Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          t6HcZEMUOIhsT8pc5ojM3EmaTxbhAso9liuxLvxD0nw=
Subject key identifier:   B3:DA:2B:61:86:F4:8A:F8:A5:46:57:F9:0F:34:E4:5A:B9:AF:81:43
Certificate issuer:       /CN=6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1
Certificate serial:       0AB9B465E521BC1F7D99DB2425415A241C65D3A6
Authority key identifier: 6E:53:9B:E4:DE:8B:26:54:D8:9D:16:16:FB:FB:36:33:CB:CC:18:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time:             Mon 25 May 2026 17:24:29 +0000
ROA not before:           Mon 25 May 2026 17:19:29 +0000
ROA not after:            Mon 24 May 2027 17:24:29 +0000
asID:                     263948
IP address blocks:        177.67.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 07:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b9:b4:65:e5:21:bc:1f:7d:99:db:24:25:41:5a:24:1c:65:d3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1
        Validity
            Not Before: May 25 17:19:29 2026 GMT
            Not After : May 24 17:24:29 2027 GMT
        Subject: CN=B3DA2B6186F48AF8A54657F90F34E45AB9AF8143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:80:62:0f:e6:aa:a9:55:b7:d9:65:fa:ca:
                    f4:e2:a2:43:2d:4c:d7:15:bd:0d:d2:de:97:a5:7d:
                    26:0f:f9:cf:99:fc:4f:83:ef:2b:4f:b6:d9:33:a5:
                    7e:68:a3:ff:89:05:82:2b:58:ee:6d:bf:a8:57:21:
                    cc:5a:04:45:53:1c:82:fe:69:7f:bf:13:57:99:81:
                    28:2b:61:9d:70:72:2e:14:fc:72:4b:41:92:f4:e6:
                    45:f8:b1:00:60:27:c3:fe:44:a0:78:3e:f2:44:4b:
                    56:a9:42:48:2b:a8:7e:0e:6e:ea:56:70:d1:74:c8:
                    5b:47:ea:d6:02:a1:e5:95:3b:36:4c:c2:7a:06:85:
                    8e:c1:ca:ea:06:01:22:bf:6d:5b:c4:a0:ee:59:16:
                    e4:4d:04:92:c5:62:ba:94:02:e1:cb:99:cb:5a:d3:
                    0b:c6:5a:bb:0a:ae:46:62:ae:ee:e1:23:06:a7:a8:
                    ce:79:d7:01:08:be:b5:74:95:1e:d5:96:e8:36:36:
                    10:bd:2b:df:5b:ef:45:96:09:c7:67:f6:9d:2f:b1:
                    3e:4d:5e:67:af:17:3b:87:85:87:e0:3c:c1:19:41:
                    c8:8e:00:43:44:05:81:b3:78:8c:04:45:c7:cd:a2:
                    8e:ce:29:59:96:6e:d6:59:3c:4e:92:60:6f:05:5d:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:2B:61:86:F4:8A:F8:A5:46:57:F9:0F:34:E4:5A:B9:AF:81:43
            X509v3 Authority Key Identifier:
                keyid:6E:53:9B:E4:DE:8B:26:54:D8:9D:16:16:FB:FB:36:33:CB:CC:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E539BE4DE8B2654D89D1616FBFB3633CBCC18D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:d7:4a:86:6f:37:e3:19:a2:56:0b:ac:c1:13:c8:4d:39:
         1e:7b:59:72:ff:db:d5:21:9e:47:98:7d:38:ca:3b:fd:10:98:
         c7:75:8a:55:2b:1c:90:cc:57:9f:5a:5f:94:66:b3:c0:46:95:
         c9:33:92:2a:ef:52:2e:6a:fc:5b:c0:b6:62:8c:56:6c:27:d6:
         fc:6d:ca:9a:d8:42:f3:a5:1f:a3:3b:82:4e:1a:bb:6d:5e:1f:
         95:aa:df:b9:b1:0e:f9:a3:27:87:63:46:d0:8d:ff:b8:d6:60:
         6c:4f:7e:33:69:4b:fa:93:ce:d8:5d:3c:8f:57:af:c0:fa:06:
         0c:97:e0:92:7f:38:9d:7b:1c:95:36:8e:19:b4:4b:14:27:9c:
         17:6b:ac:00:6e:37:bc:c1:8b:31:29:f4:27:99:bc:10:d3:17:
         7d:a2:3f:b3:33:f9:50:c5:ea:6d:3a:6e:6e:6b:56:8d:01:9b:
         82:f2:c9:3a:b9:6d:d4:69:41:b2:bf:66:cb:b8:18:70:7a:51:
         17:39:86:9d:1a:db:32:85:44:3a:42:68:95:25:99:37:90:e0:
         cd:f8:f6:2c:88:18:4a:04:3d:6c:6d:40:b5:b8:d7:19:88:38:
         cc:8b:8c:0a:ad:b0:c8:c7:27:27:9b:e9:82:15:af:f3:4e:b0:
         de:fd:c6:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCrm0ZeUhvB99mdskJUFaJBxl06YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU1MzlCRTRERThCMjY1NEQ4OUQxNjE2RkJGQjM2MzND
QkNDMThEMTAeFw0yNjA1MjUxNzE5MjlaFw0yNzA1MjQxNzI0MjlaMDMxMTAvBgNV
BAMTKEIzREEyQjYxODZGNDhBRjhBNTQ2NTdGOTBGMzRFNDVBQjlBRjgxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oIBiD+aqqVW32WX6yvTiokMt
TNcVvQ3S3pelfSYP+c+Z/E+D7ytPttkzpX5oo/+JBYIrWO5tv6hXIcxaBEVTHIL+
aX+/E1eZgSgrYZ1wci4U/HJLQZL05kX4sQBgJ8P+RKB4PvJES1apQkgrqH4ObupW
cNF0yFtH6tYCoeWVOzZMwnoGhY7ByuoGASK/bVvEoO5ZFuRNBJLFYrqUAuHLmcta
0wvGWrsKrkZiru7hIwanqM551wEIvrV0lR7Vlug2NhC9K99b70WWCcdn9p0vsT5N
XmevFzuHhYfgPMEZQciOAENEBYGzeIwERcfNoo7OKVmWbtZZPE6SYG8FXY0DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs9orYYb0ivilRlf5DzTkWrmvgUMwHwYDVR0j
BBgwFoAUblOb5N6LJlTYnRYW+/s2M8vMGNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1SS1REUUJlR1ZFREdHeWpXaTh0VldMWGpVVHRzamVIbUR2Wmg0UkpF
aXEvMC82RTUzOUJFNERFOEIyNjU0RDg5RDE2MTZGQkZCMzYzM0NCQ0MxOEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFNTM5QkU0REU4QjI2NTRE
ODlEMTYxNkZCRkIzNjMzQ0JDQzE4RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtUktURFFCZUdWRURHR3lqV2k4dFZXTFhqVVR0c2plSG1EdlpoNFJKRWlxLzAv
MzEzNzM3MmUzNjM3MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUMmMA0GCSqGSIb3DQEBCwUAA4IBAQBt9tdKhm83
4xmiVguswRPITTkee1ly/9vVIZ5HmH04yjv9EJjHdYpVKxyQzFefWl+UZrPARpXJ
M5Iq71IuavxbwLZijFZsJ9b8bcqa2ELzpR+jO4JOGrttXh+Vqt+5sQ75oyeHY0bQ
jf+41mBsT34zaUv6k87YXTyPV6/A+gYMl+CSfzidexyVNo4ZtEsUJ5wXa6wAbje8
wYsxKfQnmbwQ0xd9oj+zM/lQxeptOm5ua1aNAZuC8sk6uW3UaUGyv2bLuBhwelEX
OYadGtsyhUQ6QmiVJZk3kODN+PYsiBhKBD1sbUC1uNcZiDjMi4wKrbDIxycnm+mC
Fa/zTrDe/cYY
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:00 2026 by rpki-client