Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3137372e3132392e3130302e302f32322d3234203d3e20323731303033.roa
File:                     3137372e3132392e3130302e302f32322d3234203d3e20323731303033.roa (raw, json)
Hash identifier:          beOMvTvufasshZAEt2fQbCS4E/KMRJvclckEAXlFdas=
Subject key identifier:   75:A6:F0:0B:F2:3E:59:80:FF:BE:9E:B0:1C:0D:C0:2A:81:72:AA:B5
Certificate issuer:       /CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
Certificate serial:       1C030346B7150C232FC9DF11E24235B6782A7F6B
Authority key identifier: 3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3137372e3132392e3130302e302f32322d3234203d3e20323731303033.roa
Signing time:             Thu 26 Mar 2026 11:25:19 +0000
ROA not before:           Thu 26 Mar 2026 11:20:19 +0000
ROA not after:            Thu 25 Mar 2027 11:25:19 +0000
asID:                     271003
IP address blocks:        177.129.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl
                          rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:03:03:46:b7:15:0c:23:2f:c9:df:11:e2:42:35:b6:78:2a:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
        Validity
            Not Before: Mar 26 11:20:19 2026 GMT
            Not After : Mar 25 11:25:19 2027 GMT
        Subject: CN=75A6F00BF23E5980FFBE9EB01C0DC02A8172AAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:ea:9e:61:b3:b4:b7:73:47:93:b6:a0:5f:
                    f2:79:c5:f1:31:10:3c:fe:95:e6:d0:dd:8c:b0:9f:
                    c5:c1:1d:04:a3:b0:23:49:aa:d3:b3:8b:32:81:c8:
                    40:d5:2e:88:a6:ac:a0:72:23:01:2b:4c:73:fa:af:
                    84:65:28:00:79:d7:3a:17:53:e8:d0:b3:1a:51:35:
                    74:1d:47:26:be:4c:7f:bd:07:b0:e1:de:8e:f2:e1:
                    99:5f:23:2f:8a:cd:42:22:b2:11:47:df:cf:17:a7:
                    e0:25:4b:8b:56:e1:a4:18:83:81:16:ce:e8:b9:0e:
                    54:25:78:d7:71:23:ab:d2:b7:a9:14:2d:cd:52:d7:
                    83:b1:80:23:bb:29:23:4b:63:2d:61:ad:34:69:9d:
                    21:8f:21:45:1c:2c:fe:57:05:09:de:e1:87:eb:24:
                    21:c3:dd:fb:94:a1:11:5c:b9:9c:1f:7b:62:81:dd:
                    f5:7a:bd:63:c6:d8:ec:2b:9e:4e:cf:c5:06:38:e8:
                    ae:72:ac:bc:b3:ae:3f:f6:9c:4b:8a:88:d5:91:ec:
                    a4:a9:ae:d1:24:5f:66:ce:cb:17:12:cc:56:f2:b8:
                    32:f2:4f:a8:21:6b:c7:9e:4e:09:f6:4f:6d:66:15:
                    72:69:23:d9:9d:b4:42:7b:b1:27:de:59:c5:38:89:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A6:F0:0B:F2:3E:59:80:FF:BE:9E:B0:1C:0D:C0:2A:81:72:AA:B5
            X509v3 Authority Key Identifier:
                keyid:3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3137372e3132392e3130302e302f32322d3234203d3e20323731303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:01:3a:80:14:cd:42:99:1f:e2:89:3e:69:a1:94:8e:3a:33:
         91:3e:b5:26:82:c1:14:5c:ef:3a:8d:0a:0b:43:5a:1f:42:6b:
         11:f6:0a:14:85:6b:1b:be:bd:71:4d:a6:15:42:c2:b8:f3:fa:
         77:0e:6a:71:bf:5c:06:6a:12:43:a3:ff:24:bd:36:22:2c:3b:
         32:44:96:b2:99:74:74:8a:18:6a:8c:a9:7c:f3:2c:44:4c:69:
         0d:9b:31:6c:ae:ff:a3:4e:90:b4:16:c9:11:f1:b1:52:76:d1:
         31:ee:65:c3:ca:47:67:0a:cb:bb:7d:5c:d4:d5:13:35:ff:e7:
         69:86:ad:e6:cb:e2:93:a9:2f:8e:8d:7f:30:71:4d:2b:af:f9:
         6d:13:cc:98:91:c9:e9:40:21:8d:e4:fd:fc:6a:af:d5:52:d0:
         4d:cf:61:13:11:ad:7b:68:85:00:d8:2c:9d:17:51:0e:a1:8a:
         4f:71:ba:2d:49:ff:7a:cf:40:c2:7b:b1:67:a5:d6:5a:f7:80:
         83:3f:e0:49:4e:77:ed:fa:e7:b5:4e:08:6e:24:86:cc:4c:1e:
         bf:b7:80:8e:2d:9c:21:c9:d2:93:9d:09:86:da:ff:c6:e5:2e:
         ed:a6:82:66:ee:1b:14:45:69:74:b6:5c:c4:cc:37:f5:3e:82:
         3e:4d:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:58:18 2026 by rpki-client