Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32322d3232203d3e203532353735.roa
File:                     3137372e38362e3138342e302f32322d3232203d3e203532353735.roa (raw, json)
Hash identifier:          jatRRtCHWVIDCsQ6CdWPdQE2Axi6Nbyk3X5dPCzQ+bY=
Subject key identifier:   2A:FF:1F:DF:D3:8D:E3:EE:AA:30:F7:5E:F2:9B:96:18:2F:EE:5F:DB
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       0681A5E5F86DE8381DFA8975CD5BFA8C8021F22E
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32322d3232203d3e203532353735.roa
Signing time:             Thu 23 Apr 2026 16:10:55 +0000
ROA not before:           Thu 23 Apr 2026 16:05:55 +0000
ROA not after:            Thu 22 Apr 2027 16:10:55 +0000
asID:                     52575
IP address blocks:        177.86.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:a5:e5:f8:6d:e8:38:1d:fa:89:75:cd:5b:fa:8c:80:21:f2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 23 16:05:55 2026 GMT
            Not After : Apr 22 16:10:55 2027 GMT
        Subject: CN=2AFF1FDFD38DE3EEAA30F75EF29B96182FEE5FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:bf:96:55:81:75:51:55:f8:66:e2:f5:a2:
                    0a:38:d9:0c:72:0f:d3:21:fc:d1:da:ee:b8:3a:3a:
                    ab:71:ec:79:12:0b:78:47:1b:cb:03:d4:6b:6d:b0:
                    44:65:7a:46:12:fd:a9:5e:a8:15:42:2a:a6:fe:32:
                    a3:34:97:1e:7b:8e:04:da:47:57:41:c2:1b:f6:ed:
                    07:2f:59:89:27:b6:73:1c:e6:bf:c5:5b:cc:79:73:
                    7d:24:98:da:f5:e9:0b:05:96:a3:cb:11:be:61:5b:
                    d8:c4:b7:05:a4:cc:74:a7:0d:9c:e5:75:99:d3:6b:
                    db:9a:6d:31:63:40:44:42:b5:fc:77:a9:4b:17:16:
                    c7:f7:28:5e:31:bf:53:07:c8:41:d7:b9:2f:5b:74:
                    42:82:0f:3f:02:32:3c:dc:85:d5:3c:b1:8f:8c:4e:
                    c7:e6:38:8b:6f:0c:50:b9:f4:cf:4b:c4:37:97:56:
                    3b:66:1d:2f:97:f4:11:53:67:aa:9d:d4:9b:ae:35:
                    e2:55:c0:73:44:e5:4d:71:b0:ff:75:f4:1b:8e:ad:
                    1b:3f:50:18:87:f4:76:02:09:1b:83:82:2e:e4:70:
                    45:88:81:66:15:83:b1:8e:f7:85:d8:40:fc:88:76:
                    86:a9:13:34:92:8b:e0:35:93:89:8f:3b:df:e6:47:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:1F:DF:D3:8D:E3:EE:AA:30:F7:5E:F2:9B:96:18:2F:EE:5F:DB
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32322d3232203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:e2:60:a1:82:05:17:49:e3:ea:08:b0:3f:5b:95:5d:fb:
         3b:f1:5f:6b:d7:c9:a4:ac:51:41:95:da:40:47:eb:99:0d:04:
         f8:bb:16:d5:f6:83:fa:f2:cd:cc:3a:ac:67:67:2e:75:27:68:
         78:55:19:e6:c6:3b:7c:94:db:e6:6f:86:b5:2b:d9:64:c8:31:
         6c:0e:ee:5e:cf:ea:a2:ea:30:77:34:16:26:d0:8f:ff:b1:cb:
         22:97:95:cc:1d:3e:de:34:67:29:dc:bd:c2:7f:22:b9:53:41:
         bf:be:1a:fb:27:d5:42:26:1e:b8:f6:34:65:0d:e5:9a:2c:fa:
         af:31:33:47:ee:c4:c4:82:9f:1f:1a:7d:a9:cc:cc:ea:5b:fd:
         af:04:f8:5a:b5:49:1d:23:33:65:95:9f:c8:47:e7:d3:12:e6:
         ab:5c:03:48:bf:53:82:09:7e:c3:a7:7a:3c:b0:6e:2e:82:53:
         bc:d1:44:d1:79:7b:b0:6e:9d:5b:47:ce:04:eb:c2:b1:5a:3d:
         d6:6b:6f:69:16:75:af:b9:a7:cf:71:13:ec:13:be:54:ad:94:
         fe:f1:8f:f2:30:5d:4c:61:36:38:10:14:ca:46:90:0a:ed:51:
         74:b2:f7:f6:6d:8f:dd:6d:6b:81:b7:06:af:5e:50:0e:58:e4:
         8f:80:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:49:36 2026 by rpki-client