Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132392e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3132392e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          +90Ob1+Srg2Dch9V3CpROV1eQCS+2Ky6S5WPLU4qzes=
Subject key identifier:   B8:67:03:1F:C8:17:76:EB:D9:55:D6:C9:49:B4:7A:58:10:6F:5A:12
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       0209033305AB132E9337D795C767E13271E6CB4E
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132392e302f32342d3234203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:38 +0000
ROA not before:           Mon 02 Mar 2026 22:26:38 +0000
ROA not after:            Mon 01 Mar 2027 22:31:38 +0000
asID:                     262424
IP address blocks:        177.44.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:09:03:33:05:ab:13:2e:93:37:d7:95:c7:67:e1:32:71:e6:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:38 2026 GMT
            Not After : Mar  1 22:31:38 2027 GMT
        Subject: CN=B867031FC81776EBD955D6C949B47A58106F5A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:09:f3:d7:78:46:d2:80:22:75:27:ca:0a:
                    35:ca:9f:e2:2d:c8:a4:3e:f0:36:f7:18:a9:0d:a9:
                    43:04:68:f0:b3:84:70:c3:d5:09:bf:95:81:e0:18:
                    ad:06:4a:c6:bd:13:7b:ba:91:b1:09:dd:8d:43:02:
                    66:1f:a7:f7:69:5d:ca:bc:75:6f:d7:56:ae:96:2a:
                    31:88:28:8d:07:93:6d:17:79:c5:01:56:f6:6c:04:
                    52:63:b5:18:8a:81:28:d2:da:68:b1:87:17:e6:1f:
                    88:a3:6f:98:ed:c6:ce:4e:87:90:f7:80:30:37:81:
                    a3:7f:63:09:2f:da:dd:38:50:8e:02:eb:78:bf:f1:
                    99:92:95:8e:cd:b5:a4:09:df:d6:64:b7:35:83:86:
                    27:8d:72:ec:d9:84:7c:53:ec:67:f9:f1:8a:d2:7f:
                    90:d2:ca:06:47:f1:da:1f:a0:8f:e6:b5:ea:15:e2:
                    32:78:d6:14:69:b1:7e:9a:4a:01:af:2a:d0:55:bf:
                    3e:42:9f:22:49:17:07:eb:7f:35:68:eb:d7:e7:77:
                    26:ef:36:cb:d1:d9:b8:59:10:33:b8:3f:ce:22:09:
                    54:e7:f4:04:74:7c:49:de:2a:03:d2:ec:f8:9b:d5:
                    f6:25:4f:7c:6d:8c:bc:61:a1:9c:bf:33:d8:fe:be:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:67:03:1F:C8:17:76:EB:D9:55:D6:C9:49:B4:7A:58:10:6F:5A:12
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132392e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:27:f9:77:5a:f5:57:8b:02:87:c0:40:86:70:9f:63:1e:5e:
         94:27:2c:8a:b8:aa:b4:a0:aa:e9:29:cc:39:ba:3c:80:45:41:
         da:16:54:7d:f4:d4:13:78:09:c1:56:f0:08:ca:84:99:b8:51:
         f0:c1:bf:61:6b:52:48:7f:a5:9e:5e:5a:91:fc:ce:29:62:cb:
         31:5a:6b:6d:31:81:f6:36:80:94:2c:81:c1:d9:87:c4:ee:de:
         9b:dd:2c:90:50:d7:21:8c:6e:d2:71:f7:6d:5f:65:e7:c8:94:
         af:71:f8:61:a8:f7:5c:dc:a2:3f:16:15:b8:16:12:c3:fb:4d:
         b1:6d:13:f8:84:06:03:86:32:33:a0:0b:89:06:7d:d6:b9:12:
         01:40:02:72:d9:89:ff:8e:f0:58:05:6a:ee:04:e2:d7:0a:28:
         47:9c:ed:af:f8:89:6c:23:62:48:8a:01:00:2a:6b:0c:66:f5:
         8d:53:cb:ea:69:fe:5f:de:ff:09:6b:a7:0d:4e:64:28:31:10:
         db:f2:8c:dc:1a:68:65:ab:49:a1:a4:6f:24:d1:9c:d8:1b:19:
         bb:2b:d7:c8:b0:6b:c3:3b:d1:0f:87:d0:c1:9c:7d:f1:31:61:
         09:1e:50:5f:c9:60:32:a1:a6:cd:fa:7b:18:73:b4:a7:da:34:
         4b:65:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:56 2026 by rpki-client