Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa
File:                     3137372e32302e302e302f31372d3234203d3e203533323339.roa (raw, json)
Hash identifier:          4ZMJOz+KYzmyiSiyUNRIW8EJRIH9zG5j/jDiudiLtBU=
Subject key identifier:   FD:72:77:47:A6:6E:93:E5:1D:9C:A8:BF:50:C4:2C:E2:A0:A7:17:8B
Certificate issuer:       /CN=B67EED1070B137A0ECAE6D13ADD58515E2FC72DB
Certificate serial:       77BB592D662060E71DD33C1E9AB60E7560C7015F
Authority key identifier: B6:7E:ED:10:70:B1:37:A0:EC:AE:6D:13:AD:D5:85:15:E2:FC:72:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa
Signing time:             Mon 01 Jun 2026 17:42:00 +0000
ROA not before:           Mon 01 Jun 2026 17:37:00 +0000
ROA not after:            Mon 31 May 2027 17:42:00 +0000
asID:                     53239
IP address blocks:        177.20.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:59:2d:66:20:60:e7:1d:d3:3c:1e:9a:b6:0e:75:60:c7:01:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67EED1070B137A0ECAE6D13ADD58515E2FC72DB
        Validity
            Not Before: Jun  1 17:37:00 2026 GMT
            Not After : May 31 17:42:00 2027 GMT
        Subject: CN=FD727747A66E93E51D9CA8BF50C42CE2A0A7178B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:96:da:0c:93:8e:6a:68:e9:a1:2c:aa:f5:
                    e2:9c:0c:1d:89:4d:c0:a6:b9:fe:e1:e4:92:e6:38:
                    5f:06:60:61:40:46:5f:6c:11:68:1c:6e:56:e5:3e:
                    0d:49:9e:40:23:e7:85:7d:69:48:f7:0f:20:4f:cf:
                    ba:ff:71:22:e2:ff:c8:c2:16:0c:47:5b:1d:3a:9b:
                    3c:0a:44:4c:94:e1:0d:2a:bc:11:41:a0:b6:0d:74:
                    22:18:e3:5e:78:1d:3c:8e:00:27:9a:7c:de:46:47:
                    85:68:94:27:82:84:f6:1f:c9:8d:d5:3f:05:01:6a:
                    f0:74:49:b4:62:95:67:ea:52:99:d3:ba:60:65:d6:
                    da:b3:d3:60:4e:da:b7:a2:d9:08:4b:b3:6e:b3:59:
                    8c:72:5b:c6:6a:cf:cf:56:1c:e4:07:a4:c6:74:d6:
                    35:66:45:ce:d5:66:ca:04:93:c4:35:db:c7:39:29:
                    58:72:04:de:0b:35:db:a9:06:60:e3:90:64:3d:25:
                    69:bf:67:37:b3:74:d3:fd:69:43:0f:cf:b2:d5:b4:
                    44:f9:87:aa:e5:7c:22:8c:5f:cc:1a:3a:da:08:bd:
                    8f:19:7a:30:03:e8:59:83:6b:f8:a9:f8:2e:ca:2f:
                    ba:bd:26:2f:95:a1:e2:cf:5c:a6:9f:65:fe:e3:37:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:77:47:A6:6E:93:E5:1D:9C:A8:BF:50:C4:2C:E2:A0:A7:17:8B
            X509v3 Authority Key Identifier:
                keyid:B6:7E:ED:10:70:B1:37:A0:EC:AE:6D:13:AD:D5:85:15:E2:FC:72:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:fd:67:70:30:23:19:76:d6:d5:b0:8d:01:86:de:e9:08:
         18:8c:a4:32:f8:27:6c:21:4c:a3:5e:d4:f2:45:ab:00:c5:77:
         61:68:6b:76:2d:7d:77:3a:06:bd:5f:b5:e8:6b:1a:35:dc:5a:
         b4:54:3b:cd:1b:13:32:8f:45:ca:7a:11:73:f2:ad:29:53:00:
         56:21:55:8a:dd:80:4b:65:86:c0:0a:85:7a:32:e2:24:f0:72:
         bc:0f:16:d1:12:4a:ed:52:57:ba:3f:a8:8c:53:b7:57:64:5d:
         cf:f3:2f:ca:73:b1:77:12:d5:fb:0c:a8:54:58:4c:7a:04:f6:
         ea:42:b6:f7:73:b7:f8:7e:2a:4d:99:f7:74:87:71:f3:9e:f3:
         75:f5:0b:d6:c4:75:58:ea:fe:f5:ba:a5:3a:b1:4d:d2:e4:f4:
         ed:58:fc:43:53:f5:1c:40:ba:5f:39:b4:60:79:ec:07:13:cc:
         c3:56:29:06:fd:7e:85:79:3d:da:7c:64:65:ee:de:0b:7e:16:
         cd:b0:e8:54:91:46:3d:59:ca:41:78:17:5c:11:8a:3f:dc:54:
         dd:7d:d2:24:11:36:49:ed:ec:dc:d9:b2:0c:01:cd:da:08:af:
         e6:31:33:8f:96:a5:4e:a9:45:72:02:16:2d:50:00:81:67:cb:
         ec:61:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:39:23 2026 by rpki-client