Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa
File:                     3137372e38362e3139302e302f32332d3233203d3e203532353735.roa (raw, json)
Hash identifier:          L7Ss0TjbOBWY7fq/lyZy3MfQuG2LZIv1JlW8km5xVbk=
Subject key identifier:   29:C9:6A:80:A2:7F:60:72:6D:F7:86:83:F6:2E:66:25:F7:66:7F:CA
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       09C1A791215BAADF57407C43B7CE4F3B2AC8D8CC
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:16 +0000
ROA not before:           Tue 14 Apr 2026 16:28:16 +0000
ROA not after:            Tue 13 Apr 2027 16:33:16 +0000
asID:                     52575
IP address blocks:        177.86.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c1:a7:91:21:5b:aa:df:57:40:7c:43:b7:ce:4f:3b:2a:c8:d8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:16 2026 GMT
            Not After : Apr 13 16:33:16 2027 GMT
        Subject: CN=29C96A80A27F60726DF78683F62E6625F7667FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:db:b3:43:52:0a:d6:bb:e0:68:75:2b:25:
                    ee:a5:95:87:37:53:ad:93:f6:2a:bc:15:0d:79:21:
                    65:33:ee:49:dc:ad:ff:c6:44:1a:25:0a:f3:22:da:
                    d3:70:b5:3c:01:5d:bf:6e:57:23:84:54:f7:20:20:
                    fe:55:5f:e7:b7:dc:20:ee:b4:f2:87:cf:9b:d0:ba:
                    a7:3d:11:be:12:c4:3c:ad:64:f0:a9:fa:3e:d7:a7:
                    ff:ca:3d:a0:dc:f7:b3:b1:08:9c:18:8e:db:cb:06:
                    15:ea:47:da:06:f1:9d:33:91:49:ae:d2:53:54:b4:
                    53:3c:32:bd:7c:5a:e9:42:41:03:c5:f3:55:fe:2d:
                    de:f5:dc:e5:4a:bd:0c:e6:f2:46:27:e4:79:07:3d:
                    30:6d:d8:8d:b3:64:ea:e7:33:41:5f:db:b1:5d:8f:
                    53:21:45:89:ac:87:e5:57:c6:c2:48:ab:dd:c1:e3:
                    2c:80:c6:89:14:15:6e:ef:f8:0e:74:1e:cc:85:f5:
                    82:95:98:7f:d9:7f:b3:e8:ff:f6:d5:4f:cc:e4:ea:
                    ba:30:57:9e:bb:ff:5e:9f:54:aa:03:3c:7a:08:bc:
                    a5:a2:63:54:6c:95:fa:c4:ad:0c:f4:aa:f9:22:79:
                    14:1f:78:ee:93:1e:48:ea:7d:f5:40:a3:30:ca:4e:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:6A:80:A2:7F:60:72:6D:F7:86:83:F6:2E:66:25:F7:66:7F:CA
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:9c:8f:19:35:ea:0e:4f:b8:3f:f5:e5:be:df:e9:96:26:5d:
         c0:65:57:bf:13:71:82:78:6e:ab:55:b3:3f:d6:73:5e:55:1b:
         15:66:57:44:04:cf:b7:ca:f2:ae:7f:a7:92:55:8b:77:63:99:
         af:2a:63:bf:85:c5:eb:8d:92:e2:1e:55:83:60:21:27:b9:ce:
         04:82:75:34:2b:89:65:26:1f:c2:e8:fb:3a:06:89:ea:65:37:
         fe:fe:f3:d3:92:ee:77:35:9d:51:7f:41:c9:72:f7:44:b7:b8:
         a2:51:a4:b6:d9:88:15:f3:bf:fd:90:ab:f1:4e:b5:82:c1:69:
         bf:02:b6:31:d3:c8:d6:27:1c:87:37:87:07:52:d3:c6:fa:cb:
         3a:e6:ea:47:1b:04:f3:54:0f:c0:6f:0e:01:ed:3c:d4:eb:68:
         06:bc:78:7c:53:5d:58:87:75:7d:f3:32:c8:80:df:67:91:37:
         df:60:8a:e3:05:08:f7:89:5b:06:85:44:5c:55:80:64:aa:c1:
         47:97:0d:41:4b:09:4b:1c:61:21:1e:e4:d8:52:4b:73:fe:9c:
         5d:e6:43:b4:98:b7:d2:84:27:20:17:61:af:6e:da:c7:2e:35:
         72:31:03:d7:03:ad:20:f2:c0:96:02:63:9f:40:e4:f9:a7:64:
         a8:ef:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:03 2026 by rpki-client