Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135332e302f32342d3234203d3e203532393031.roa
File:                     3137372e31312e3135332e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          RTSLMMpTD9W2F1puzCaweBj4r1EsZyQk/98BcrlgpX8=
Subject key identifier:   0F:F0:4C:67:DB:A4:2D:F7:30:23:36:95:09:F7:16:DF:2B:21:BF:45
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       6DBBE88DBDC6FC00A70640C6AA1C4304642DD412
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135332e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:26 +0000
ROA not before:           Fri 13 Mar 2026 12:26:26 +0000
ROA not after:            Fri 12 Mar 2027 12:31:26 +0000
asID:                     52901
IP address blocks:        177.11.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bb:e8:8d:bd:c6:fc:00:a7:06:40:c6:aa:1c:43:04:64:2d:d4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:26 2026 GMT
            Not After : Mar 12 12:31:26 2027 GMT
        Subject: CN=0FF04C67DBA42DF73023369509F716DF2B21BF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:88:0c:b0:b8:5b:f7:eb:24:df:e3:41:c7:
                    de:bf:1c:54:cf:23:4e:14:8d:ef:68:6e:86:dd:57:
                    ad:a2:be:ec:6a:29:5f:7f:d6:15:df:c8:1b:a7:24:
                    9f:88:39:2f:92:db:00:e0:0e:72:bb:38:e3:f8:0c:
                    21:ce:44:bd:d4:a0:c4:50:2d:cf:e1:29:9f:89:6c:
                    18:8a:08:32:5e:20:fd:37:0d:0c:df:ff:18:e6:91:
                    b6:f1:5d:90:8e:3b:cf:85:73:51:76:61:6c:6e:46:
                    ab:6b:d2:a6:80:ca:a3:f9:b8:4c:e5:d9:67:60:f8:
                    db:22:c0:7d:68:fc:fd:06:c9:a1:82:83:a9:a3:9c:
                    93:76:d5:d4:29:dd:d6:5e:1d:d3:f3:95:79:3d:e3:
                    81:d5:4f:4d:f7:11:f0:6a:cd:2c:20:38:39:b3:a5:
                    72:39:cc:09:c0:32:cb:37:17:13:37:af:70:77:95:
                    cf:cc:14:2a:45:2b:2e:36:fc:b4:08:e9:61:eb:30:
                    db:1e:4d:18:b3:17:ac:7e:8a:0b:9f:4c:e4:89:ab:
                    98:c0:06:37:7a:52:fd:9b:8e:ac:f0:65:22:39:0d:
                    9b:b4:c8:49:36:f9:20:58:32:12:16:d7:8d:ca:cf:
                    ed:5c:e4:97:91:95:a9:27:3c:42:18:f0:44:d2:c4:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:4C:67:DB:A4:2D:F7:30:23:36:95:09:F7:16:DF:2B:21:BF:45
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135332e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:db:c9:00:3b:ba:a7:19:22:98:46:c1:03:6b:79:ca:e9:81:
         1e:03:20:04:6c:25:d3:46:0e:7c:54:df:53:eb:ea:e0:fa:51:
         f3:80:d8:5a:44:5a:bf:c3:59:89:7c:75:ce:07:85:1a:8e:40:
         76:11:70:fe:24:69:1b:27:c6:02:3e:9c:e4:b0:d3:ba:6f:7c:
         22:2b:1f:a3:3b:b0:dc:24:04:78:51:c6:ef:4d:0f:89:96:a4:
         3a:b6:73:87:00:f7:14:2f:79:64:d4:9a:19:13:ca:90:fb:86:
         6f:f7:c8:ab:f2:e9:c2:8f:ef:c5:5b:4a:c7:61:2f:09:c4:24:
         cf:ae:3d:75:42:3e:1c:a3:04:b7:4f:d4:aa:84:b4:ae:ac:51:
         b2:72:f6:2a:0a:84:94:ff:ce:12:44:35:4b:d1:45:89:42:8f:
         0b:8c:c4:cf:5d:3e:47:22:b8:a0:06:51:b1:b7:27:90:8e:d5:
         2a:22:d9:5a:1a:b8:57:4d:2e:f9:0d:34:98:a2:4f:f3:d4:d9:
         fa:b9:2d:24:bc:25:d6:7c:a2:44:b1:a4:c4:11:d8:7b:1b:c0:
         92:21:b7:e8:48:5b:4d:db:a3:0f:41:d5:ed:0b:28:a9:7c:42:
         a1:a0:b7:98:5b:f3:b2:c5:ec:e6:ef:62:fd:a4:96:97:b1:fb:
         33:72:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:52 2026 by rpki-client