Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa
File:                     3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa (raw, json)
Hash identifier:          04VShdcX1Nv8RAVrA9q+3oo+De5t8bazBRQ2ATg3rX0=
Subject key identifier:   C2:08:BF:0B:B8:E5:92:E4:1D:3C:B1:1E:0F:8A:B2:2B:36:B5:7B:E1
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       719286E715E37530A57F27E861D25FF7810BF071
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa
Signing time:             Fri 27 Feb 2026 19:40:36 +0000
ROA not before:           Fri 27 Feb 2026 19:35:36 +0000
ROA not after:            Fri 26 Feb 2027 19:40:36 +0000
asID:                     270782
IP address blocks:        177.131.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:92:86:e7:15:e3:75:30:a5:7f:27:e8:61:d2:5f:f7:81:0b:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Feb 27 19:35:36 2026 GMT
            Not After : Feb 26 19:40:36 2027 GMT
        Subject: CN=C208BF0BB8E592E41D3CB11E0F8AB22B36B57BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:7c:2b:5b:28:25:6a:29:0d:d3:db:19:64:
                    02:7f:94:b3:c5:7c:66:d7:04:73:02:fc:23:ac:e2:
                    91:db:5f:7c:fc:4d:88:24:3f:4c:91:a5:d8:e5:79:
                    3b:b9:e4:30:40:51:92:52:18:5d:85:a0:2d:e8:d1:
                    c2:c5:97:a1:98:9c:50:57:cf:52:1b:42:d4:ce:43:
                    67:c4:cc:38:de:cc:f0:5a:02:27:72:1a:64:2e:3e:
                    cf:24:8a:94:ec:27:d1:ba:8f:13:0e:eb:48:b2:72:
                    27:72:53:cd:37:94:fe:6e:5d:8a:4c:10:37:72:9b:
                    60:c7:41:6c:e3:fc:21:31:ce:2f:85:77:70:62:02:
                    a5:a5:8b:b6:eb:56:5c:24:0d:99:a0:22:7f:04:42:
                    f3:17:12:88:e5:cd:29:e2:ae:7d:79:71:a9:6c:15:
                    67:c3:47:c6:ea:79:da:23:94:6d:61:0a:86:ba:bc:
                    f2:b6:f6:24:71:60:82:6a:07:ac:ab:f9:28:8c:55:
                    b2:4f:b5:ee:4b:a5:39:ad:77:27:f1:91:b8:15:c8:
                    6c:ff:90:90:f9:bb:38:8d:58:ba:b0:6c:57:1f:f2:
                    91:01:68:3b:dd:d9:be:c7:3d:3c:82:4f:c5:a6:0e:
                    e4:ac:82:98:c7:2e:c1:20:13:81:17:f1:cc:a2:f1:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:BF:0B:B8:E5:92:E4:1D:3C:B1:1E:0F:8A:B2:2B:36:B5:7B:E1
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:9d:44:df:77:5b:b5:3e:df:53:be:69:78:47:6d:b2:49:
         3a:c9:cf:df:1d:30:99:cc:9c:bc:1f:18:05:c4:d0:31:7f:b8:
         05:db:7f:24:52:fc:08:e5:38:18:ae:32:c1:be:ef:66:3d:b9:
         90:6a:16:bd:cd:3d:22:69:08:72:31:f6:bc:99:aa:4c:72:56:
         5e:07:e6:25:c6:cb:e6:fc:88:37:fa:c0:4d:ae:ed:a4:ca:bf:
         ad:cf:35:25:0a:5a:3a:ad:e2:0a:84:a9:e6:d3:8d:5a:12:75:
         68:42:5f:28:c7:c4:36:8b:02:9e:69:73:fb:9c:62:85:f5:92:
         54:7b:56:54:f2:c8:20:57:12:bf:a4:4b:0e:10:40:23:2c:e0:
         f6:ef:49:09:aa:0e:b7:9c:14:3a:24:cb:72:d5:de:8b:a4:35:
         69:e3:8e:c3:97:ce:e8:ea:84:50:d2:89:b5:9f:a3:9b:de:93:
         3a:86:fa:18:db:26:2b:c8:98:27:e7:b6:55:b0:66:1b:d4:eb:
         65:19:81:86:ce:1f:4b:bc:9c:e2:aa:66:99:dd:2e:b0:6d:15:
         28:a8:cf:6a:5d:63:86:27:53:9a:e7:cf:b4:45:ac:a7:26:2d:
         aa:a6:88:ff:4f:7c:44:37:82:e2:82:e9:d9:13:b2:20:a2:7e:
         8f:e8:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:40:57 2026 by rpki-client