Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3230302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          0Tj6Y/MWf2GixeZO6E/T1mwc9CxdE12SJ7VLyzGVs0I=
Subject key identifier:   3A:64:9C:7C:9B:86:C9:F1:5D:F0:6A:9F:3B:C0:D1:8C:01:34:F7:4D
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2247587EFD1AD2C75275D792DC61A68A7355C66A
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        177.92.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:47:58:7e:fd:1a:d2:c7:52:75:d7:92:dc:61:a6:8a:73:55:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=3A649C7C9B86C9F15DF06A9F3BC0D18C0134F74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:2f:80:12:0f:5e:c7:38:2f:48:e2:24:d8:
                    6b:ec:47:37:45:dd:ed:d2:cf:1c:d4:6b:fe:d3:10:
                    a5:b5:68:1c:df:ba:d2:d1:6d:6f:da:cb:5d:5c:63:
                    a1:e6:6b:0e:0e:eb:a6:4e:a7:d2:00:39:21:78:9b:
                    24:87:7d:45:4f:a1:02:01:52:36:f7:91:d4:ca:6d:
                    92:f5:0a:37:15:2b:1a:96:70:47:aa:a6:eb:e9:dc:
                    18:74:5c:eb:52:74:ea:33:eb:26:e7:53:97:b0:57:
                    de:0e:3a:b5:12:ba:25:3a:bf:05:7b:76:a9:41:fb:
                    da:25:ba:8e:fb:60:5f:43:99:a1:ba:c7:27:e8:b5:
                    a6:11:81:40:e5:8e:6a:bf:9e:2c:72:de:6c:6a:9d:
                    fe:41:58:ef:da:71:ee:09:e5:ea:56:0f:8f:f0:f0:
                    e9:02:74:f7:61:05:20:7a:26:05:5c:94:26:27:99:
                    3e:28:28:6d:b5:f4:ce:53:4b:cb:07:ed:6f:df:eb:
                    d6:24:0c:de:d8:53:31:76:08:c9:24:a9:bd:31:74:
                    50:a9:75:17:c2:be:32:25:4a:61:d5:09:32:e7:7e:
                    ac:48:b9:f7:fe:ac:6b:16:d8:e0:f9:71:a2:d8:d0:
                    21:c2:3c:36:60:d3:ff:0e:b7:97:a6:67:07:07:23:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:9C:7C:9B:86:C9:F1:5D:F0:6A:9F:3B:C0:D1:8C:01:34:F7:4D
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:ef:2b:7e:5d:57:3b:14:c9:25:4e:c4:e2:6a:84:62:6d:
         10:34:af:e8:45:c1:32:b8:2b:7d:91:02:05:43:71:6e:0d:c5:
         40:6f:48:22:3b:f9:13:f2:9d:d1:4d:5f:db:0d:16:3a:45:06:
         b0:37:a8:e5:ba:ab:0f:96:f8:ef:89:9f:e0:16:73:57:68:de:
         33:ec:19:67:e7:5f:fc:b2:d1:81:ac:69:4e:f3:03:4a:b8:23:
         31:f4:7a:c8:96:0f:70:b9:0f:e7:c2:26:78:c4:33:e7:30:fa:
         27:f4:0b:02:e5:42:db:ec:e7:59:d0:f6:ce:bc:f0:0a:d9:d7:
         8c:81:19:ae:e4:42:82:f7:ae:55:1a:eb:92:4d:71:18:71:57:
         c8:e5:b5:21:d1:36:0b:ee:eb:51:d3:a3:db:c9:67:ba:dc:c8:
         af:f3:d3:7b:25:6e:2a:19:d7:ca:58:58:60:ab:17:78:35:df:
         b9:65:2b:77:86:dc:12:ed:bd:3f:48:9d:c6:75:7e:bd:a8:3d:
         18:52:05:3f:88:1a:df:0f:eb:68:e4:85:54:0b:23:5c:bc:3d:
         ea:f3:cf:5d:f6:8f:19:12:80:50:8e:bd:e1:74:4f:79:4d:00:
         a5:3e:36:44:26:44:bb:30:2b:3f:68:f4:79:7f:31:6f:f5:9d:
         74:62:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:29:27 2026 by rpki-client