Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235352e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3235352e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          foAE9KoPP8rHxn3sjDrMVDhJqNWJXWqDriqmDvEAmes=
Subject key identifier:   1D:AD:40:35:0C:33:FA:9D:39:AC:D4:9E:6E:70:26:3F:DA:A7:52:43
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       0A7F5AD6541DA6A9748A5E79A1C42C3FA0B0D18F
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235352e302f32342d3234203d3e20323632343738.roa
Signing time:             Fri 27 Mar 2026 13:48:42 +0000
ROA not before:           Fri 27 Mar 2026 13:43:42 +0000
ROA not after:            Fri 26 Mar 2027 13:48:42 +0000
asID:                     262478
IP address blocks:        177.47.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7f:5a:d6:54:1d:a6:a9:74:8a:5e:79:a1:c4:2c:3f:a0:b0:d1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Mar 27 13:43:42 2026 GMT
            Not After : Mar 26 13:48:42 2027 GMT
        Subject: CN=1DAD40350C33FA9D39ACD49E6E70263FDAA75243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:bb:aa:d9:07:2e:41:c4:31:9c:07:bb:1a:
                    fe:ea:7a:8f:95:d0:1c:f9:14:f3:f4:d1:75:9c:36:
                    cc:29:1c:f0:8d:f0:de:f1:05:71:9c:aa:a0:8d:6c:
                    11:42:c1:7e:11:9b:a9:e4:9f:81:b7:3f:9b:dc:45:
                    22:b1:80:64:e6:84:a1:53:14:e2:44:1f:5e:95:b6:
                    5a:a7:24:6c:79:50:bb:4b:71:0d:42:40:e1:ff:7d:
                    58:d8:24:3e:97:da:19:23:a1:b0:03:86:de:bc:3d:
                    ee:a4:44:48:44:8d:94:79:41:45:d2:c0:81:3f:e1:
                    70:07:01:ef:42:09:7d:f6:3e:6d:cb:42:de:8a:37:
                    52:13:4d:eb:47:10:5b:89:46:3d:26:39:5d:70:9a:
                    3d:ab:5d:18:12:ac:5f:06:fc:53:56:0d:06:f8:42:
                    82:de:0a:77:23:8d:d1:e5:2c:8d:07:e5:41:fa:a4:
                    25:bc:3c:26:e4:01:60:74:19:f6:5a:26:17:d7:3e:
                    58:9e:a6:c9:68:63:a6:64:b0:35:fd:41:f8:2f:02:
                    19:40:62:bf:90:2f:5d:17:17:ae:3b:18:68:06:57:
                    f2:52:bd:df:8a:91:ec:09:b1:11:39:4a:ad:b6:21:
                    02:aa:97:ff:a7:8f:54:69:a8:ae:36:69:63:78:e8:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AD:40:35:0C:33:FA:9D:39:AC:D4:9E:6E:70:26:3F:DA:A7:52:43
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235352e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:89:5d:8b:8e:c7:72:86:44:aa:c7:04:f6:dc:b9:6f:35:
         04:e2:18:07:df:21:93:d6:8e:a4:e6:b4:c8:8d:4c:fc:7f:e6:
         e7:bb:b8:79:b2:1c:25:82:ce:d2:a0:13:03:45:ce:bb:1b:cd:
         89:79:40:af:63:18:e0:45:59:e2:3b:29:e8:8d:1a:d1:f7:b6:
         5a:f4:8b:ae:4c:90:4c:01:78:52:29:05:96:ab:ba:da:65:44:
         09:1c:a4:fa:27:69:ca:38:a3:95:55:f7:52:65:32:cc:4c:01:
         2e:a2:1b:88:5b:79:89:62:bc:dd:9e:ff:4b:a5:50:42:f4:45:
         96:b3:8b:ea:f0:60:68:61:5d:b4:25:99:19:0c:e9:21:01:8f:
         e2:b7:90:fd:b3:44:ff:9a:5b:47:ee:d1:65:93:05:71:4b:78:
         04:e7:bd:0e:a6:01:82:fc:07:98:62:a0:a3:39:cf:69:39:ef:
         ba:54:38:4c:75:5c:d9:84:e5:83:c5:32:04:ed:cf:f4:d9:9c:
         55:96:c0:04:37:52:34:cf:e3:d5:60:73:39:f1:18:e1:a0:f7:
         36:27:aa:45:b3:d9:94:28:1c:e1:0d:8c:d9:c8:19:9b:6b:b9:
         93:00:4e:54:a4:f0:e7:0e:b8:4c:75:06:b1:75:d3:77:af:a4:
         2d:59:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:07:37 2026 by rpki-client