Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632353236.roa
File:                     3137372e36372e3139322e302f32312d3234203d3e20323632353236.roa (raw, json)
Hash identifier:          gfoN4qBLZFTcGt48iaAc7IpUfGn3jYmUq7OEQDcXH30=
Subject key identifier:   00:79:84:82:F0:22:54:3F:0D:16:33:4A:BF:62:3A:4E:2E:10:C3:15
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       5A585470B42F5EE634C48AC5F81154BE44D8B184
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632353236.roa
Signing time:             Wed 01 Apr 2026 19:08:39 +0000
ROA not before:           Wed 01 Apr 2026 19:03:39 +0000
ROA not after:            Wed 31 Mar 2027 19:08:39 +0000
asID:                     262526
IP address blocks:        177.67.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:58:54:70:b4:2f:5e:e6:34:c4:8a:c5:f8:11:54:be:44:d8:b1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr  1 19:03:39 2026 GMT
            Not After : Mar 31 19:08:39 2027 GMT
        Subject: CN=00798482F022543F0D16334ABF623A4E2E10C315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:5f:7e:14:28:a2:f5:3b:89:21:b3:67:74:
                    f3:df:ef:51:ef:ae:17:7c:0a:3b:07:1c:66:f7:2d:
                    62:f2:ee:37:b8:68:fd:aa:4f:1b:f4:d8:b5:02:d1:
                    94:25:97:99:18:14:ea:4d:5b:bd:14:3a:67:10:fd:
                    4f:5c:2e:0c:fe:22:49:f9:70:05:51:84:56:c5:53:
                    4a:f4:b0:d2:28:c7:21:45:d0:6a:9f:14:6c:8e:44:
                    a3:3f:bf:71:d0:ac:13:ba:93:65:e5:d1:7b:ab:3a:
                    58:15:fb:40:3a:79:f7:26:66:cf:52:81:ab:97:90:
                    ce:6d:09:b9:16:e1:81:b5:7c:0a:82:86:de:17:2b:
                    a9:02:d4:28:8b:af:99:8b:2c:0e:eb:1e:b2:10:1b:
                    81:4e:c9:4f:f4:ba:a3:9a:fb:ea:85:b5:c0:cc:54:
                    2e:a5:ca:4b:81:77:d2:fc:92:bd:c0:85:5b:e2:ad:
                    fc:fe:b7:dc:be:a1:58:69:a2:4f:5a:bc:ad:9f:f2:
                    c8:97:65:be:34:91:e0:35:17:2f:f9:e9:f3:45:9e:
                    1e:82:7d:59:29:f7:bf:12:98:13:4a:b2:e1:49:57:
                    6e:5b:38:eb:d9:6c:ab:d3:d8:10:ee:0a:45:b8:36:
                    d5:23:74:d7:1c:c2:9e:13:4b:87:94:86:02:15:36:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:79:84:82:F0:22:54:3F:0D:16:33:4A:BF:62:3A:4E:2E:10:C3:15
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:68:fb:cc:91:6f:b1:a1:9a:a3:68:29:ce:f1:b9:72:c9:8f:
         07:69:37:c6:a8:ff:bb:90:87:62:ce:64:b5:9b:ac:09:e4:36:
         f4:c6:34:f8:c8:e9:81:17:8f:af:82:f7:14:77:32:95:7b:c2:
         0b:87:a4:7a:c0:11:7b:83:a1:ac:3b:77:6b:c6:bf:07:ac:43:
         25:e8:c1:90:d6:92:b3:08:a2:43:fe:30:e1:47:ce:44:e2:60:
         73:ce:14:ad:85:ef:47:eb:29:55:c1:96:7b:e5:bc:f8:75:6d:
         73:ea:39:5e:93:c4:98:59:1f:af:74:c4:b8:cc:c5:81:49:be:
         e9:9a:86:6e:78:db:94:8c:97:ab:4c:56:e8:1d:09:80:35:04:
         76:37:07:44:3f:4e:9a:63:61:1e:a3:dc:0a:41:c8:bc:58:af:
         56:d8:a1:60:01:41:22:1e:5c:55:c6:e2:48:26:8f:7a:c4:33:
         f3:53:dd:4e:99:f5:0a:a4:ca:2b:47:2d:e3:10:b0:31:31:86:
         b9:97:00:d3:3f:b5:13:7e:04:d8:e8:e6:a7:64:2d:fb:b2:e0:
         02:75:6c:9c:58:77:38:31:1c:68:84:f6:c6:43:34:36:a4:a6:
         3f:0f:89:18:37:44:99:a3:c7:f5:78:78:bf:28:36:ec:4d:2b:
         d2:07:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:45:49 2026 by rpki-client