Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          RkF/0IqCbKkJ1NwJUJkmlEgC9+iSIfowc73SRH2EldQ=
Subject key identifier:   6C:34:3B:55:2F:C3:26:3B:A5:D0:64:BC:6C:F6:DE:A1:3C:BB:84:CA
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       1F88C59707C881777D6DE91E9F33BAD1068FFBB7
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:26 +0000
ROA not before:           Thu 16 Apr 2026 22:12:26 +0000
ROA not after:            Thu 15 Apr 2027 22:17:26 +0000
asID:                     262653
IP address blocks:        177.105.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:c5:97:07:c8:81:77:7d:6d:e9:1e:9f:33:ba:d1:06:8f:fb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:26 2026 GMT
            Not After : Apr 15 22:17:26 2027 GMT
        Subject: CN=6C343B552FC3263BA5D064BC6CF6DEA13CBB84CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:d3:25:ea:d7:39:d3:42:ca:db:af:66:bf:
                    d9:af:68:90:bc:be:57:97:00:65:24:18:46:3a:8e:
                    63:a2:32:33:7f:20:35:3e:c1:81:4f:f3:e7:f2:d7:
                    a8:42:36:fe:da:75:77:4f:89:eb:60:1b:22:ec:ab:
                    c5:0f:ec:b4:cf:eb:5d:98:f0:14:bd:d9:c6:c8:ce:
                    80:9c:64:86:76:9d:08:af:a4:1e:a5:f7:af:70:5a:
                    60:af:1a:c9:d1:2c:56:7c:9f:3e:93:7e:cc:3b:4c:
                    4c:9c:e3:aa:dc:49:5b:cc:8e:d9:ea:2e:77:e8:70:
                    ed:62:88:c0:07:33:a0:f7:eb:d8:f8:99:e9:3c:67:
                    82:2e:af:d7:9a:b7:d2:d6:a6:4f:8c:37:47:c1:6d:
                    c9:b5:0b:8d:a3:85:ec:95:b0:06:8c:81:aa:48:ba:
                    4f:07:80:1b:41:46:70:05:c2:68:94:ae:16:0b:46:
                    6f:49:05:c1:a9:77:72:62:f0:4b:c2:13:5e:a5:1c:
                    d9:46:77:a3:79:c7:dc:f0:ce:08:1b:e8:ee:7b:00:
                    06:16:2d:e4:f5:ad:08:a2:90:41:c6:57:7c:58:ca:
                    98:5d:a5:11:54:9c:17:88:e2:2f:98:e5:38:bd:e9:
                    e7:bc:de:c2:2b:ee:fe:b1:6d:fb:ec:f6:5d:80:b8:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:34:3B:55:2F:C3:26:3B:A5:D0:64:BC:6C:F6:DE:A1:3C:BB:84:CA
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:83:67:d1:48:61:29:a0:4d:9c:69:ba:34:4f:4e:17:c3:
         f8:31:aa:4a:67:8a:82:ca:c9:b7:02:cc:93:f5:9d:f6:d8:95:
         58:15:49:66:47:32:1d:19:ea:34:c0:3e:58:69:ca:ff:4d:cd:
         01:49:9c:7e:4c:de:eb:9e:cf:5c:cd:97:37:f2:23:54:a6:ce:
         43:37:10:fa:56:b4:5f:f5:09:52:36:1a:f2:a2:9b:56:93:fb:
         70:9a:d0:df:4c:9d:e4:e1:63:de:e2:53:94:e1:eb:73:16:db:
         45:39:79:25:a8:ff:b1:36:f6:d5:aa:34:37:d5:0e:0b:0e:2e:
         c9:d5:81:c3:d9:ea:a2:1e:3c:4d:50:33:31:1a:4e:91:c0:25:
         a7:01:cd:cd:b8:9d:43:4f:f2:01:0a:05:9c:6c:eb:58:0e:1c:
         72:f6:ed:d8:de:ec:49:8e:2e:75:d4:33:6a:82:48:16:4c:34:
         ef:3f:18:34:42:dc:3b:cd:04:65:8b:b6:81:1a:4b:d7:67:be:
         39:26:e2:38:25:51:6b:81:b2:b0:76:14:60:8f:bb:08:95:44:
         0f:bd:1b:95:eb:09:53:08:2d:8e:48:b1:b3:08:2a:1a:ee:54:
         7e:ed:04:7f:48:db:7d:44:f9:db:68:8f:96:c7:94:d1:be:52:
         e9:6d:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:13:10 2026 by rpki-client