Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          Cux+VhHES/ceM0XT+KpxDDcMZgdsts8Sfq4y81kLhbk=
Subject key identifier:   2F:40:69:EF:55:9C:D0:9C:93:48:DC:B4:A4:F1:9E:41:59:73:75:81
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       252B23CC381D28EF0EA9C115B74CC44D4B142E89
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 04 Apr 2026 17:01:23 +0000
ROA not before:           Sat 04 Apr 2026 16:56:23 +0000
ROA not after:            Sat 03 Apr 2027 17:01:23 +0000
asID:                     52631
IP address blocks:        177.128.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:23:cc:38:1d:28:ef:0e:a9:c1:15:b7:4c:c4:4d:4b:14:2e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:23 2026 GMT
            Not After : Apr  3 17:01:23 2027 GMT
        Subject: CN=2F4069EF559CD09C9348DCB4A4F19E4159737581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:0c:a7:e5:48:c6:07:08:a8:a0:ce:75:d6:
                    1a:38:3e:f4:29:64:e0:87:c7:f5:88:12:cd:52:e5:
                    ab:2b:a3:aa:4b:9d:c2:98:ea:8e:36:61:83:3b:c0:
                    8e:d0:9a:7e:3e:70:19:cc:27:14:72:26:b4:bd:70:
                    29:83:1b:02:ef:83:12:f8:6c:19:80:bb:91:cd:d5:
                    9b:aa:45:8f:f8:dd:b2:ea:d4:0c:8c:5d:de:d0:c8:
                    69:3d:f1:eb:2b:c4:a7:0a:4a:b0:f0:32:cf:a4:cb:
                    e6:c5:15:0d:4b:6b:0b:4c:9b:fd:8e:01:37:43:63:
                    fc:68:ff:80:02:e5:53:48:44:0e:a3:15:51:5b:49:
                    0c:c2:70:10:4b:87:20:23:75:5c:36:84:2b:9d:0f:
                    98:13:4e:4c:3c:27:a3:f4:5f:11:31:96:ab:b8:eb:
                    2e:4a:58:18:86:22:1b:c2:57:d8:a3:7a:15:44:00:
                    ab:f4:fc:bf:23:d2:2f:a3:87:42:6e:14:f5:c2:5d:
                    db:71:0c:c8:5c:8d:ec:b8:98:ab:bb:01:10:f7:4f:
                    fc:9d:b1:f3:bb:07:94:bc:5e:1b:57:0a:f0:ca:ac:
                    5d:c8:87:07:71:7b:b4:43:08:30:99:b2:c4:e3:71:
                    89:a3:31:39:64:7d:2f:3b:43:35:ef:00:ad:74:82:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:69:EF:55:9C:D0:9C:93:48:DC:B4:A4:F1:9E:41:59:73:75:81
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:10:39:4c:9e:01:8e:2c:68:87:6f:5d:c5:74:8d:ec:84:dd:
         d8:0b:1f:42:83:ad:e0:77:73:af:fa:3b:59:55:af:57:9a:2c:
         b8:ea:1b:38:66:8d:ce:b1:1e:d1:d1:db:f0:51:89:2f:18:5a:
         b5:56:0b:1a:11:f7:09:ee:7b:4d:5a:13:4f:b7:5d:39:53:82:
         11:f4:e2:a7:a5:10:b4:62:3f:b3:f2:44:c0:eb:16:0d:db:10:
         41:1e:7b:62:7e:6a:a4:d8:ca:75:c2:d9:2a:e8:bb:18:31:b6:
         e4:6a:d4:d6:76:23:b4:4b:2d:4b:52:42:0d:2d:53:83:50:ed:
         7d:c2:40:f4:b2:53:67:40:4e:44:16:66:5b:cb:9b:6c:b4:44:
         ef:21:8c:70:22:e6:5d:3c:67:80:ad:99:df:d9:a5:80:98:b2:
         db:c5:86:34:41:5e:47:4a:ee:96:65:93:5d:cb:cf:07:56:0d:
         39:b7:8e:c4:99:29:18:d9:6a:06:54:c5:20:f4:77:8c:63:26:
         5f:72:e3:c3:c9:e9:33:4c:5c:74:ba:8f:c1:ee:c8:e9:b5:22:
         e7:a9:36:3f:a8:a0:3f:31:93:ea:3d:de:4d:5c:d2:00:4c:39:
         a8:a1:22:5e:65:e4:00:34:44:ff:b7:50:01:04:1b:e9:cf:ee:
         2d:ba:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:08 2026 by rpki-client