Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa
File:                     3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa (raw, json)
Hash identifier:          rPb0GPGmeql2x25BrJdGLX6bQTADXUOs5vRuXfftSmg=
Subject key identifier:   96:D6:AD:76:50:C9:D0:8B:BF:B8:F8:69:BA:6F:B7:7A:1D:B2:EE:A6
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       67C61CC9885F14C84B699A96A0CF4537F4995143
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa
Signing time:             Mon 02 Mar 2026 18:10:15 +0000
ROA not before:           Mon 02 Mar 2026 18:05:15 +0000
ROA not after:            Mon 01 Mar 2027 18:10:15 +0000
asID:                     53107
IP address blocks:        177.104.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c6:1c:c9:88:5f:14:c8:4b:69:9a:96:a0:cf:45:37:f4:99:51:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar  2 18:05:15 2026 GMT
            Not After : Mar  1 18:10:15 2027 GMT
        Subject: CN=96D6AD7650C9D08BBFB8F869BA6FB77A1DB2EEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:11:18:34:a6:fe:29:9a:05:0b:35:39:77:
                    ee:9b:cf:17:83:c0:99:72:64:2b:d0:c6:ee:9a:89:
                    e8:c0:08:b8:9b:05:d8:28:f4:2f:59:d5:10:ef:21:
                    f2:42:a5:93:9d:72:4c:a4:30:ec:2f:90:58:81:2a:
                    f9:b2:00:81:29:06:ed:0f:e9:11:ef:ae:3a:fa:ab:
                    9c:86:88:2a:1c:15:51:8f:86:31:dc:43:58:73:40:
                    b6:dc:28:7f:35:60:98:e9:4a:6b:54:c3:ad:cc:9d:
                    45:d0:23:ed:d3:cf:6b:6e:a0:76:e9:e8:84:d4:bb:
                    aa:44:d0:0c:32:19:ea:0a:c1:f1:bc:19:5c:3a:d5:
                    f8:64:dd:41:c9:43:77:cf:a7:dd:14:8d:0a:d1:8a:
                    8d:87:07:3f:ff:83:13:22:3d:8f:b6:fc:2c:3e:64:
                    a5:ee:ef:d0:95:9a:e8:b4:7b:4e:d7:ab:43:17:2e:
                    8f:5f:5f:fe:dd:c0:9d:b1:bd:ec:ab:f1:6a:03:f9:
                    db:d7:a0:c3:d0:84:4b:ca:8a:05:d8:91:3b:72:c9:
                    e6:f2:34:c6:f9:dd:fd:80:99:9b:32:04:69:cc:fa:
                    5a:8a:cf:81:b5:d0:22:b3:4c:df:6b:5c:28:6b:15:
                    3d:91:fe:ff:2d:93:bb:45:2c:a8:1f:d4:da:62:ce:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:AD:76:50:C9:D0:8B:BF:B8:F8:69:BA:6F:B7:7A:1D:B2:EE:A6
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:a2:93:9e:39:a2:84:6b:88:62:e8:0e:46:90:51:7e:5d:
         3b:12:9d:84:14:45:f0:5c:ea:a0:18:fd:4b:1b:f8:17:d0:df:
         33:12:f2:3f:cf:94:bb:73:b0:3e:d7:5b:31:0c:c5:d1:9e:2b:
         b1:24:bf:a0:01:5f:71:8e:10:f6:07:85:ee:5c:7b:d6:a6:14:
         0b:e4:86:b8:97:f1:71:ac:33:33:4f:a3:c2:24:5a:d9:42:45:
         4a:7f:7f:cf:2a:7f:65:61:91:65:aa:96:9f:b2:79:26:b7:45:
         fd:77:5f:04:40:e9:d4:0f:ab:68:ff:75:89:e7:eb:95:24:59:
         78:ca:29:44:0b:f8:3d:c4:04:8f:ce:31:80:e4:4d:72:54:a6:
         c6:bf:88:8b:3a:d0:3a:64:2f:21:ec:db:6f:5a:b7:41:96:31:
         84:6f:94:fa:99:bb:a9:64:9f:a2:59:96:3b:bb:d3:9a:69:87:
         b3:ee:5d:2a:30:41:e3:6b:74:c0:f1:ca:46:cd:d2:94:53:52:
         47:f4:d5:9b:aa:f5:a8:08:d7:55:45:4a:8c:32:5a:59:bf:bf:
         96:5e:0b:a6:86:ed:fa:fa:49:16:6c:e9:36:aa:1c:bc:e8:e6:
         2e:70:74:62:68:02:c0:56:03:80:95:6c:73:2a:ee:73:1a:38:
         d7:a6:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:07:09 2026 by rpki-client