Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133322e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133322e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          6pY4SdOBysZPB0USQZ+OSXQH+QypM0YclL8iMqOzBvg=
Subject key identifier:   47:08:44:69:AE:8A:5C:45:18:93:D8:C8:CA:74:C3:22:B8:A7:4F:00
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       04C1E2529E2E246BF603FD92CCB9124CA257ED41
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133322e302f32342d3234203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:44 +0000
ROA not before:           Mon 02 Mar 2026 22:26:44 +0000
ROA not after:            Mon 01 Mar 2027 22:31:44 +0000
asID:                     262424
IP address blocks:        177.44.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c1:e2:52:9e:2e:24:6b:f6:03:fd:92:cc:b9:12:4c:a2:57:ed:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:44 2026 GMT
            Not After : Mar  1 22:31:44 2027 GMT
        Subject: CN=47084469AE8A5C451893D8C8CA74C322B8A74F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:aa:33:d3:d7:92:12:ab:1f:4b:2f:e0:5c:
                    58:6c:cc:ec:9f:a3:bd:ea:8d:87:60:57:e1:dd:68:
                    0f:13:9c:73:3c:ed:49:3b:07:6e:d4:e7:f6:21:24:
                    18:8b:d4:1e:2a:61:99:5b:be:09:0f:a5:a2:65:22:
                    97:9a:12:e0:39:c5:23:1f:f3:a2:a4:5d:2c:dc:52:
                    68:fa:50:8e:4d:bd:c1:0a:f3:e7:3b:95:11:06:7c:
                    4d:1d:e2:d3:3d:de:da:54:87:17:75:ff:ec:9b:60:
                    83:0c:35:a9:cc:44:4c:f4:16:1b:16:6a:e7:32:64:
                    ac:f8:fa:98:86:2b:93:d2:ed:b7:b4:6c:f6:d4:7f:
                    18:de:e3:dc:44:05:32:17:b0:b9:36:c2:f4:20:7c:
                    e0:fb:56:ba:c5:ac:35:6e:b7:a9:15:80:c7:fe:28:
                    83:cc:b7:d0:98:7d:3a:49:b6:42:d5:3e:73:33:8b:
                    de:b8:27:2f:66:4a:2c:48:fd:30:04:a9:3d:b3:4f:
                    e2:90:42:e3:22:8b:25:66:1a:79:82:9c:95:49:c0:
                    47:dd:48:59:a9:6e:73:25:3f:76:2d:65:c9:5e:bb:
                    eb:f6:e7:8b:6d:e5:1e:58:02:3c:96:df:d3:7a:3c:
                    4c:6f:70:2e:6a:c8:4e:e5:74:a1:13:21:63:36:84:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:44:69:AE:8A:5C:45:18:93:D8:C8:CA:74:C3:22:B8:A7:4F:00
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133322e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:40:60:33:f9:c6:9d:f0:b1:87:98:49:3c:1c:a3:0d:9b:ac:
         06:cd:08:1d:27:14:3f:5c:32:f7:ec:3e:61:03:b1:c8:29:c5:
         67:f0:df:c1:5c:7c:55:a2:46:9a:9d:a8:ce:78:e1:24:b9:42:
         87:96:19:af:c8:89:13:ec:58:c6:6f:47:1a:b1:b9:3e:65:80:
         45:27:eb:c0:ca:15:62:3c:83:1b:09:c0:d7:24:96:3b:aa:6d:
         2d:e0:3b:f9:f2:cc:19:80:11:40:ce:1e:b6:fe:52:da:2c:7d:
         6c:f7:dc:31:17:ea:76:19:6a:28:b3:e7:a5:52:3e:97:13:c3:
         3c:26:9a:a1:73:70:25:51:3e:a8:56:b8:07:5d:b4:d8:1e:a8:
         d5:fa:da:1d:62:ae:8e:bb:7d:cf:53:1e:2f:2a:31:cb:74:74:
         b5:1e:46:70:86:6c:31:6b:f4:96:89:cc:5f:67:3c:36:6a:3c:
         17:48:c9:b9:32:26:c6:c4:fe:22:98:90:2b:f9:3a:14:2e:c3:
         eb:18:43:49:15:10:47:85:57:92:d3:d2:78:6f:f7:12:11:50:
         3f:5a:cf:f2:51:5c:41:de:96:a9:14:54:fb:68:29:e2:e5:49:
         f8:c2:2f:97:56:37:06:53:fa:24:cf:62:17:04:fb:91:aa:24:
         8a:45:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:53 2026 by rpki-client