Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa
File:                     3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa (raw, json)
Hash identifier:          qsJbbGYaeXIxRhqfGLgVMUTIKo+/shyea8P1wMa5deU=
Subject key identifier:   D4:43:65:84:56:28:8F:D4:43:1D:63:CD:D4:20:03:A5:0D:43:42:BB
Certificate issuer:       /CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
Certificate serial:       6DB6A54C491288A044CECC9EF9CD96AF821B2A16
Authority key identifier: 6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa
Signing time:             Thu 28 May 2026 15:55:07 +0000
ROA not before:           Thu 28 May 2026 15:50:07 +0000
ROA not after:            Thu 27 May 2027 15:55:07 +0000
asID:                     262878
IP address blocks:        177.11.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl
                          rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:a5:4c:49:12:88:a0:44:ce:cc:9e:f9:cd:96:af:82:1b:2a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
        Validity
            Not Before: May 28 15:50:07 2026 GMT
            Not After : May 27 15:55:07 2027 GMT
        Subject: CN=D443658456288FD4431D63CDD42003A50D4342BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:5a:cd:c1:14:f3:a4:1b:3e:e4:24:f2:52:
                    19:ad:5c:23:3f:30:94:e2:cd:a6:06:c0:c9:b9:fa:
                    ea:b7:8e:6e:f6:27:83:05:1c:37:21:2d:32:7d:4f:
                    ba:02:36:07:e2:72:04:78:96:74:74:88:81:20:e3:
                    09:b5:b0:f9:d5:63:54:02:53:2b:64:47:e6:e1:46:
                    fa:2f:ac:f0:9a:e2:75:89:e4:43:f2:1d:3e:88:55:
                    ba:84:c4:d6:85:92:b7:79:4e:f5:6e:2c:1a:2c:20:
                    78:ca:8f:4f:4e:08:d6:29:88:79:4d:b5:68:91:c3:
                    ed:11:78:48:e9:a9:a8:34:c5:23:88:48:d0:be:4f:
                    76:a1:c6:d1:27:93:78:83:62:20:75:48:0b:d1:8e:
                    3d:94:93:1f:76:b9:da:ef:ac:63:10:00:6e:f4:4b:
                    15:0e:6c:79:46:e1:c4:af:c5:fc:90:0b:0c:e3:49:
                    95:80:ff:16:8e:f2:9a:3a:f9:24:21:91:4c:f4:7d:
                    d7:e6:4d:db:36:eb:37:c3:27:bb:c8:ac:a0:0a:6c:
                    b2:54:f1:d4:a2:a2:16:b0:63:6e:bf:1d:a9:d0:29:
                    89:5f:d2:ae:6d:03:5e:35:9a:8c:86:eb:f6:6b:92:
                    b4:34:f7:be:12:e5:6d:c2:15:f0:74:48:8d:52:fa:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:43:65:84:56:28:8F:D4:43:1D:63:CD:D4:20:03:A5:0D:43:42:BB
            X509v3 Authority Key Identifier:
                keyid:6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:6c:28:0b:d8:cd:1f:0c:14:f5:20:0e:af:c1:ed:89:62:
         e4:42:81:91:9d:ed:c7:f7:dd:2f:70:c3:d5:76:84:81:7a:44:
         4d:36:de:76:22:54:e9:22:d8:0d:fd:fd:1f:65:38:8c:da:e0:
         1a:12:7c:e9:1e:c5:75:55:c4:a5:c9:20:f4:a6:ab:10:c7:f9:
         2d:99:9c:c6:29:d5:83:26:3f:65:3f:87:ce:af:1f:2b:d6:21:
         52:a9:1e:d9:e5:97:61:9b:01:e4:ad:21:e8:6d:61:0e:91:a5:
         00:9b:ec:3d:91:f4:b4:a3:4e:ff:9f:bf:bf:c6:8d:75:ef:fd:
         34:fe:43:f0:b8:7f:8e:43:c0:8f:4f:f3:32:86:d6:a5:ca:b6:
         68:92:33:9c:eb:12:18:c7:d2:a8:50:f4:1a:d9:7b:fa:2b:de:
         4e:e5:e6:02:ea:4f:92:5d:43:82:73:6e:46:8d:ee:95:9a:e5:
         0a:ef:0c:3f:f7:ab:ce:81:42:76:3b:60:c5:55:ea:53:dd:e9:
         fb:a9:45:16:87:90:d2:6b:9b:4a:b0:9f:07:6f:53:db:84:47:
         c2:1f:6c:cf:81:0e:bb:02:96:a9:cb:84:80:e3:90:87:fc:f6:
         30:36:f5:15:c5:96:91:ee:ad:e8:0f:e8:84:2c:8d:63:ad:55:
         db:ef:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:36:08 2026 by rpki-client