Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa
File:                     3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (raw, json)
Hash identifier:          BqQT2kU4D3+s8KkNFa26sBKTLjpzY4/jMKPYY5+ym3M=
Subject key identifier:   BF:76:23:D3:47:5B:50:E7:DB:18:B5:5A:33:B8:A5:66:1B:37:95:17
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       7FBEEC374FE8AC2AB0AAB06E1AC5BC68BED0EDD4
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa
Signing time:             Fri 10 Apr 2026 17:14:56 +0000
ROA not before:           Fri 10 Apr 2026 17:09:56 +0000
ROA not after:            Fri 09 Apr 2027 17:14:56 +0000
asID:                     270951
IP address blocks:        177.36.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 04:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:ec:37:4f:e8:ac:2a:b0:aa:b0:6e:1a:c5:bc:68:be:d0:ed:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: Apr 10 17:09:56 2026 GMT
            Not After : Apr  9 17:14:56 2027 GMT
        Subject: CN=BF7623D3475B50E7DB18B55A33B8A5661B379517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:cd:fc:d8:0e:8c:f5:c9:75:40:28:e0:46:
                    05:cb:0e:56:57:f4:76:60:d3:c3:62:c0:24:b3:fb:
                    64:72:36:93:65:d9:3a:bf:24:db:d6:38:81:07:1e:
                    99:fd:9f:d7:6e:e0:e0:8e:82:1e:5a:76:b3:82:61:
                    3b:f2:80:41:91:af:18:03:63:9a:f5:c5:31:ec:93:
                    6e:73:cf:e0:a7:64:e5:f8:26:20:bb:aa:09:c6:0c:
                    f5:e2:27:a5:0f:12:c4:cc:a1:d4:dc:53:c9:eb:b4:
                    fc:31:93:ba:86:5d:13:97:00:f8:78:35:d8:54:4f:
                    27:90:20:ec:83:0f:ee:b8:82:d2:54:2d:dd:36:12:
                    f8:32:82:0e:ec:bc:f3:38:3e:fc:f2:23:79:c7:36:
                    e7:56:91:d6:12:8d:00:fc:a5:fe:fb:ea:65:d3:41:
                    9b:3b:2c:f9:4d:87:fd:88:f4:13:c9:54:49:9e:5d:
                    6e:69:6d:e4:d6:0f:8f:78:00:ec:cc:1c:17:90:46:
                    4e:d4:99:9c:f7:a0:58:dc:a3:b4:37:d0:ee:39:ee:
                    3b:a3:f6:05:f9:74:58:a6:72:e7:e7:15:9d:22:dc:
                    63:01:b4:12:47:3b:f2:90:63:3a:ef:2f:85:30:53:
                    0e:1e:6a:b5:23:a7:3e:87:87:1a:17:dc:f9:d6:d3:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:23:D3:47:5B:50:E7:DB:18:B5:5A:33:B8:A5:66:1B:37:95:17
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:a1:47:ba:e0:f4:2f:80:ba:8d:a7:00:e2:dc:db:ca:6a:
         b6:09:44:75:b7:c1:09:62:e1:59:3a:92:c7:fd:cf:85:c1:50:
         62:6e:44:d6:7a:45:dd:e8:43:9e:22:f1:2f:ab:6d:37:a7:bf:
         e6:8e:ce:b1:ec:99:fc:1c:53:c3:c1:60:58:4a:a5:75:e4:8b:
         12:fa:87:e2:9f:d2:84:dc:0c:b9:27:c2:a7:e6:31:81:0a:85:
         38:36:9e:ac:a2:df:5d:05:76:14:71:26:a1:c6:b5:89:09:1c:
         82:58:e4:00:31:f6:94:91:16:83:79:c9:34:30:d5:db:a4:10:
         e5:ad:b7:e1:21:c0:9d:29:e2:53:e0:b5:71:98:06:35:52:d9:
         c9:11:76:56:1e:8f:ae:cf:b2:a1:04:6f:b1:69:cd:d2:c6:3e:
         b1:d9:69:85:88:30:c5:01:75:b0:ba:b7:bb:09:00:f6:b6:0f:
         f2:d6:98:08:f7:77:bc:e4:eb:02:94:d9:e4:cd:01:81:44:c4:
         ea:14:ac:51:be:dd:ac:43:6c:b2:29:86:3e:51:c8:08:8d:b4:
         54:c0:4b:04:24:52:20:da:ae:58:97:1a:df:d7:bf:e0:00:ae:
         c1:b6:b2:85:da:c8:9c:09:e0:31:e7:e6:ac:64:ce:ad:55:95:
         6a:d4:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:12:02 2026 by rpki-client