Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3134302e302f32342d3234203d3e203133333335.roa
File:                     3137372e3130342e3134302e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          AEifPVKkTOiU+vz8uU1o/lpnunT8Xb/p7Odr0wJvQvk=
Subject key identifier:   46:5F:DB:8D:B4:04:A7:7E:CE:51:B1:C8:AF:93:95:BA:B3:87:EF:71
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       04230F6CD2711363E64681C8D0D989A03360FB8C
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3134302e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 01 Jun 2026 21:05:02 +0000
ROA not before:           Mon 01 Jun 2026 21:00:02 +0000
ROA not after:            Mon 31 May 2027 21:05:02 +0000
asID:                     13335
IP address blocks:        177.104.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jun 2026 19:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:23:0f:6c:d2:71:13:63:e6:46:81:c8:d0:d9:89:a0:33:60:fb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  1 21:00:02 2026 GMT
            Not After : May 31 21:05:02 2027 GMT
        Subject: CN=465FDB8DB404A77ECE51B1C8AF9395BAB387EF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:f8:8c:c8:f8:31:5e:bf:84:d4:c3:fe:93:
                    75:3a:65:cc:92:4f:ca:dd:b2:e3:0d:b3:9a:57:97:
                    e1:ee:d1:54:0d:c0:db:71:42:a1:e6:8b:d9:43:77:
                    d5:7b:d7:52:53:1b:2f:d2:a8:79:3f:f1:23:d0:ae:
                    fb:e9:7d:41:9d:11:55:ac:3b:a7:21:77:d9:d1:bf:
                    10:71:39:bc:8e:97:d1:66:f1:26:71:1e:28:d4:74:
                    5b:1c:e0:7f:d5:e3:4f:c4:24:41:d6:2f:3f:a7:b2:
                    fb:a9:fa:26:ca:7a:a9:b0:ba:b3:6c:ee:52:16:96:
                    56:c4:ad:61:97:35:22:d7:b6:b2:ad:e2:e7:dd:a3:
                    0a:c1:4c:f4:86:26:91:b4:a0:d1:db:d6:0b:9d:22:
                    12:66:ae:2a:ac:02:1b:9d:92:52:bb:1b:89:78:87:
                    0e:37:45:92:52:2e:ea:77:d1:55:b2:9f:a4:78:ef:
                    52:5c:24:87:d2:e7:ec:a3:d3:45:33:b0:2d:36:3b:
                    2a:67:ee:e7:c1:de:24:44:8e:d3:6b:74:7b:39:87:
                    07:16:e0:34:e0:5e:38:9b:92:d5:6a:8f:b6:25:10:
                    26:3a:16:93:b0:74:8d:cc:18:0a:fe:5b:bb:55:1b:
                    8f:81:4c:df:d9:e4:12:c5:2d:4f:a5:2b:66:7f:8e:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5F:DB:8D:B4:04:A7:7E:CE:51:B1:C8:AF:93:95:BA:B3:87:EF:71
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3134302e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:c3:9a:fe:75:3e:06:6f:65:38:44:13:b6:37:ef:bb:ef:
         7f:25:cc:d1:ad:05:3f:d1:1c:06:78:ed:10:a3:26:22:82:9f:
         e9:0c:34:1f:8c:98:35:43:ea:2c:82:8c:c0:d6:f5:07:2d:64:
         26:26:d4:70:b7:71:3d:db:4e:22:74:82:2e:3e:9e:a2:95:97:
         77:01:fc:b6:d4:d9:ec:d6:03:47:a7:e8:bc:ad:11:79:09:72:
         69:7a:5a:b2:c4:81:f8:88:5e:83:c0:1f:22:7f:5a:12:3a:ad:
         4c:85:82:48:83:ef:a9:fb:52:5d:3e:92:45:02:c0:0d:13:15:
         ae:85:d4:34:5a:10:56:d2:57:40:d6:fa:70:7c:ae:b4:e9:ac:
         6e:43:e8:0d:b7:75:a6:0e:ae:f0:3b:23:05:8a:4e:14:2a:f7:
         80:10:d7:03:29:5e:21:b7:51:fd:21:d4:b7:53:44:53:1c:99:
         ba:6b:94:44:46:1e:8e:4e:98:17:eb:c5:28:35:68:3a:f8:50:
         06:4f:17:ba:05:dd:2b:4c:08:b2:8a:c2:45:31:a2:75:bf:c7:
         5e:15:ca:9b:1f:39:15:81:55:6e:f5:fb:e5:24:f6:17:b3:0f:
         da:e2:cc:dd:9c:42:7b:51:78:c7:80:79:c0:16:d5:2f:c3:da:
         c7:8d:ff:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBCMPbNJxE2PmRoHI0NmJoDNg+4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNjA2MDEyMTAwMDJaFw0yNzA1MzEyMTA1MDJaMDMxMTAvBgNV
BAMTKDQ2NUZEQjhEQjQwNEE3N0VDRTUxQjFDOEFGOTM5NUJBQjM4N0VGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcx/iMyPgxXr+E1MP+k3U6ZcyS
T8rdsuMNs5pXl+Hu0VQNwNtxQqHmi9lDd9V711JTGy/SqHk/8SPQrvvpfUGdEVWs
O6chd9nRvxBxObyOl9Fm8SZxHijUdFsc4H/V40/EJEHWLz+nsvup+ibKeqmwurNs
7lIWllbErWGXNSLXtrKt4ufdowrBTPSGJpG0oNHb1gudIhJmriqsAhudklK7G4l4
hw43RZJSLup30VWyn6R471JcJIfS5+yj00UzsC02Oypn7ufB3iREjtNrdHs5hwcW
4DTgXjibktVqj7YlECY6FpOwdI3MGAr+W7tVG4+BTN/Z5BLFLU+lK2Z/jisRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURl/bjbQEp37OUbHIr5OVurOH73EwHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzNzM3MmUzMTMwMzQyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxaIwwDQYJKoZIhvcNAQELBQADggEBADAvw5r+
dT4Gb2U4RBO2N++7738lzNGtBT/RHAZ47RCjJiKCn+kMNB+MmDVD6iyCjMDW9Qct
ZCYm1HC3cT3bTiJ0gi4+nqKVl3cB/LbU2ezWA0en6LytEXkJcml6WrLEgfiIXoPA
HyJ/WhI6rUyFgkiD76n7Ul0+kkUCwA0TFa6F1DRaEFbSV0DW+nB8rrTprG5D6A23
daYOrvA7IwWKThQq94AQ1wMpXiG3Uf0h1LdTRFMcmbprlERGHo5OmBfrxSg1aDr4
UAZPF7oF3StMCLKKwkUxonW/x14VypsfORWBVW71++Uk9hezD9rizN2cQntReMeA
ecAW1S/D2seN/44=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:19 2026 by rpki-client