Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e372e302f32342d3332203d3e20323633393830.roa
File:                     3139312e33372e372e302f32342d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          ji1W22PzQN7NxLMoagfILKhx0v+OANIlzXlwYzjP0cU=
Subject key identifier:   0B:1B:78:34:49:FC:6E:A5:46:50:FF:34:8E:39:FF:99:73:BB:EA:DC
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       5F77BA27C0B12E38F4D4850768D3C42F31FDDE2C
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e372e302f32342d3332203d3e20323633393830.roa
Signing time:             Thu 19 Mar 2026 17:10:30 +0000
ROA not before:           Thu 19 Mar 2026 17:05:30 +0000
ROA not after:            Thu 18 Mar 2027 17:10:30 +0000
asID:                     263980
IP address blocks:        191.37.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:77:ba:27:c0:b1:2e:38:f4:d4:85:07:68:d3:c4:2f:31:fd:de:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Mar 19 17:05:30 2026 GMT
            Not After : Mar 18 17:10:30 2027 GMT
        Subject: CN=0B1B783449FC6EA54650FF348E39FF9973BBEADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:f2:6a:a1:55:b7:f6:0e:9e:70:86:f1:cd:
                    c4:5e:17:cd:59:11:b2:0e:07:40:85:1f:a2:c9:ea:
                    b5:90:01:f8:4f:55:57:69:e7:0b:60:96:a9:e9:c1:
                    ef:70:e5:c6:5a:8b:c7:0d:8e:8e:70:8a:ee:99:54:
                    23:a8:54:fb:3b:d0:77:cf:12:bd:59:80:49:d8:48:
                    6d:a2:61:f1:fe:ec:fb:6a:85:29:93:a9:3a:84:8f:
                    f3:a8:7d:bc:52:e0:c6:07:b8:b0:4d:41:8a:cf:7d:
                    fb:fc:8f:8d:50:de:f7:02:51:4d:46:38:4b:78:a5:
                    ed:ee:b8:a5:c3:3c:a8:02:69:e7:bc:df:0a:1d:d9:
                    28:11:d2:8f:6e:08:01:f9:0d:c5:6e:e0:5c:72:c0:
                    99:a8:45:6d:02:f8:93:10:1a:f9:8a:1d:16:ab:a4:
                    8d:5a:d4:37:7f:5e:15:da:b9:5d:84:08:fc:51:e0:
                    e2:8e:13:77:03:c8:76:9a:3b:cf:8b:8c:ed:93:75:
                    c7:2b:e2:4e:24:8a:68:30:4f:9b:c7:00:4d:02:7c:
                    d9:2e:bf:8c:80:2c:65:3a:6d:f5:cc:d8:e2:14:7b:
                    f9:cc:30:ad:40:ea:3d:67:81:85:8c:d8:af:0e:4f:
                    ba:de:6a:fb:1c:13:0b:91:fe:60:f0:f3:e7:70:c5:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:78:34:49:FC:6E:A5:46:50:FF:34:8E:39:FF:99:73:BB:EA:DC
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e372e302f32342d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:75:f6:95:03:28:65:6c:ec:03:f3:41:10:90:a8:f5:15:
         5a:5d:94:fc:fc:b6:aa:47:d4:89:bf:f8:eb:5b:49:76:0d:9f:
         47:5d:a0:bd:c9:9a:95:d8:d8:82:a7:ec:00:2b:49:bb:b6:7a:
         33:45:bd:41:09:82:e7:da:d0:6f:2e:2c:fd:63:51:c6:73:b4:
         fc:e5:d7:fb:d0:9b:00:ce:fe:74:97:79:49:eb:54:37:43:a0:
         bc:80:5e:c5:79:6c:62:28:e2:78:b6:8b:bd:d5:ba:c8:e0:99:
         b6:82:51:87:03:e4:d9:e2:b0:24:95:74:d6:4b:c9:70:0b:d7:
         53:06:0a:1f:1f:fd:09:0e:b7:18:b4:ce:b2:07:43:cb:c5:34:
         4f:fd:00:ed:24:c7:52:de:54:99:b1:c7:be:df:23:0e:d7:4b:
         65:b1:b1:54:65:eb:bd:0f:48:57:3c:bf:1e:f5:75:08:0e:bf:
         10:81:c4:52:f0:a4:04:15:7d:56:45:ab:a3:a9:ea:e5:c4:1e:
         af:dd:4e:3e:6a:82:8c:81:31:bf:60:ad:06:14:ab:71:50:7f:
         3c:da:9d:2f:42:7e:0b:56:51:cb:87:59:c3:74:a4:ad:dd:19:
         65:67:cf:cb:fd:0d:32:18:22:2e:ef:6a:63:30:06:8d:d6:ca:
         11:bb:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:55:16 2026 by rpki-client