Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa
File:                     3137372e38362e3138342e302f32312d3231203d3e203532353735.roa (raw, json)
Hash identifier:          Oqf3n/wcRS3DlIdSBr9x/T2CxnQtnnW1JGGx4TLbTzk=
Subject key identifier:   03:10:DD:B6:73:B4:E0:EE:C3:3F:55:57:0C:2C:BE:72:58:2F:E6:7D
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       0E68ED3946C15F3CAD1FD95BA90311776E16EE02
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:17 +0000
ROA not before:           Tue 14 Apr 2026 16:28:17 +0000
ROA not after:            Tue 13 Apr 2027 16:33:17 +0000
asID:                     52575
IP address blocks:        177.86.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:68:ed:39:46:c1:5f:3c:ad:1f:d9:5b:a9:03:11:77:6e:16:ee:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:17 2026 GMT
            Not After : Apr 13 16:33:17 2027 GMT
        Subject: CN=0310DDB673B4E0EEC33F55570C2CBE72582FE67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:04:29:e8:58:ad:00:44:e5:f4:8d:36:0f:
                    a5:8f:19:2d:be:a7:74:df:76:57:95:db:e1:a4:ea:
                    11:bb:bc:51:70:7e:1a:86:02:07:be:db:1c:39:1a:
                    06:04:fc:8a:df:32:2c:9b:71:6d:47:b0:a6:f4:eb:
                    d2:9d:18:d3:1d:b9:27:b2:dc:8b:fd:bd:ae:09:b2:
                    a9:50:2c:b8:53:0e:0f:49:43:ee:e0:c2:c9:e8:82:
                    af:fe:a0:98:71:d5:be:1f:bc:f1:56:cb:c6:5f:f3:
                    c3:58:a3:70:fc:96:ce:88:b1:1e:56:3d:7e:22:87:
                    3e:86:27:0e:a9:5b:c7:7f:e9:83:4f:6a:f0:77:69:
                    11:6c:99:78:1b:fa:d8:28:74:15:d9:8a:ed:58:97:
                    03:1f:5d:47:c3:a7:f9:6c:84:50:a0:7b:c5:92:43:
                    e7:a7:51:70:88:f4:8e:7e:4a:dd:0d:0d:d2:70:da:
                    f5:52:9c:e3:dc:3f:76:69:bc:1e:82:5d:43:30:94:
                    e2:49:7e:75:9f:7b:39:af:51:f4:17:48:a4:3c:98:
                    e5:02:ca:32:3b:0b:95:c7:b7:a8:4e:c1:ed:d5:7a:
                    b5:fb:5f:b3:84:26:5d:e3:d6:38:db:90:bb:c0:6e:
                    bd:93:4b:27:2d:fb:a3:5d:94:1a:0a:12:e9:32:a2:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:DD:B6:73:B4:E0:EE:C3:3F:55:57:0C:2C:BE:72:58:2F:E6:7D
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:b3:47:0e:6f:d8:c6:bb:ad:0c:70:d9:d1:d6:5d:88:5e:c6:
         ec:70:6f:00:12:84:18:4b:7c:b1:29:57:82:20:78:df:7c:05:
         32:ae:dd:03:8e:90:e3:d1:34:27:72:59:93:ee:9b:c3:36:ab:
         6a:ea:80:2c:d3:67:a8:eb:f8:98:57:40:da:1d:08:d0:08:0a:
         45:ba:d8:58:9a:df:6d:7f:28:92:73:5c:c7:80:16:ac:37:b6:
         c1:02:51:90:dc:7f:32:85:40:4a:fe:97:a5:3c:f4:76:ad:78:
         3a:f2:40:96:b7:18:8a:f3:26:e7:dc:95:91:65:4e:6c:e0:7c:
         e8:dd:0d:35:1a:3e:97:e6:77:0c:87:99:41:62:47:f7:ed:2e:
         ed:7b:5e:46:a9:e5:3d:a5:1c:ad:83:2c:a8:fc:c2:80:0a:70:
         e8:e0:1d:fd:4b:0f:7b:c5:46:50:c8:0b:30:17:3a:3d:a5:f6:
         dc:0d:23:49:3b:35:42:bc:69:dd:25:c9:c9:ee:03:f7:8f:a2:
         3d:25:a9:f4:58:12:82:74:4c:b0:6e:fe:fc:ea:ca:b2:af:b7:
         ec:b6:2a:c5:80:41:56:06:90:dc:9d:14:85:60:21:75:8c:13:
         08:df:71:04:31:4e:bd:68:b0:71:e6:0b:86:06:95:ff:f0:42:
         c5:2a:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:02:12 2026 by rpki-client