Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa
File:                     3137372e3132352e34302e302f32322d3234203d3e203532363036.roa (raw, json)
Hash identifier:          dQcfexHddEW71mMziblH7n+nL1VQTEjcu1n4zamxXlM=
Subject key identifier:   E1:72:85:DF:5B:E8:FF:B0:0C:FE:AC:24:0B:C2:3B:C8:27:27:64:30
Certificate issuer:       /CN=E23C3D3094CEC27DA3BE7B59BAD1C67237851B23
Certificate serial:       732F04B6736D72A72A29651A9D231F028956F18E
Authority key identifier: E2:3C:3D:30:94:CE:C2:7D:A3:BE:7B:59:BA:D1:C6:72:37:85:1B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa
Signing time:             Tue 18 Aug 2026 04:16:43 +0000
ROA not before:           Tue 18 Aug 2026 04:11:43 +0000
ROA not after:            Tue 17 Aug 2027 04:16:43 +0000
asID:                     52606
IP address blocks:        177.125.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.crl
                          rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2f:04:b6:73:6d:72:a7:2a:29:65:1a:9d:23:1f:02:89:56:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C3D3094CEC27DA3BE7B59BAD1C67237851B23
        Validity
            Not Before: Aug 18 04:11:43 2026 GMT
            Not After : Aug 17 04:16:43 2027 GMT
        Subject: CN=E17285DF5BE8FFB00CFEAC240BC23BC827276430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:e1:4b:79:ce:df:a7:26:de:fe:0e:76:47:
                    61:04:2b:4b:cb:99:af:18:6f:c3:29:70:71:c2:c6:
                    3a:a0:d7:5d:8a:4e:e4:14:b3:ab:c1:30:18:74:3e:
                    33:52:81:fe:59:34:4a:c0:46:7e:92:db:73:9f:c7:
                    81:e8:67:12:c1:2c:28:a8:54:59:e7:97:f1:7d:86:
                    16:47:1d:cc:ee:41:de:99:b8:02:a3:e1:8b:bb:94:
                    f0:bc:c9:62:b1:0c:60:d8:d0:34:0f:cc:30:af:ca:
                    3d:c6:9a:65:ee:3f:ae:f6:3c:cd:23:f1:f8:5a:d3:
                    a9:89:d6:b2:aa:33:4e:76:75:12:0a:68:b5:e0:36:
                    97:91:88:77:35:80:eb:20:e3:98:fc:02:f8:fd:97:
                    5c:fa:c7:29:5c:77:87:dc:8c:93:47:fa:52:d3:9a:
                    0e:54:22:16:fd:8b:67:f1:e4:4e:7a:14:d0:68:05:
                    cb:4b:6a:9d:68:dd:6e:8f:e2:a5:dc:13:ec:e8:20:
                    fc:f2:a9:65:95:cf:6c:c0:c7:72:1a:97:7f:41:b4:
                    2c:62:40:92:3c:6a:23:90:38:8f:5c:76:2c:1f:b5:
                    4b:44:6c:25:4f:7b:44:8e:56:1b:71:f8:f0:cf:2c:
                    49:56:92:20:03:f1:a9:aa:ad:9e:32:fc:93:55:b9:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:85:DF:5B:E8:FF:B0:0C:FE:AC:24:0B:C2:3B:C8:27:27:64:30
            X509v3 Authority Key Identifier:
                keyid:E2:3C:3D:30:94:CE:C2:7D:A3:BE:7B:59:BA:D1:C6:72:37:85:1B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:45:19:c6:17:66:9a:89:85:fe:d7:dc:57:fd:4f:92:8a:b7:
         9d:99:41:a4:6a:21:20:7b:d0:f5:b3:0f:bd:cd:2a:06:79:22:
         7f:82:39:cc:4b:dd:05:80:ca:47:90:60:2c:9b:ef:a8:7a:d1:
         e6:73:cc:db:dc:c3:78:27:0f:9e:65:48:21:31:ab:00:26:01:
         85:ea:0b:ba:26:75:e5:bc:d1:94:1c:24:1f:64:1e:bf:5f:08:
         1a:89:d3:0a:a1:c8:79:0e:36:0c:42:79:10:6a:fc:f7:0a:99:
         2b:f5:39:45:0a:7b:82:98:85:d0:98:de:74:a7:2a:02:99:56:
         cc:31:83:2b:86:e0:3f:b3:cd:7e:40:09:ee:ba:06:a3:a0:bd:
         84:ee:fc:58:0e:25:35:a6:06:cd:56:a9:7e:ff:e7:16:9b:8c:
         62:5f:76:b0:04:c1:2f:3f:17:ec:88:fd:a0:ff:d3:34:f0:30:
         c0:1f:24:f4:f9:83:d0:ea:47:2c:c9:a8:48:ee:97:d0:2c:90:
         1f:f1:eb:f0:11:31:70:4e:11:88:54:2f:24:0b:f4:e0:18:9e:
         0f:29:5d:b6:c2:25:43:da:30:e9:fe:3c:33:65:cc:c2:d1:84:
         6b:29:b3:6c:bb:b1:a4:8c:fb:98:9a:c8:b4:8e:60:0a:83:82:
         51:f9:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:32:41 2026 by rpki-client