Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3234203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32332d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          zZBDPlH6Fwr6tEYXjp1XoDn1f2FBiQz7p2MerJaZqOA=
Subject key identifier:   02:57:AB:0C:58:6D:AF:FB:81:12:EB:B7:1B:65:05:C9:6D:10:88:0F
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       31B7A05080493DD6077E8BD6D2FA3C0EAB9D8BFC
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3234203d3e20323632343738.roa
Signing time:             Fri 27 Mar 2026 17:48:42 +0000
ROA not before:           Fri 27 Mar 2026 17:43:42 +0000
ROA not after:            Fri 26 Mar 2027 17:48:42 +0000
asID:                     262478
IP address blocks:        177.47.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b7:a0:50:80:49:3d:d6:07:7e:8b:d6:d2:fa:3c:0e:ab:9d:8b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Mar 27 17:43:42 2026 GMT
            Not After : Mar 26 17:48:42 2027 GMT
        Subject: CN=0257AB0C586DAFFB8112EBB71B6505C96D10880F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:09:fb:2b:6a:89:99:4c:19:18:4e:8c:ff:
                    da:e0:67:70:52:38:41:49:32:7b:68:da:55:98:cf:
                    ad:ea:e8:04:5b:59:23:03:84:62:29:2c:e3:40:ff:
                    00:ca:8c:17:f8:f1:7b:09:98:70:f5:cb:22:03:8c:
                    ae:ac:91:b7:ff:9f:f5:a4:b0:81:ce:bf:07:eb:eb:
                    bb:3c:8f:da:da:76:f5:99:4a:34:55:f9:88:3a:6c:
                    bb:67:ce:81:e1:0c:ba:79:b7:28:3d:63:fa:e6:ad:
                    69:af:01:b9:c3:d5:3c:4b:92:6f:c6:0b:e7:eb:ee:
                    a2:1e:2e:45:d8:ee:42:d1:04:58:28:ec:ef:49:3a:
                    19:ed:b4:9c:86:33:08:02:72:d8:16:2a:3b:ce:40:
                    41:d2:e2:38:a2:93:7b:c0:43:fc:9d:18:e0:bc:7a:
                    be:54:14:4b:24:f6:7c:43:cf:87:df:23:74:20:ba:
                    89:89:67:78:05:bb:b3:03:c5:e6:22:7b:f9:0d:c1:
                    14:85:36:50:bd:3b:36:e2:44:87:c6:dd:c3:b7:e8:
                    85:b8:df:32:56:64:2c:04:3e:cd:a2:75:81:3a:49:
                    31:e4:2b:24:5e:7e:94:d5:84:42:2f:25:9e:f9:55:
                    09:54:8d:f5:c4:eb:71:07:2b:0b:d3:7b:2b:62:f2:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:AB:0C:58:6D:AF:FB:81:12:EB:B7:1B:65:05:C9:6D:10:88:0F
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:78:b4:7e:18:ef:9d:21:bf:d8:fe:b5:13:c8:b0:a9:c5:53:
         45:39:5c:a4:25:28:f4:12:10:7b:07:83:1a:d6:88:0e:ba:a9:
         74:29:d0:f6:ed:46:4e:f1:e1:2b:a3:e0:65:62:e5:78:3e:30:
         c3:8f:cd:10:fd:aa:3c:17:29:9c:df:06:36:ac:7b:62:14:1b:
         58:28:96:1e:5c:a9:82:49:79:d6:88:5d:64:e4:92:24:4f:84:
         e1:e6:d0:70:16:29:36:4c:4c:62:78:f0:ce:3a:d4:0f:ed:09:
         31:32:73:a2:dc:de:db:57:4d:5d:6e:ee:7c:9a:9c:28:be:6e:
         67:8d:a1:54:de:63:82:a5:0f:07:5f:d0:0b:a3:54:74:00:5f:
         0a:bb:be:8a:38:bb:a1:1b:b4:41:1c:d8:a2:bc:07:ec:27:85:
         8f:eb:83:18:5d:7b:d7:b7:0b:9c:3c:e5:3e:b3:b3:da:2e:fc:
         89:68:39:c6:41:f8:d7:d2:18:4e:04:f1:bf:8b:ae:59:35:1b:
         fa:c1:ba:c1:b3:c1:c9:91:13:69:4f:0b:13:0e:db:eb:a5:95:
         67:b5:ca:4b:b2:89:a1:39:58:b0:db:f7:c5:6b:b3:de:52:7d:
         da:de:6d:08:5e:13:94:05:25:8b:16:dc:c4:66:0b:7f:ce:06:
         11:df:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:03:01 2026 by rpki-client