Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          zwOB+N5fdhrvtIZLhgf6cqWk60O10BIqfs2LYObF33Y=
Subject key identifier:   9C:0D:59:B6:91:6C:97:C1:D6:D5:B6:1D:23:5B:ED:D5:AB:A2:D7:A3
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       45038E154B3EF4221B047D39B918818FDEA39140
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
Signing time:             Sat 04 Apr 2026 17:01:23 +0000
ROA not before:           Sat 04 Apr 2026 16:56:23 +0000
ROA not after:            Sat 03 Apr 2027 17:01:23 +0000
asID:                     52631
IP address blocks:        177.128.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:03:8e:15:4b:3e:f4:22:1b:04:7d:39:b9:18:81:8f:de:a3:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:23 2026 GMT
            Not After : Apr  3 17:01:23 2027 GMT
        Subject: CN=9C0D59B6916C97C1D6D5B61D235BEDD5ABA2D7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:5a:f5:9d:37:d5:c0:d7:db:24:a8:44:b5:
                    44:95:90:10:c8:db:c3:c1:71:a3:a6:e5:26:fa:f7:
                    93:0a:c1:84:fa:66:48:b4:6c:f5:22:d9:6d:4d:7a:
                    2b:fb:3a:c7:35:89:6c:e5:41:13:bd:ba:7f:bf:9a:
                    9f:b3:a6:bf:2d:62:fa:bc:a0:c2:8d:27:36:3f:4a:
                    93:70:6d:6a:e3:92:d7:95:fb:76:26:64:25:32:bc:
                    b5:31:c4:0f:d7:1a:4b:08:93:2e:37:6a:d9:bc:2e:
                    1e:45:e1:75:e6:bf:15:8a:0f:96:30:29:ee:61:9d:
                    8d:43:4a:09:b4:a4:97:0b:60:c5:43:9e:5b:5f:92:
                    ae:c8:b0:a2:4f:ee:69:42:aa:1e:4f:f6:37:8d:e6:
                    bf:ec:9d:da:c2:c4:64:0d:ed:0a:d9:73:24:0e:58:
                    7f:4f:76:8b:80:75:41:d8:1d:4c:e4:b5:b9:c8:63:
                    7c:0e:90:10:ae:b0:cb:f7:e2:b7:b3:35:00:4b:bb:
                    fe:83:91:dd:aa:bd:c8:34:7f:33:6e:a1:f7:9e:43:
                    08:3d:3f:b6:ae:f0:23:c2:bc:21:83:b4:23:1b:a6:
                    55:4c:ad:95:33:c2:b0:fd:3c:de:08:f7:16:20:38:
                    43:17:59:9f:b2:9e:cf:1e:74:af:ba:12:3d:3e:a0:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:59:B6:91:6C:97:C1:D6:D5:B6:1D:23:5B:ED:D5:AB:A2:D7:A3
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:80:20:f2:c8:59:87:2e:d6:a0:cd:c5:cc:27:6a:a9:5d:58:
         e7:98:29:9b:a6:da:b1:8e:bd:52:40:b7:d8:d0:13:f9:25:6b:
         35:ff:1d:b5:98:71:10:79:ca:40:df:d2:a2:a5:ae:38:c0:bf:
         2a:a3:c6:ea:b8:46:ca:96:c9:3d:df:48:a2:16:72:72:e5:f1:
         f6:2c:1f:fe:43:41:ab:79:28:5e:aa:66:17:a8:e1:20:1b:cc:
         ef:01:0f:eb:f6:03:b4:06:90:b8:7d:b0:29:e8:31:33:7c:61:
         ea:e8:73:5a:34:e9:58:ce:a6:b6:c7:13:90:55:3b:9f:b2:4c:
         90:32:df:d1:5e:93:2c:e8:23:84:5a:e2:51:ae:60:9c:f3:3f:
         5e:4a:b3:88:28:d1:54:67:ca:64:d0:14:9e:33:8f:4f:21:fa:
         31:c1:d6:f6:65:a2:f9:90:d2:66:35:f3:03:09:00:03:87:ef:
         83:2e:5a:6b:95:07:17:3a:0d:04:18:bd:b7:11:5c:da:9b:56:
         2c:30:cd:08:12:57:0d:f5:d9:f6:23:09:ec:08:b5:18:c9:7d:
         50:15:48:70:b1:07:46:df:d0:5d:70:5c:ac:77:26:7f:e0:55:
         ba:64:5f:05:6f:9a:0f:da:75:bb:f1:92:e0:67:34:32:09:5f:
         65:6c:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:17:43 2026 by rpki-client