Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3230312e3138322e3136302e302f32322d3234203d3e20323637353233.roa
File:                     3230312e3138322e3136302e302f32322d3234203d3e20323637353233.roa (raw, json)
Hash identifier:          wbrleR+94YJ6gYHjNevggrN++zZWE6yBnjH079NS2PM=
Subject key identifier:   8D:3E:4E:AD:C0:C2:FB:9C:2F:83:D2:D5:7E:3D:9C:E5:DE:77:4D:3C
Certificate issuer:       /CN=3677611ACB73CA9DA1F182DA9AE4935FAE5A8751
Certificate serial:       42911F05676F2702CBFB79CCA0B38E85E9372DB6
Authority key identifier: 36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3230312e3138322e3136302e302f32322d3234203d3e20323637353233.roa
Signing time:             Wed 20 May 2026 11:36:16 +0000
ROA not before:           Wed 20 May 2026 11:31:16 +0000
ROA not after:            Wed 19 May 2027 11:36:16 +0000
asID:                     267523
IP address blocks:        201.182.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.crl
                          rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:91:1f:05:67:6f:27:02:cb:fb:79:cc:a0:b3:8e:85:e9:37:2d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3677611ACB73CA9DA1F182DA9AE4935FAE5A8751
        Validity
            Not Before: May 20 11:31:16 2026 GMT
            Not After : May 19 11:36:16 2027 GMT
        Subject: CN=8D3E4EADC0C2FB9C2F83D2D57E3D9CE5DE774D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:5d:9f:da:03:24:77:96:b0:56:40:ea:e0:
                    84:61:af:f6:ee:95:6c:be:01:77:c7:7c:b6:8d:e8:
                    b1:96:6a:4a:1f:76:20:04:83:d2:94:0f:5f:92:a3:
                    58:cb:cc:d6:28:4c:cd:a1:42:f3:23:8f:1c:51:61:
                    f6:5f:26:57:e8:4f:16:60:ee:b8:33:19:e0:b9:2d:
                    a6:d1:86:c9:92:8b:f1:4b:50:a2:15:2b:a1:95:3b:
                    4d:6d:20:48:8e:45:4c:d1:42:2a:3d:9d:b8:3a:72:
                    87:e4:66:21:87:d6:79:a3:c8:6a:6c:13:5f:ed:78:
                    7b:a2:17:31:e0:e7:c8:94:3b:1c:34:bc:c6:a8:2c:
                    c5:99:46:90:56:b5:6f:d6:43:c5:f6:c5:f5:3e:aa:
                    ef:5d:e5:81:f4:26:d9:81:d4:93:c9:c6:2f:65:50:
                    87:77:64:a3:9b:14:f4:25:ff:de:11:c7:71:e9:64:
                    5e:96:17:b3:95:26:91:bd:33:97:d4:b3:2b:30:5e:
                    77:d2:cb:5e:15:1a:00:12:b3:13:f4:b2:7a:74:67:
                    9b:87:47:be:c1:4c:38:ea:d8:c0:a1:f2:68:06:5e:
                    70:66:e8:fe:7b:73:dc:d2:91:34:56:3b:b8:9d:15:
                    b7:e5:e3:47:c8:ca:a9:33:3f:ea:da:53:0f:6b:ec:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3E:4E:AD:C0:C2:FB:9C:2F:83:D2:D5:7E:3D:9C:E5:DE:77:4D:3C
            X509v3 Authority Key Identifier:
                keyid:36:77:61:1A:CB:73:CA:9D:A1:F1:82:DA:9A:E4:93:5F:AE:5A:87:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3677611ACB73CA9DA1F182DA9AE4935FAE5A8751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Q7FWeEZa9NYLWJ5dkxDMTJsmqTNeGgumDrW6dxXyXMS/0/3230312e3138322e3136302e302f32322d3234203d3e20323637353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:23:3b:92:17:9e:bb:c1:c4:e0:f5:8a:60:5f:94:66:73:ab:
         56:27:31:f7:f1:c8:f2:9b:72:48:2a:40:f4:08:4e:a7:ac:b2:
         ef:db:1a:b3:e7:87:62:3f:73:14:4a:4c:ef:99:6f:f9:fb:1d:
         76:40:8f:1d:0a:4b:f6:81:a6:f6:53:d4:ab:f9:b9:a3:91:09:
         34:77:51:ee:43:e6:ef:23:01:18:e8:37:46:a0:2d:d1:8a:09:
         6d:56:3f:a4:a9:48:63:7d:7a:9e:f7:4b:48:f1:ee:6e:0e:39:
         d2:70:a6:84:b8:38:2a:23:14:f6:c5:8b:86:89:ab:52:7a:96:
         f5:ea:46:ab:e0:9c:26:1e:c6:55:01:e5:9f:5e:9f:83:db:7e:
         ff:47:cf:14:62:13:27:aa:a8:4c:59:43:d3:f7:02:b9:a6:18:
         33:c5:cb:97:ca:23:d3:16:d4:9e:52:56:2e:ab:ca:59:40:25:
         e0:17:e1:c1:f7:35:4e:2b:47:92:15:17:6a:d8:e1:b1:d2:92:
         39:3b:3e:e9:3e:79:d4:69:fd:e4:12:2a:91:a0:de:fa:e4:89:
         bb:d4:ae:21:4a:5a:57:cf:d0:a9:1b:17:86:f3:fe:ba:36:73:
         f3:32:be:14:e3:db:8c:84:51:d8:bb:dc:bc:1c:a2:df:77:df:
         6e:34:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:39 2026 by rpki-client