66:57:2d:bb:5b:e3:10:79:cd:f6:d5:97:
         09:b1:10:48:0d:ef:b4:85:84:b2:a1:99:89:db:27:1e:cf:2d:
         a9:87:ab:24:fa:b8:cc:98:a4:9b:27:e3:62:40:52:82:66:0b:
         f9:2e:fe:0b:5c:2b:00:94:8b:30:68:6f:80:0c:2a:5b:b3:71:
         e2:9d:4d:42:00:a6:6f:be:87:6d:ab:23:66:e4:a3:02:d8:5d:
         c2:94:e5:dc:cb:91:d6:9e:9a:5d:a2:77:0e:24:1d:d4:a2:83:
         a9:20:2b:00:58:82:01:35:10:7b:04:d3:85:29:ed:0b:f1:2d:
         d0:41:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:46:43 2026 by rpki-client