Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34342e302f32322d3234203d3e203532353939.roa
File:                     3137372e3132342e34342e302f32322d3234203d3e203532353939.roa (raw, json)
Hash identifier:          nDcsaC8/b1LeFJoDjTXKts7Nh1h16piMzvfm/CC1reM=
Subject key identifier:   D2:39:5F:07:0E:53:62:32:9A:6D:28:92:C1:AE:A3:32:BF:CD:FA:3F
Certificate issuer:       /CN=9CE419EFBCFDCE6FB074E7287D4774A9026E366C
Certificate serial:       5B9405EDFB116BBC6552224D087C5609F7907258
Authority key identifier: 9C:E4:19:EF:BC:FD:CE:6F:B0:74:E7:28:7D:47:74:A9:02:6E:36:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34342e302f32322d3234203d3e203532353939.roa
Signing time:             Wed 15 Apr 2026 18:37:06 +0000
ROA not before:           Wed 15 Apr 2026 18:32:06 +0000
ROA not after:            Wed 14 Apr 2027 18:37:06 +0000
asID:                     52599
IP address blocks:        177.124.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.crl
                          rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:94:05:ed:fb:11:6b:bc:65:52:22:4d:08:7c:56:09:f7:90:72:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE419EFBCFDCE6FB074E7287D4774A9026E366C
        Validity
            Not Before: Apr 15 18:32:06 2026 GMT
            Not After : Apr 14 18:37:06 2027 GMT
        Subject: CN=D2395F070E5362329A6D2892C1AEA332BFCDFA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:9c:fd:eb:48:46:bb:58:15:89:bd:f4:9d:
                    12:e6:c5:3c:0f:20:4d:cf:ec:60:db:4c:1f:a2:31:
                    c3:81:67:e7:c5:0c:88:be:44:50:fd:ca:42:fc:6d:
                    a0:23:ab:ac:fc:42:29:3f:b0:a3:fc:98:b4:b4:4c:
                    73:aa:ea:b5:ae:eb:db:d3:58:af:68:e5:c9:85:9c:
                    45:51:e5:2c:48:5b:d7:87:ee:69:88:44:98:37:99:
                    57:48:13:58:36:11:87:e8:79:8b:cc:da:6c:62:44:
                    b4:aa:68:a5:74:92:8f:59:31:f1:ef:1f:29:68:be:
                    18:9f:e2:45:39:7b:d9:59:64:6c:13:0c:89:b9:aa:
                    23:24:10:cc:9f:07:fe:3e:6e:1d:2d:3b:29:ba:e7:
                    49:0d:3a:35:d6:22:00:61:2c:cb:77:c9:a7:6a:ae:
                    d7:91:37:79:69:ba:fd:f7:0c:65:ba:c9:27:dc:3e:
                    dd:7c:4f:09:6c:2b:b4:ec:b8:b0:75:83:a7:40:96:
                    c4:50:0d:2f:b4:75:80:5d:11:db:b4:1f:b3:92:b2:
                    b5:20:19:5d:6e:0f:70:3f:a4:6d:73:95:dd:24:6b:
                    c0:f2:48:09:75:b2:8d:2a:9f:58:f7:d6:0d:ac:40:
                    b2:cf:fc:44:65:f1:d7:1f:96:57:42:56:4b:9a:ad:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:5F:07:0E:53:62:32:9A:6D:28:92:C1:AE:A3:32:BF:CD:FA:3F
            X509v3 Authority Key Identifier:
                keyid:9C:E4:19:EF:BC:FD:CE:6F:B0:74:E7:28:7D:47:74:A9:02:6E:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34342e302f32322d3234203d3e203532353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:3c:80:f1:0a:6b:c0:b7:25:25:cb:21:bd:d1:69:15:f8:58:
         e7:9c:77:ca:6e:0c:79:fa:78:3b:5e:a9:1f:69:e0:46:f2:0e:
         9c:d2:38:20:f1:be:ce:b3:3f:ac:e1:23:52:3b:c0:86:73:f2:
         2c:73:5a:00:09:77:f1:60:1d:80:f2:2a:9a:31:7f:90:73:b4:
         60:6a:7e:2b:1e:12:3c:01:bd:8e:cb:63:35:51:13:c9:5c:b4:
         73:ed:00:46:71:f3:03:d5:3a:74:d3:4d:15:c1:05:a6:95:df:
         df:d2:cf:67:6a:da:9a:d4:ae:4a:7a:11:df:85:17:47:a1:01:
         99:c1:7f:b5:00:33:a0:d2:f3:db:c2:fe:a4:09:69:78:3e:f5:
         5e:a4:a1:03:d8:3d:2f:4b:f7:75:39:86:a9:43:74:32:68:33:
         fe:58:d8:e2:46:0a:01:2b:7a:e3:a0:24:1c:9a:8a:3c:db:0f:
         98:6c:a8:b3:91:8c:ec:a4:92:79:8f:d7:06:88:86:c4:34:28:
         f2:20:67:08:c5:a0:12:bd:76:b9:12:66:1f:b3:2f:da:2b:ec:
         23:9c:23:e5:b5:a8:f1:f9:c1:08:50:91:79:8a:17:14:a2:dd:
         ba:cd:71:d2:8c:e5:9d:90:b6:81:32:b8:f3:d3:74:e2:ed:52:
         1d:d7:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:53 2026 by rpki-client