Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa
File:                     3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          VCifaQPAXlj3NlqgbL6xZgTlVgWEE64qso/BF7OYPS4=
Subject key identifier:   0A:AB:6E:49:C9:98:BB:D6:E2:F7:CB:FD:47:90:4D:B7:9F:71:1F:59
Certificate issuer:       /CN=75155F6533A280D13727D38801E8DB54640195A7
Certificate serial:       40FA1919593B08166070DB8B757B37467D5BB84C
Authority key identifier: 75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa
Signing time:             Tue 03 Mar 2026 12:59:47 +0000
ROA not before:           Tue 03 Mar 2026 12:54:47 +0000
ROA not after:            Tue 02 Mar 2027 12:59:47 +0000
asID:                     268573
IP address blocks:        177.70.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl
                          rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:19:19:59:3b:08:16:60:70:db:8b:75:7b:37:46:7d:5b:b8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75155F6533A280D13727D38801E8DB54640195A7
        Validity
            Not Before: Mar  3 12:54:47 2026 GMT
            Not After : Mar  2 12:59:47 2027 GMT
        Subject: CN=0AAB6E49C998BBD6E2F7CBFD47904DB79F711F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:40:cb:0e:1b:7c:82:8c:46:0b:92:16:8a:
                    7c:9a:80:bf:10:6b:6c:8b:c7:6b:97:fc:e4:3d:03:
                    11:8f:3f:e3:e0:46:bf:1e:f0:bc:54:73:e5:d7:c2:
                    d4:7f:5a:9b:df:de:47:0d:39:ff:a6:8a:99:e4:56:
                    9d:a0:aa:a0:98:b9:66:3e:02:4f:22:72:ed:bc:32:
                    2e:30:80:dc:f1:9c:d4:ac:74:16:a6:86:fa:2c:f9:
                    71:5e:9b:a9:9c:a8:37:cc:61:5c:21:f3:ab:9d:b0:
                    35:d4:82:bf:ee:03:9e:70:4a:f1:99:10:46:a3:be:
                    fc:8c:0f:5f:44:80:f6:50:cf:80:d1:b2:d7:bf:0c:
                    d2:3e:4c:6e:80:1c:75:bc:88:09:99:da:f1:b7:b9:
                    48:4b:55:50:fc:5b:14:40:50:47:02:93:9f:32:8b:
                    de:be:dc:74:c7:92:b2:a2:d6:52:f6:50:22:bc:d2:
                    d3:0e:85:5a:42:4a:97:2c:7e:ff:cb:5a:31:58:73:
                    c6:11:c9:35:a7:6b:3e:ce:e0:af:ef:02:61:c8:9a:
                    e9:a8:b3:01:1a:7b:81:fe:b4:bb:14:d5:d5:6a:49:
                    d6:66:ce:2f:d6:ec:9c:ec:38:09:aa:ac:63:85:de:
                    65:de:be:2a:d7:8e:00:df:45:21:af:f9:17:ef:b4:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:6E:49:C9:98:BB:D6:E2:F7:CB:FD:47:90:4D:B7:9F:71:1F:59
            X509v3 Authority Key Identifier:
                keyid:75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:56:5e:95:a0:c8:67:6c:44:32:bf:4e:70:39:61:89:62:
         b8:86:d5:7a:be:56:a5:0c:b1:4f:54:ee:7e:a9:de:53:cb:cb:
         c4:ee:3b:9a:61:81:7d:d8:9a:66:db:32:7c:2b:85:1e:d0:4a:
         f6:c6:c6:0a:a3:7e:60:0a:d9:ed:cc:73:03:5a:1c:df:4c:87:
         d2:be:d5:96:a9:80:5a:d0:2b:67:4a:4d:e4:63:7a:ee:3c:3d:
         38:7e:f4:4c:cb:3d:b1:d0:6d:cb:e8:bf:32:71:8c:3f:a5:8b:
         8f:5d:eb:3b:82:b4:ab:e1:7f:18:b8:b9:ed:82:1d:34:52:2d:
         7a:a1:e6:ed:7c:69:4b:8e:71:69:c7:a7:0d:6d:55:2c:d6:bb:
         0c:47:0a:87:38:c8:04:77:61:f3:db:2c:32:15:14:96:79:e6:
         3b:7e:ef:83:06:17:44:b3:4e:54:9b:f1:c2:26:b3:a9:62:45:
         7e:b8:fb:d0:34:97:14:37:8d:8b:1a:1a:37:06:85:5e:2a:7f:
         0c:65:ba:3a:e0:80:5a:90:25:cc:1a:47:1d:11:c6:77:83:73:
         7a:b7:11:d0:8a:81:32:fd:9a:58:87:a0:a6:6a:5f:5a:17:13:
         2a:c5:ad:4e:95:cc:08:4d:0f:32:c4:6c:86:3a:c2:5a:5f:99:
         2b:e4:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:13:22 2026 by rpki-client