Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          KvQ80GS/FuCKNEiPE/GYfENKyxMYavVPqaBor1brHR0=
Subject key identifier:   7B:5F:CE:EF:99:40:3B:42:6F:CE:B6:ED:9B:37:75:1B:84:C6:72:F7
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       7CBA3F3DEF0889C6EF4311CBB09492E7C00DDEAF
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:40 +0000
ROA not before:           Mon 13 Apr 2026 15:39:40 +0000
ROA not after:            Mon 12 Apr 2027 15:44:40 +0000
asID:                     262296
IP address blocks:        177.85.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ba:3f:3d:ef:08:89:c6:ef:43:11:cb:b0:94:92:e7:c0:0d:de:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:40 2026 GMT
            Not After : Apr 12 15:44:40 2027 GMT
        Subject: CN=7B5FCEEF99403B426FCEB6ED9B37751B84C672F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:10:72:0c:eb:63:dd:27:30:b9:87:43:a1:
                    1d:72:bf:89:73:a1:e4:b3:25:69:45:e4:74:28:c8:
                    53:44:93:77:a7:fd:81:57:81:bf:15:5d:e7:6a:69:
                    5b:12:7f:4d:50:4e:6a:76:7f:ea:26:e9:3c:b5:70:
                    a8:28:5a:3c:00:17:9d:e7:ce:73:a3:6f:6b:db:3a:
                    02:98:c3:8f:25:c0:7b:c2:59:e1:2b:8f:f5:21:9a:
                    e8:3b:82:23:8f:8c:ac:ec:d2:26:c6:67:87:36:fa:
                    1b:61:97:41:e0:df:f7:a3:f5:d5:4b:27:a3:2f:48:
                    c3:5a:64:cb:6a:10:3d:9f:dd:80:a8:7a:5a:81:9d:
                    9e:48:b5:31:d4:3c:24:50:60:55:8d:45:11:eb:c4:
                    f2:9a:ff:67:6d:b2:08:aa:6c:12:ac:40:36:1d:c4:
                    97:a9:dd:76:cc:1c:be:4f:ec:5e:62:7f:f3:08:08:
                    16:25:0f:c8:ef:91:60:db:54:c2:52:34:23:8a:67:
                    ee:45:c0:d2:28:e2:e3:c6:35:a9:5c:20:19:40:c0:
                    93:a3:44:c6:61:ac:b8:69:8b:96:f7:8c:1b:bd:81:
                    e2:cb:99:a0:18:31:8f:95:8a:29:66:7f:c1:f9:09:
                    25:9f:6c:85:00:e8:02:47:23:7f:9d:00:27:d7:e6:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:CE:EF:99:40:3B:42:6F:CE:B6:ED:9B:37:75:1B:84:C6:72:F7
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:f9:a7:52:27:44:ee:a4:e6:13:d4:29:05:cb:a5:e2:8b:
         b7:13:cb:f7:fc:68:ec:00:e8:3c:d2:58:2e:9a:e5:9b:e0:45:
         7c:66:6f:76:e9:7f:ad:a2:0c:05:a1:1a:7c:c2:db:10:7e:de:
         6c:e0:65:5a:45:6f:9d:ec:d1:03:41:13:8b:8a:33:05:6c:ed:
         6c:50:25:dc:6d:a6:04:99:42:eb:70:41:f4:5a:11:29:dd:2b:
         b9:7a:0c:13:c1:9c:c3:04:73:7e:e2:d1:dd:49:9f:62:bc:ee:
         75:d0:11:7a:63:9c:0e:72:fb:05:15:ed:56:b2:15:78:95:08:
         58:f0:cf:2d:c9:98:a1:64:21:0f:a2:46:49:ef:60:2b:35:33:
         7e:12:a6:45:d8:aa:47:42:25:df:31:6d:c9:5f:ef:04:24:11:
         bc:c9:d8:ad:4e:f4:cd:3f:8a:e9:fb:85:d2:45:f7:85:9d:2a:
         19:fb:86:13:d3:eb:d7:5d:df:75:c5:7f:8e:b9:e7:da:00:e5:
         89:24:1e:bd:ab:0c:df:bc:9c:c4:76:5b:7d:1f:74:3e:f9:b9:
         a0:e0:d2:c9:53:83:2f:5b:73:0b:a7:7a:c5:86:2b:70:0b:e9:
         70:6d:07:5b:b4:46:64:42:11:20:3a:84:d0:14:31:6e:e0:09:
         93:93:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:50 2026 by rpki-client