Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
File:                     3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          P9Re5UCW/JIFm9Z4CeGRceik9RvcFrvuYyQTRBjLfdo=
Subject key identifier:   BA:01:0E:D8:9E:10:14:8C:25:2F:EC:9E:41:5E:F9:23:60:D3:92:34
Certificate issuer:       /CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Certificate serial:       22A217D609B3FA9FBA2EF9B57FFA3DCA1CB5419C
Authority key identifier: E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
Signing time:             Tue 30 Jun 2026 14:35:35 +0000
ROA not before:           Tue 30 Jun 2026 14:30:35 +0000
ROA not after:            Tue 29 Jun 2027 14:35:35 +0000
asID:                     263656
IP address blocks:        177.52.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 19:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:17:d6:09:b3:fa:9f:ba:2e:f9:b5:7f:fa:3d:ca:1c:b5:41:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
        Validity
            Not Before: Jun 30 14:30:35 2026 GMT
            Not After : Jun 29 14:35:35 2027 GMT
        Subject: CN=BA010ED89E10148C252FEC9E415EF92360D39234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:9b:f2:b5:b4:28:0d:cf:94:a5:8b:72:19:
                    b1:8f:51:4c:20:b8:c2:8a:b5:e0:2c:dc:4c:8f:f2:
                    2d:34:6a:5d:93:c9:93:34:64:9d:45:54:96:09:81:
                    24:0b:e1:b8:ff:8d:d8:a9:20:ed:3a:c0:7c:98:01:
                    fd:4a:4c:ae:9d:6a:53:b9:3f:98:92:94:86:dd:0c:
                    21:0c:95:91:a2:79:e4:0e:ca:46:e8:e2:27:d0:f7:
                    7b:cc:ee:84:0c:0b:d6:7e:5d:b9:65:c7:21:8b:3b:
                    11:fa:32:ea:05:33:33:74:b6:c1:cc:64:fd:af:12:
                    7c:b3:49:cb:d8:5b:8d:cb:89:9f:07:10:b2:14:35:
                    ca:65:a2:da:cc:2a:d9:b7:5c:68:4e:e5:82:f4:c2:
                    57:d9:e8:c5:ff:96:04:24:f3:2e:f0:e1:0d:17:a5:
                    b8:0d:4f:35:69:53:f9:36:84:ab:c7:f0:57:69:07:
                    c5:d7:50:f7:e7:1b:e2:9f:b2:ba:09:7a:12:b3:35:
                    d1:46:32:07:26:16:df:b1:78:e8:42:f2:5c:3b:e5:
                    5a:c9:7f:ba:d5:d5:4b:dc:be:85:20:c5:b3:38:d5:
                    2b:ee:6f:7e:ea:ae:e6:d6:0e:c8:22:76:ee:95:54:
                    8b:b4:a4:c1:6e:e1:0c:98:fd:c2:95:ad:6e:7d:ba:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:0E:D8:9E:10:14:8C:25:2F:EC:9E:41:5E:F9:23:60:D3:92:34
            X509v3 Authority Key Identifier:
                keyid:E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:a9:23:88:48:a9:75:ee:2c:03:40:a6:34:62:2c:2d:54:
         eb:dc:e1:64:48:fc:45:76:2f:b6:3e:9c:ac:91:79:a9:13:08:
         e9:49:76:0f:a4:9d:42:ea:46:8b:b6:8e:24:86:63:96:7d:04:
         5e:53:a5:6f:60:72:c4:7e:e1:d9:23:f6:69:17:51:80:1c:04:
         70:02:5f:2c:67:33:d0:ab:f2:21:33:60:dd:d5:3c:83:8c:14:
         be:74:5b:c6:75:64:d0:17:15:fe:04:a3:7c:48:e4:bc:85:b0:
         43:9f:85:4b:8c:38:21:ea:54:b2:0a:d1:ae:83:a2:ea:ad:5a:
         9e:51:e2:ff:03:18:1e:e0:76:1e:67:85:8e:34:a5:f9:1d:bc:
         a3:32:4b:d5:41:eb:fe:e7:45:12:14:5c:fb:5c:0e:29:20:5e:
         13:8c:8d:f0:a3:9a:77:16:3e:a2:b3:d5:1a:66:50:5f:f5:71:
         26:c6:0e:62:72:6d:6f:f6:fa:a4:85:3c:42:87:53:9c:b5:9b:
         d1:5b:d4:18:77:c4:b8:08:31:27:5e:63:c5:37:93:65:60:ff:
         18:bb:ac:e0:73:6e:75:18:70:2a:61:e8:f2:a2:1e:58:9b:d9:
         2e:f0:6a:29:b9:87:4e:b7:35:e4:4e:2c:b6:55:d7:a9:98:fe:
         af:ee:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:03:27 2026 by rpki-client