Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35342e3139322e302f32302d3332203d3e20323638393736.roa
File:                     3137372e35342e3139322e302f32302d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          mHPz7M2vOO2RLPXRN+DRadwUFxUM+WNcxQDpAA7wEUM=
Subject key identifier:   EA:8A:A7:CD:66:16:48:B0:1C:9D:ED:56:8C:F3:76:18:A3:3A:C3:9B
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       52F6F2504B3FFB335A5DA8FC2105798903CFACD6
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35342e3139322e302f32302d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 18:01:04 +0000
ROA not before:           Mon 06 Apr 2026 17:56:04 +0000
ROA not after:            Mon 05 Apr 2027 18:01:04 +0000
asID:                     268976
IP address blocks:        177.54.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f6:f2:50:4b:3f:fb:33:5a:5d:a8:fc:21:05:79:89:03:cf:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:56:04 2026 GMT
            Not After : Apr  5 18:01:04 2027 GMT
        Subject: CN=EA8AA7CD661648B01C9DED568CF37618A33AC39B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:08:37:86:9e:92:06:f0:cf:58:ac:f2:1b:
                    a5:1e:53:b6:56:c8:96:32:62:ad:a8:ca:f5:da:1c:
                    5e:a9:f0:09:b2:be:8f:1d:1e:77:5d:bf:22:6c:9e:
                    4f:0f:da:cf:04:fe:e1:da:7d:b7:cd:eb:ef:05:43:
                    c7:20:67:8a:eb:7f:34:40:9f:b7:17:c8:3d:3f:61:
                    d3:92:3b:b3:99:63:dd:b5:8e:fe:ab:61:97:72:3f:
                    9c:1d:12:b5:a4:6c:12:51:3e:ff:ac:32:a4:26:11:
                    1a:99:f2:ed:22:b1:08:ba:ca:93:b2:9e:d3:11:57:
                    14:32:22:17:72:83:ca:58:ee:8d:ec:3d:9e:b4:a8:
                    c1:3b:cb:01:ad:1c:12:4b:1a:8b:c0:37:b5:01:7a:
                    a9:ce:03:e5:be:c8:34:e8:f6:a4:21:73:d3:38:99:
                    0b:ef:86:45:4c:59:ec:1b:75:83:2b:92:8d:81:71:
                    e6:be:5b:7f:17:04:ff:ed:22:39:fd:6b:b5:99:78:
                    38:20:0b:e1:2f:e8:f6:7a:aa:d8:4c:9e:3e:16:af:
                    43:cb:b9:7c:e1:cb:12:0f:ff:88:0d:44:c2:e2:aa:
                    5b:41:8b:fa:9f:15:5f:17:01:9a:2b:0b:d2:2d:13:
                    72:51:f3:6a:94:14:62:76:d2:45:b1:a8:c4:e5:86:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:A7:CD:66:16:48:B0:1C:9D:ED:56:8C:F3:76:18:A3:3A:C3:9B
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35342e3139322e302f32302d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:9c:92:4f:cb:ca:0f:da:f2:9f:da:ea:dd:1d:64:23:04:
         6f:c2:02:38:35:f3:3b:f6:d3:eb:f7:5e:11:0c:03:ac:d9:0d:
         86:8d:e6:e8:e3:f9:66:25:f3:4f:12:ff:2d:92:88:82:e5:13:
         ad:df:8c:ef:9a:0a:fd:44:30:18:f4:5e:22:9c:26:fd:0b:f1:
         7f:9e:73:4c:ea:8c:d0:d7:99:c4:25:eb:87:5e:19:45:9d:15:
         7f:66:b0:60:18:6e:04:ce:0d:9f:1a:89:4f:70:f9:54:dd:76:
         c6:56:af:23:ab:02:80:cd:ac:31:92:c2:cb:9e:00:82:68:0d:
         66:22:e4:53:6e:04:60:e5:9b:6f:85:a2:2d:48:ef:29:e6:f5:
         a7:f4:42:8f:2f:ed:a7:e1:c7:88:94:b8:1f:d3:55:01:4f:3c:
         11:fc:ef:5d:f7:66:3c:26:a2:1d:fb:9d:93:12:e2:dd:28:28:
         86:a9:e1:b9:fa:f8:cf:5a:b8:30:4e:ab:9f:02:f0:19:ca:d9:
         f8:7a:14:2f:04:fe:de:12:75:f4:5a:be:1a:e3:45:7d:d1:af:
         c0:1d:f8:01:c6:95:a1:8c:15:ef:8a:62:e2:e3:40:76:f9:38:
         6f:10:9d:5d:e3:3b:29:e0:da:b9:78:0a:9a:77:3a:ed:14:8c:
         1b:f0:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:42 2026 by rpki-client