Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e36372e34302e302f32312d3332203d3e203532393536.roa
File:                     3137372e36372e34302e302f32312d3332203d3e203532393536.roa (raw, json)
Hash identifier:          hUguMml//JHW59W37rRMCABgZ1NFopZex2An3eobsGE=
Subject key identifier:   DC:CE:22:C4:6F:F1:8C:F3:B0:0C:86:3E:B8:3A:94:4B:5F:C0:20:70
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       1DAFBB8C2398352308BFCBD2D26F54F273FB3C68
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e36372e34302e302f32312d3332203d3e203532393536.roa
Signing time:             Wed 06 May 2026 16:07:34 +0000
ROA not before:           Wed 06 May 2026 16:02:34 +0000
ROA not after:            Wed 05 May 2027 16:07:34 +0000
asID:                     52956
IP address blocks:        177.67.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:af:bb:8c:23:98:35:23:08:bf:cb:d2:d2:6f:54:f2:73:fb:3c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: May  6 16:02:34 2026 GMT
            Not After : May  5 16:07:34 2027 GMT
        Subject: CN=DCCE22C46FF18CF3B00C863EB83A944B5FC02070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:72:ae:b5:b6:8c:38:4d:48:93:7e:b3:80:
                    8c:7c:9a:8a:0e:10:e9:9f:81:29:1c:97:01:49:88:
                    b3:81:f6:a4:30:ee:cf:76:49:df:2f:9d:36:9d:3f:
                    7f:42:c4:eb:76:a6:ef:2e:cf:19:a6:8d:24:9e:c4:
                    b8:88:47:fe:16:db:b3:80:af:5c:a2:2f:84:42:f4:
                    aa:22:d6:1f:9e:14:4b:f6:41:df:2c:b6:d2:c3:4b:
                    c4:7a:a9:57:23:93:92:94:ba:b2:1c:83:8e:2e:fb:
                    b0:ae:44:39:70:15:17:ef:aa:49:16:cf:a2:72:f5:
                    c5:1e:62:a8:1f:60:1d:6f:83:ed:1d:25:10:df:17:
                    ef:4f:ea:88:93:1a:fa:db:96:b1:30:2e:5a:6f:49:
                    ad:cc:0f:0f:e1:c2:0d:9f:62:2f:02:f3:98:d8:5b:
                    5c:58:02:c3:32:c1:40:60:d7:c3:94:94:f4:7b:e2:
                    12:bf:c5:a9:fc:78:ea:ac:62:f5:52:d6:d4:ee:63:
                    3e:f9:e4:d1:e1:c1:2a:94:e9:d2:92:fc:36:21:3e:
                    eb:93:c6:b8:ef:f6:db:ac:88:e2:b0:dd:73:91:18:
                    03:d5:ed:d3:e4:17:05:81:08:9e:33:f9:72:68:b8:
                    28:ae:6f:4a:f7:d3:c4:bd:de:58:d1:55:ce:dc:bd:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:22:C4:6F:F1:8C:F3:B0:0C:86:3E:B8:3A:94:4B:5F:C0:20:70
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e36372e34302e302f32312d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:12:33:48:c2:42:b4:b6:a2:16:e2:0c:eb:3b:de:5f:34:
         1f:72:8f:9c:ea:bc:06:fc:d1:12:99:d3:0f:fe:b9:a6:01:80:
         50:b5:d2:f1:68:7b:84:25:22:3b:db:f0:c0:32:01:ea:f2:d7:
         f4:bb:11:a9:07:21:30:61:77:19:76:1b:28:bd:a2:e4:85:ba:
         45:8d:94:8b:89:8a:15:c7:ec:48:67:14:99:e4:ec:3b:57:e0:
         05:77:e3:5e:bb:a6:d2:4e:38:37:77:92:5e:50:5d:fd:18:49:
         0f:59:bc:e9:7a:cf:44:d1:ac:61:36:b0:27:46:9a:c3:3e:10:
         16:76:b7:fc:7d:8b:7e:b0:34:bd:d8:11:30:a8:f4:af:97:8f:
         40:bf:21:b1:70:4b:0b:71:fa:60:6f:9b:f9:ac:61:7b:6a:6d:
         4d:c5:ec:cf:50:25:89:9d:4e:fb:ac:55:78:76:90:5c:dc:89:
         eb:19:68:13:d9:dc:20:a8:88:8b:18:21:cd:b5:ce:30:1b:95:
         e6:47:d0:06:c7:8d:25:1f:24:a3:16:0a:42:e0:3d:d9:05:04:
         6b:63:72:c1:93:84:8f:75:ca:f1:ec:d8:06:5f:67:ee:a6:80:
         b8:fe:24:c3:55:24:23:da:35:f4:b8:35:56:38:d2:6b:b0:c2:
         b3:94:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:38:05 2026 by rpki-client