Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa
File:                     3137372e34372e3232342e302f32302d3234203d3e203532393935.roa (raw, json)
Hash identifier:          sePdsk5DB2Ov/16lF3wmGqz5ldkgZaec7xgV9Eq2ODY=
Subject key identifier:   76:D1:7A:DD:9D:91:3F:35:4C:EF:FB:7F:BE:30:EE:EE:99:1D:4E:62
Certificate issuer:       /CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Certificate serial:       2C9A7C5E54FD36726CF93DA34C87AD6385F294FA
Authority key identifier: 1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa
Signing time:             Tue 07 Apr 2026 14:05:29 +0000
ROA not before:           Tue 07 Apr 2026 14:00:29 +0000
ROA not after:            Tue 06 Apr 2027 14:05:29 +0000
asID:                     52995
IP address blocks:        177.47.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
                          rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 23:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9a:7c:5e:54:fd:36:72:6c:f9:3d:a3:4c:87:ad:63:85:f2:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
        Validity
            Not Before: Apr  7 14:00:29 2026 GMT
            Not After : Apr  6 14:05:29 2027 GMT
        Subject: CN=76D17ADD9D913F354CEFFB7FBE30EEEE991D4E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:a4:76:4a:b4:18:09:42:0d:98:02:f2:0c:
                    c2:9d:e5:a0:42:16:a7:34:00:45:4e:d3:4a:10:a2:
                    cc:2e:bf:35:df:6b:9c:55:4f:89:e1:7b:0c:30:3a:
                    0a:8e:1b:bc:87:16:03:6e:7a:30:3a:bf:70:2b:18:
                    2c:b9:81:f6:2e:83:c9:97:43:16:f1:ad:69:ee:12:
                    80:24:fe:62:30:55:35:30:3c:ee:f3:54:79:13:a2:
                    88:63:af:6d:f6:8e:f6:16:99:b3:19:a0:ce:37:f8:
                    e0:9e:46:77:d1:f1:f0:67:cd:b7:08:84:24:62:ed:
                    54:0f:cc:84:ba:4e:0a:f3:f1:1e:a4:8a:2e:b0:3e:
                    eb:eb:ef:da:8b:7d:13:6b:d5:30:b2:f1:31:25:16:
                    51:c1:18:c7:f9:7c:90:61:38:df:73:3a:82:1c:f9:
                    da:28:da:d7:b1:1d:b2:24:42:2e:2b:ea:41:43:85:
                    5e:e6:17:36:a8:40:ac:b4:5f:d6:c4:90:88:d1:76:
                    61:e3:ba:04:69:99:c8:a3:ab:40:ad:8e:d8:18:7d:
                    9c:dc:72:cf:44:55:4d:47:3e:75:65:81:b3:db:8d:
                    b7:45:3c:56:33:70:88:e4:23:0a:bd:2b:c3:b8:78:
                    9b:c0:cf:0c:6f:82:d7:a7:1c:da:3e:0c:32:2a:fc:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D1:7A:DD:9D:91:3F:35:4C:EF:FB:7F:BE:30:EE:EE:99:1D:4E:62
            X509v3 Authority Key Identifier:
                keyid:1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:31:6b:9b:6a:a3:ee:4c:fd:00:92:6b:9b:3a:d5:cf:0b:2f:
         ec:a5:84:06:29:4d:64:d6:0d:1f:2c:e4:31:0a:7c:a3:1d:3c:
         70:d1:ff:23:da:b5:1b:de:28:3e:30:86:4e:8d:f1:f7:66:bc:
         11:6d:f8:2e:fc:22:c6:53:79:9d:d6:9b:73:c2:e4:e0:c3:86:
         56:c1:a7:ff:90:0c:4f:7f:33:2d:e7:85:f5:33:3f:41:8e:77:
         ff:e5:f4:9e:96:77:39:c0:7c:08:fe:67:d0:c7:71:08:8c:6f:
         34:27:92:3d:74:da:9c:e4:07:a9:7f:0b:ec:88:c6:c9:71:d5:
         28:a8:8a:6c:65:a8:0c:6f:29:c8:2d:7a:e2:53:91:8b:40:a0:
         a1:cb:11:a2:fe:b7:aa:cc:1d:32:e9:4e:8e:82:db:97:22:56:
         5b:96:e2:0e:29:05:9f:df:a1:7c:f7:c0:12:f2:cc:56:c9:45:
         64:ae:a2:d4:e7:65:a9:25:28:62:59:9c:e9:10:9f:13:2f:b4:
         4a:6d:60:0e:26:47:e7:78:11:6a:75:9b:c7:f7:9a:4b:30:d8:
         1f:25:cb:1f:6a:f2:14:e6:43:1e:d4:89:b3:5d:7d:7c:f0:cb:
         c4:d8:16:fa:c6:e7:e7:2c:18:a0:10:f3:d3:16:93:25:32:9d:
         20:7d:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 00:33:14 2026 by rpki-client