Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
File:                     3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (raw, json)
Hash identifier:          l3nrJO/coWCk2btVi8ty94a+NXHnBrCuu5Qscd0iZrI=
Subject key identifier:   46:EA:34:5F:DE:A0:3A:8E:8D:A6:19:5E:70:74:4A:F3:15:BF:F5:63
Certificate issuer:       /CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25
Certificate serial:       54C9BEE3D9AB80171C56D4FE175DC22D47D92E88
Authority key identifier: 0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
Signing time:             Wed 01 Apr 2026 12:45:33 +0000
ROA not before:           Wed 01 Apr 2026 12:40:33 +0000
ROA not after:            Wed 31 Mar 2027 12:45:33 +0000
asID:                     262911
IP address blocks:        177.38.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl
                          rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c9:be:e3:d9:ab:80:17:1c:56:d4:fe:17:5d:c2:2d:47:d9:2e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25
        Validity
            Not Before: Apr  1 12:40:33 2026 GMT
            Not After : Mar 31 12:45:33 2027 GMT
        Subject: CN=46EA345FDEA03A8E8DA6195E70744AF315BFF563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:34:d9:fc:fc:62:63:86:a6:dc:40:89:17:
                    07:2c:27:eb:c7:7d:41:e0:67:c8:f4:d9:6b:21:53:
                    e5:09:3c:67:98:a6:04:26:b1:e7:a9:cc:2d:5c:18:
                    20:14:be:bd:95:e8:00:6b:72:2f:f6:7c:a7:d7:44:
                    81:82:0d:82:c1:e6:7c:65:43:89:85:ff:21:2d:12:
                    c9:37:d6:28:a5:16:fb:a3:9c:59:63:27:35:2a:dc:
                    00:86:32:65:80:0d:ef:90:5a:c5:4c:22:65:cd:b1:
                    8b:aa:81:18:e5:4b:d9:80:52:3a:a9:ee:3e:75:82:
                    00:db:f8:1f:18:51:52:36:16:12:86:e2:64:1a:7e:
                    71:b3:8d:06:74:31:69:95:b4:0a:99:02:1d:34:21:
                    30:21:fe:53:76:fc:4f:a1:37:ef:69:78:d2:35:7e:
                    56:09:e1:71:f9:dc:de:4c:86:76:d4:b3:d4:5f:41:
                    ba:8b:04:96:d1:e1:38:1b:7b:5c:57:d3:59:69:c8:
                    1a:43:66:f9:6f:7a:bc:6f:ee:c6:2e:de:bc:3b:28:
                    46:96:80:7d:98:cf:5b:d8:c6:2c:b2:af:17:94:6a:
                    3d:9c:47:5f:1c:a6:15:17:ca:99:2d:52:77:9f:c8:
                    d2:6b:68:07:b4:86:4f:c9:ed:32:a3:60:e2:11:72:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:34:5F:DE:A0:3A:8E:8D:A6:19:5E:70:74:4A:F3:15:BF:F5:63
            X509v3 Authority Key Identifier:
                keyid:0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:b0:47:8c:17:8c:83:6c:f8:c0:f3:b8:94:a4:bd:24:71:
         57:c1:e4:ee:dc:9c:c7:67:ad:96:98:58:b5:75:66:f8:45:fd:
         1c:0e:32:ea:ea:88:70:cc:a0:93:b5:89:05:d2:09:a4:c9:24:
         a1:d2:6a:51:f0:bb:3f:a3:26:18:61:f4:2a:de:fb:a6:34:2a:
         58:f4:13:37:a0:4b:cb:37:8f:8b:66:be:cf:f2:f5:c9:17:66:
         e3:20:ad:e5:1b:1e:1b:73:79:51:60:5b:cd:74:11:57:d3:d3:
         3b:7f:7d:f7:d6:92:00:65:ad:8a:84:ff:13:96:8f:c1:23:05:
         ef:85:e8:7b:43:ed:d2:2e:93:64:6c:1f:f3:f7:a1:0d:b0:4d:
         63:c7:c8:a0:31:59:40:52:08:c9:4a:a5:1d:0d:d3:1c:86:20:
         bf:c5:ab:cd:24:e3:f1:c8:ea:d1:65:e0:a3:fb:e7:eb:38:10:
         b7:09:c0:7d:5e:58:ba:7b:2b:d5:87:39:31:88:9a:b5:50:9a:
         bd:69:af:25:66:b6:2f:3d:9b:16:c4:a8:35:26:b6:ad:fd:06:
         f7:8f:13:bc:93:7d:10:c0:d6:1e:8d:7c:0f:7e:f3:ad:a5:47:
         10:1c:6a:53:8e:ef:d5:fa:38:34:8c:8d:06:b6:d1:62:63:42:
         c2:9e:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:27 2026 by rpki-client