Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32332d3233203d3e20323730383133.roa
File:                     3137372e3132382e3230302e302f32332d3233203d3e20323730383133.roa (raw, json)
Hash identifier:          mGnkWpcZtr5yLSG1qCs87/gDn/SDMh5Qc7cHChGtzNQ=
Subject key identifier:   08:8C:F9:28:58:D9:CA:19:2E:B6:C0:41:89:8B:12:B6:88:4B:A9:05
Certificate issuer:       /CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
Certificate serial:       2FF627C7D32F1E36B2BC59945DD51C5440507726
Authority key identifier: 98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32332d3233203d3e20323730383133.roa
Signing time:             Mon 13 Apr 2026 15:31:18 +0000
ROA not before:           Mon 13 Apr 2026 15:26:18 +0000
ROA not after:            Mon 12 Apr 2027 15:31:18 +0000
asID:                     270813
IP address blocks:        177.128.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl
                          rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f6:27:c7:d3:2f:1e:36:b2:bc:59:94:5d:d5:1c:54:40:50:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
        Validity
            Not Before: Apr 13 15:26:18 2026 GMT
            Not After : Apr 12 15:31:18 2027 GMT
        Subject: CN=088CF92858D9CA192EB6C041898B12B6884BA905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:6b:63:aa:38:34:f8:4d:69:2d:00:87:2d:
                    e1:7b:60:a0:aa:90:5b:df:ff:94:22:b7:79:b1:a5:
                    86:95:89:6c:fb:21:01:88:16:0b:92:13:12:dc:8d:
                    c0:82:38:73:a5:02:59:76:ea:54:da:fd:02:19:c8:
                    ee:e0:9b:67:75:93:f3:e2:b2:05:c0:80:e2:d9:19:
                    96:b6:c0:e3:c2:a7:a4:a6:15:d9:4a:a9:f2:d9:90:
                    46:dd:99:de:8f:7c:66:e8:72:d5:dd:4a:80:49:a7:
                    f6:58:ff:a6:c6:12:77:2f:08:b2:da:46:a0:80:03:
                    a5:a9:24:46:09:0c:71:e7:08:10:09:97:cf:9b:bd:
                    80:c4:26:df:ed:71:f4:5c:3e:63:a8:b7:58:6d:10:
                    2e:2f:23:54:7b:f3:a5:5a:30:53:98:22:a5:57:ff:
                    68:2c:d9:27:b0:9f:f0:31:d5:e7:cc:d0:0e:cb:11:
                    22:89:66:34:bf:60:30:a3:fc:d2:0b:e5:2a:e7:49:
                    ed:47:e1:e9:75:23:88:1f:76:f2:39:3a:9c:f5:24:
                    39:d2:74:31:e5:55:e3:53:47:e2:2d:36:16:62:45:
                    ac:2f:e0:b6:f7:88:ca:7d:42:ba:fc:c7:57:77:89:
                    6e:49:44:b3:e0:3f:2d:57:d2:3b:8f:4e:82:c6:0d:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:F9:28:58:D9:CA:19:2E:B6:C0:41:89:8B:12:B6:88:4B:A9:05
            X509v3 Authority Key Identifier:
                keyid:98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32332d3233203d3e20323730383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:2a:c1:79:32:8a:c2:9e:0f:5b:82:29:c8:32:b0:f7:f9:30:
         3f:e8:2e:c8:48:ec:dc:26:e6:c8:b5:53:fe:93:39:ef:7a:0c:
         97:da:ee:d4:d3:dc:24:c6:76:cc:11:d3:d2:29:41:4d:e2:12:
         c8:ad:19:f7:64:75:26:6e:c7:ea:13:8c:68:9b:ca:6d:19:be:
         c9:af:1d:52:0e:ea:17:83:41:d2:e2:59:df:cc:f7:5f:a9:3a:
         1a:e9:5d:e4:ca:f0:dc:c0:d9:ce:98:be:1c:5d:e8:d1:36:38:
         1b:bd:d0:3f:ba:b4:43:77:a9:f3:be:5a:b7:94:7d:41:91:aa:
         8d:82:db:2c:93:2f:ad:51:ae:4e:20:f9:c1:2f:34:8b:ee:60:
         23:e5:ab:d1:26:06:04:fd:66:dd:32:33:58:c7:df:af:2d:93:
         78:95:b3:d3:f7:c1:1a:47:a8:50:35:ff:09:80:41:4c:1a:77:
         80:d9:9b:b0:ae:7e:d7:07:5e:f4:4e:59:d5:ea:db:f8:a1:fe:
         5d:f9:5e:92:95:bf:31:30:8c:bd:21:62:63:15:be:60:cb:9a:
         0b:d0:11:fd:d3:e2:16:ee:1b:9a:4d:4b:98:c2:5a:19:09:f5:
         a7:04:47:38:ac:42:02:87:15:76:13:e5:02:8c:e4:4c:3f:da:
         3f:4e:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:33:01 2026 by rpki-client