Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135382e302f32342d3234203d3e203532393031.roa
File:                     3137372e31312e3135382e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          NVB7aF0xekIq3QOFnUDO92dJncmsO+ILHNd6yIIEEwo=
Subject key identifier:   43:40:6C:FB:28:87:55:98:20:B6:60:0E:C6:E0:B8:86:B9:3A:44:A2
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       0916857D84BD6101A24F2A0C9C7F37D354954DEB
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135382e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:28 +0000
ROA not before:           Fri 13 Mar 2026 12:26:28 +0000
ROA not after:            Fri 12 Mar 2027 12:31:28 +0000
asID:                     52901
IP address blocks:        177.11.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:16:85:7d:84:bd:61:01:a2:4f:2a:0c:9c:7f:37:d3:54:95:4d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:28 2026 GMT
            Not After : Mar 12 12:31:28 2027 GMT
        Subject: CN=43406CFB2887559820B6600EC6E0B886B93A44A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:08:de:65:25:95:6f:81:1f:b1:b8:3b:1c:
                    8b:cf:ad:39:f1:ab:1e:5e:52:fa:02:84:66:6a:c5:
                    4c:32:f7:f4:69:1a:93:72:83:f0:62:5a:2b:fd:12:
                    76:ff:e6:fe:a4:5e:fe:e0:1c:a7:4e:f0:9b:df:97:
                    70:52:2c:27:7f:d6:60:b2:7a:2d:62:05:44:43:7b:
                    86:17:54:8e:9e:6d:d5:3e:6b:5d:7a:0b:96:d7:32:
                    49:b0:3d:d0:ae:41:60:3f:eb:b6:98:67:28:26:c4:
                    41:8d:9b:76:7f:0a:68:1c:ab:68:a0:80:15:22:91:
                    f5:93:fa:48:ee:b3:a0:e3:a9:22:e3:61:a6:29:4f:
                    d1:2a:79:77:38:ca:88:d9:cf:1f:24:a6:54:74:a9:
                    67:2c:dd:d5:90:83:e3:8f:d4:38:24:45:e1:37:40:
                    83:e8:2c:6e:e3:05:95:1b:6f:99:36:6b:d5:92:94:
                    b2:0b:53:d0:c2:aa:14:ca:f7:0c:5d:fd:21:5b:7d:
                    cf:f2:46:0f:17:17:60:a5:5a:ef:d0:6b:4e:ac:63:
                    af:19:43:6c:52:c8:f0:6b:a2:d5:de:57:c9:fd:25:
                    bc:5a:ac:29:af:84:78:9c:8c:0a:d3:e5:0a:11:c5:
                    40:da:57:b8:c7:b8:ab:36:17:49:87:7e:27:df:8c:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:6C:FB:28:87:55:98:20:B6:60:0E:C6:E0:B8:86:B9:3A:44:A2
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135382e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:e5:07:6d:ac:fb:4a:88:a6:d5:a2:76:f1:ba:0a:af:f2:
         0e:f5:3c:1e:9c:8a:17:55:b0:6d:fa:da:c9:40:64:5f:af:6d:
         5d:2e:a9:fa:20:32:b8:4c:ac:69:3f:d9:d3:17:78:91:3a:95:
         4e:01:c9:6d:79:1a:6f:5a:71:40:bb:80:12:74:36:92:f3:cd:
         09:69:c2:4a:1b:9b:09:9f:63:dd:fb:fd:04:b5:e2:66:8f:96:
         54:62:ca:40:6a:ba:d6:78:aa:22:26:5e:2a:87:1f:f4:76:89:
         28:ad:a6:26:cc:11:33:c3:5d:08:0d:ae:26:bc:f1:01:90:9e:
         df:d8:3f:10:e3:76:7e:50:b6:41:c7:d8:4f:0d:5a:b0:d6:4f:
         8b:0f:5b:eb:53:2c:e1:a9:85:50:8a:b5:bf:87:90:f4:28:84:
         72:84:1a:8c:ce:30:82:75:aa:d1:18:04:b4:ac:a0:c5:93:dc:
         a7:5e:97:3d:aa:e1:8e:8b:85:77:7a:c6:81:42:54:d7:d3:fd:
         18:c6:97:db:97:58:2d:44:c0:81:65:78:b1:6d:68:80:e7:56:
         93:31:65:d2:57:1a:81:65:08:df:a7:cc:de:a5:26:70:48:0a:
         1c:f5:86:61:f6:51:5a:b8:13:89:7a:ed:87:85:38:7f:65:a0:
         89:11:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:51 2026 by rpki-client