Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa
File:                     3137372e382e37312e302f32342d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          R0AvwieGJV8oiC5cnVlVYeTX5O1+25CitymikcrYfQg=
Subject key identifier:   A5:81:BD:90:25:D2:D3:C7:09:EA:16:38:D1:88:E6:36:90:AD:58:D1
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       3BB7638FAC4FF26818D9BFD17C9D3451B1B0D542
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa
Signing time:             Thu 09 Apr 2026 18:53:03 +0000
ROA not before:           Thu 09 Apr 2026 18:48:03 +0000
ROA not after:            Thu 08 Apr 2027 18:53:03 +0000
asID:                     273663
IP address blocks:        177.8.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:63:8f:ac:4f:f2:68:18:d9:bf:d1:7c:9d:34:51:b1:b0:d5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: Apr  9 18:48:03 2026 GMT
            Not After : Apr  8 18:53:03 2027 GMT
        Subject: CN=A581BD9025D2D3C709EA1638D188E63690AD58D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:ee:0e:13:72:0f:08:e4:0b:c7:01:67:60:
                    9a:04:4e:68:2b:77:09:e8:c8:34:c1:40:cf:f9:40:
                    22:78:4b:d9:e1:d0:54:62:f2:31:77:1c:b9:42:8d:
                    92:3c:b4:cb:c4:db:57:53:88:c6:9f:4c:56:79:ec:
                    4b:2b:c4:5c:95:ee:e5:61:78:da:64:7d:b9:cd:cd:
                    f2:01:ee:b0:1d:fe:82:a4:a2:a8:1c:59:fd:68:be:
                    5a:08:20:66:a7:34:e2:5c:ea:3f:7d:29:0f:18:00:
                    21:5c:a1:bf:02:8a:2e:3b:af:64:5e:8c:d7:44:1e:
                    a3:d5:8e:08:64:a2:3e:b6:9d:ea:64:a0:60:d7:46:
                    e8:d5:b8:0c:f3:2e:e9:69:45:cc:a4:a2:1a:6c:a3:
                    25:6f:9a:e8:77:ff:e8:19:f5:7a:3f:4f:0b:35:b0:
                    35:db:a2:14:76:d5:0b:b4:d9:2f:06:94:f4:a3:cc:
                    5b:ca:1e:af:9c:5c:5b:70:24:d4:af:3b:db:be:58:
                    d0:7b:f0:b9:ba:01:96:85:86:21:94:f4:98:ad:ca:
                    07:5a:f4:0d:27:04:56:c7:ac:06:dd:bf:13:0c:eb:
                    15:8d:ce:1c:78:93:31:19:f2:fe:99:50:75:de:d4:
                    2e:d6:d9:5e:c1:c5:ee:19:c7:39:57:5d:fb:05:9c:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:81:BD:90:25:D2:D3:C7:09:EA:16:38:D1:88:E6:36:90:AD:58:D1
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:45:15:de:d3:e4:32:fe:53:bc:30:20:5e:81:8e:34:6c:46:
         18:05:54:16:96:96:07:25:a0:6b:7d:fa:c6:70:86:bb:a9:77:
         17:b4:1d:4a:62:83:9a:fe:bd:d9:65:49:d9:75:30:ce:36:be:
         50:4c:64:db:00:90:2a:ce:b0:c0:38:6e:74:fd:4e:66:10:4d:
         15:f1:b0:99:70:ad:a1:d3:06:75:27:f0:f4:ce:75:28:72:65:
         e8:48:9d:50:09:09:47:35:57:d4:0f:a4:bd:01:3d:70:86:a4:
         fc:15:ea:8e:18:8a:85:d9:9d:d5:d6:4c:28:71:de:bb:45:e5:
         e2:14:90:08:4a:45:92:da:51:fb:e9:65:67:e8:fb:a6:76:85:
         4f:c0:f7:22:c6:a1:ee:86:15:05:95:47:da:96:12:b8:97:7d:
         7e:21:61:d9:12:08:ea:6a:9c:5a:93:94:e5:eb:0a:26:5d:3a:
         42:1c:e6:04:08:fb:6c:08:50:60:2f:52:38:ee:f1:a1:f5:62:
         80:5a:4e:fe:c1:f4:ea:96:5b:db:04:2c:0d:fe:c7:8f:6e:8f:
         a0:1d:36:40:0d:f6:d2:f5:7c:b7:ac:a8:f2:92:2d:07:21:52:
         8e:cb:bb:87:38:4e:41:53:73:38:ff:d1:54:0d:cc:ef:1f:1b:
         c1:98:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:12:43 2026 by rpki-client