Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3234203d3e203532353634.roa
File:                     3137372e38352e3135362e302f32322d3234203d3e203532353634.roa (raw, json)
Hash identifier:          MUuoa9gehQT19DCmTzUoRx5EU8gV0zLrhopS++VbER0=
Subject key identifier:   2A:71:12:A8:34:D8:C9:45:04:A5:03:12:FC:8D:40:67:E9:20:5D:E6
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       5152AD94429555FA82A92352BE2B88402305DBF2
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3234203d3e203532353634.roa
Signing time:             Sat 18 Apr 2026 00:56:41 +0000
ROA not before:           Sat 18 Apr 2026 00:51:41 +0000
ROA not after:            Sat 17 Apr 2027 00:56:41 +0000
asID:                     52564
IP address blocks:        177.85.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:ad:94:42:95:55:fa:82:a9:23:52:be:2b:88:40:23:05:db:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: Apr 18 00:51:41 2026 GMT
            Not After : Apr 17 00:56:41 2027 GMT
        Subject: CN=2A7112A834D8C94504A50312FC8D4067E9205DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:a6:13:8a:83:32:b7:2c:d4:31:3b:3b:6f:
                    06:2c:2a:2b:82:c4:83:f5:dd:e0:38:d2:e6:c8:d0:
                    92:09:13:bf:ca:f4:cb:55:b8:7a:a8:7e:b7:56:ad:
                    9a:8f:0a:bb:6d:b7:d0:e9:c9:cb:d4:09:08:25:67:
                    0c:80:00:49:ad:8d:45:42:40:6f:8a:9f:1a:90:63:
                    c8:2f:da:6c:93:67:a2:9a:e8:8d:09:e1:d7:1a:15:
                    c5:d5:1a:5a:68:d5:1a:d0:0a:0d:07:41:15:22:79:
                    03:fd:3f:96:8f:1f:d2:eb:ea:2b:6b:6d:bd:cc:6e:
                    fb:79:26:e8:e2:b1:32:bc:5f:a8:ba:2f:74:cb:46:
                    c7:5e:01:c9:a0:04:d9:38:a9:4c:fb:e1:d6:81:8a:
                    e9:86:8a:78:be:cf:2e:7b:cd:8d:2c:47:62:f4:97:
                    42:f9:ab:54:48:93:48:34:cb:ee:70:7d:61:e2:1a:
                    90:7e:ca:63:f9:a1:61:42:ff:0b:89:65:4d:a8:23:
                    11:ec:ca:63:d1:0d:77:26:e3:43:53:06:2a:52:65:
                    27:fd:7a:11:3e:7e:6a:8c:b0:72:e1:0d:2c:1a:a6:
                    32:0b:9e:1a:d0:12:af:9b:6e:91:75:e0:a9:25:1e:
                    1f:5d:28:1e:2b:28:82:22:9a:19:43:6d:f3:54:69:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:12:A8:34:D8:C9:45:04:A5:03:12:FC:8D:40:67:E9:20:5D:E6
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:68:b2:83:9a:2a:cc:ff:85:e7:db:08:30:23:40:06:be:
         ea:60:90:29:84:26:ed:bd:a9:0c:77:a8:aa:bb:81:a8:ef:d6:
         bc:03:46:fa:0e:be:4e:86:23:3b:cb:c6:a4:73:f4:30:ba:5c:
         95:fa:0a:b2:60:cc:3e:6d:d2:b8:19:83:55:69:60:01:c7:95:
         62:25:a1:24:c5:08:cf:a4:7f:5b:65:0a:c5:f2:5b:17:9c:92:
         b4:27:33:a5:06:7e:ea:32:5a:b1:95:87:d7:51:9e:03:61:50:
         09:91:17:fc:d8:fa:df:46:0f:35:62:8f:79:87:c3:98:ad:7a:
         b9:02:42:1c:63:b9:99:ea:5a:6a:46:88:7b:24:ac:8d:4b:38:
         3c:dd:0f:1f:14:24:f4:fc:29:3c:0f:88:a9:c3:79:ca:a9:fd:
         fd:ab:f1:35:02:0a:26:1d:8b:7a:63:3c:93:1b:b3:25:cd:5e:
         11:ea:07:71:f1:2e:06:c6:ed:17:7f:65:3d:17:00:c7:16:7a:
         a4:2b:5c:d5:db:35:36:f3:3e:c8:df:4e:6c:9b:2c:28:9d:c9:
         45:c5:98:bf:88:f2:e9:f8:8f:7c:55:e2:48:39:71:6b:e4:e7:
         59:bc:c4:ac:98:db:c6:ef:3f:f5:c9:4d:b2:40:61:a2:3f:98:
         2f:6b:b1:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUVKtlEKVVfqCqSNSviuIQCMF2/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNENDNGRUFERUQ1OTIxNTZEMjlDNjdDQ0MxM0EwMzA1
NDFDRDI1QTAeFw0yNjA0MTgwMDUxNDFaFw0yNzA0MTcwMDU2NDFaMDMxMTAvBgNV
BAMTKDJBNzExMkE4MzREOEM5NDUwNEE1MDMxMkZDOEQ0MDY3RTkyMDVERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGKYTioMytyzUMTs7bwYsKiuC
xIP13eA40ubI0JIJE7/K9MtVuHqofrdWrZqPCrttt9DpycvUCQglZwyAAEmtjUVC
QG+KnxqQY8gv2myTZ6Ka6I0J4dcaFcXVGlpo1RrQCg0HQRUieQP9P5aPH9Lr6itr
bb3Mbvt5JujisTK8X6i6L3TLRsdeAcmgBNk4qUz74daBiumGini+zy57zY0sR2L0
l0L5q1RIk0g0y+5wfWHiGpB+ymP5oWFC/wuJZU2oIxHsymPRDXcm40NTBipSZSf9
ehE+fmqMsHLhDSwapjILnhrQEq+bbpF14KklHh9dKB4rKIIimhlDbfNUaWTHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKnESqDTYyUUEpQMS/I1AZ+kgXeYwHwYDVR0j
BBgwFoAUc9Q/6t7VkhVtKcZ8zBOgMFQc0lowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXly
QkwvMC83M0Q0M0ZFQURFRDU5MjE1NkQyOUM2N0NDQzEzQTAzMDU0MUNEMjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczRDQzRkVBREVENTkyMTU2
RDI5QzY3Q0NDMTNBMDMwNTQxQ0QyNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLZFhiZ2RwRnh6MUJTdUJBMnRnbVMzTWdGU0FOWU5XV3h5ZlFFNkF5ckJMLzAv
MzEzNzM3MmUzODM1MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVWcMA0GCSqGSIb3DQEBCwUAA4IBAQBx62iyg5oq
zP+F59sIMCNABr7qYJAphCbtvakMd6iqu4Go79a8A0b6Dr5OhiM7y8akc/QwulyV
+gqyYMw+bdK4GYNVaWABx5ViJaEkxQjPpH9bZQrF8lsXnJK0JzOlBn7qMlqxlYfX
UZ4DYVAJkRf82PrfRg81Yo95h8OYrXq5AkIcY7mZ6lpqRoh7JKyNSzg83Q8fFCT0
/Ck8D4ipw3nKqf39q/E1AgomHYt6YzyTG7MlzV4R6gdx8S4Gxu0Xf2U9FwDHFnqk
K1zV2zU28z7I305smywonclFxZi/iPLp+I98VeJIOXFr5OdZvMSsmNvG7z/1yU2y
QGGiP5gva7ET
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:29:48 2026 by rpki-client