Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa
File:                     3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (raw, json)
Hash identifier:          GxYyNGHFcHeqczGZlUN6aNPLbQShcelfX4rZBPQmAbQ=
Subject key identifier:   01:E6:9C:A2:1D:28:3B:4D:B7:05:D9:1B:11:53:8D:40:58:D1:32:F5
Certificate issuer:       /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
Certificate serial:       6C27FB8D441062B899A88BAFA6A6A3134349096A
Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa
Signing time:             Sat 18 Apr 2026 01:56:41 +0000
ROA not before:           Sat 18 Apr 2026 01:51:41 +0000
ROA not after:            Sat 17 Apr 2027 01:56:41 +0000
asID:                     52746
IP address blocks:        177.85.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl
                          rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:27:fb:8d:44:10:62:b8:99:a8:8b:af:a6:a6:a3:13:43:49:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
        Validity
            Not Before: Apr 18 01:51:41 2026 GMT
            Not After : Apr 17 01:56:41 2027 GMT
        Subject: CN=01E69CA21D283B4DB705D91B11538D4058D132F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:f1:a4:1c:1c:55:98:e0:a8:90:a5:eb:58:
                    7f:c4:4b:7f:ec:8b:77:b4:88:9e:07:7e:8d:26:e7:
                    00:e0:f2:50:24:50:03:59:6d:f5:74:df:1e:af:1e:
                    55:d9:89:4a:9b:60:83:81:23:73:1b:96:5d:cb:cd:
                    3c:d3:9a:f1:b5:b0:7b:20:3f:24:76:ba:f9:ca:c7:
                    8e:8a:0f:34:37:ff:ce:ca:c5:f7:0c:36:4e:32:11:
                    f8:cb:a4:28:ef:a2:30:78:73:fa:8e:4e:45:a7:5c:
                    c7:e3:78:3b:a2:e1:b1:4c:f6:1c:ec:7f:fd:04:ba:
                    b9:8b:c5:0d:55:c1:f1:a1:c0:45:f9:23:75:4f:c7:
                    51:fc:56:05:a1:4d:af:86:77:e6:a6:e0:ff:0b:c9:
                    f3:ae:07:d0:08:78:7d:87:f7:6c:b8:64:52:a4:df:
                    1b:72:a3:01:60:73:af:be:8e:5f:a1:cc:4b:72:60:
                    87:95:3f:5e:f4:83:c9:d2:40:29:32:ff:3f:09:d3:
                    d5:ed:cf:26:d6:11:b0:00:04:83:50:eb:64:14:3a:
                    57:18:52:fd:28:41:c9:6b:05:93:10:d2:1b:55:e2:
                    5c:08:c7:58:a7:1f:00:32:15:36:4f:21:c2:7b:09:
                    27:f5:f9:5a:9e:3f:9e:72:38:9a:b0:e4:f0:78:3d:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:9C:A2:1D:28:3B:4D:B7:05:D9:1B:11:53:8D:40:58:D1:32:F5
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:34:b4:eb:b3:15:b1:4b:5d:f1:23:d6:11:7d:d8:9f:e8:21:
         94:f8:78:70:3e:cb:6b:8c:57:11:97:80:1c:85:ee:cd:69:c6:
         12:b6:84:9f:66:03:ba:e4:11:bd:6a:e1:88:04:16:77:9b:e2:
         96:5e:a0:41:1d:f8:d9:be:95:79:a6:25:f1:0b:73:af:5c:22:
         76:c6:e3:9f:7c:bf:c4:09:ab:1a:e5:e8:46:b9:61:d2:e1:8f:
         43:e6:11:b1:9e:46:28:a3:9d:3e:ba:a1:e7:40:48:7b:46:8b:
         48:8a:55:88:5b:7c:7a:18:ad:22:d2:2c:19:59:1b:e4:9e:60:
         ae:95:8e:28:7d:a0:e7:74:12:94:e2:0a:79:b0:ad:71:cb:f6:
         93:0d:57:73:8e:94:2a:00:57:49:d6:f2:bc:a6:a9:2c:86:f0:
         61:16:ab:84:95:23:f9:ce:25:a3:12:e3:85:88:0f:d1:5b:44:
         1e:fa:f3:b4:43:57:d4:9e:b1:17:80:f3:83:13:d6:a3:61:c5:
         4e:e7:e7:59:78:4f:17:c7:16:3c:2d:af:80:4c:a9:c3:a6:aa:
         58:63:a3:4f:ca:82:68:cf:41:de:8b:4d:44:96:74:b5:5c:3e:
         2d:96:11:3f:32:89:51:ed:f4:a7:37:69:2f:d9:d4:d0:85:f4:
         5e:24:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:32:49 2026 by rpki-client