Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          jUPsCT0VGwp+yabwRWqpHBRx2vrKOPm19k3yOWcLLS0=
Subject key identifier:   F7:67:00:92:25:77:03:D1:BD:DF:AA:26:ED:0D:CF:DA:BB:B6:B1:D3
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       0254D622F4511B1FDB58C82CD56B82EE80740192
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:57 +0000
ROA not before:           Mon 02 Mar 2026 22:26:57 +0000
ROA not after:            Mon 01 Mar 2027 22:31:57 +0000
asID:                     262424
IP address blocks:        177.44.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:54:d6:22:f4:51:1b:1f:db:58:c8:2c:d5:6b:82:ee:80:74:01:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:57 2026 GMT
            Not After : Mar  1 22:31:57 2027 GMT
        Subject: CN=F7670092257703D1BDDFAA26ED0DCFDABBB6B1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:8f:8f:58:7b:df:c6:71:a1:c6:58:91:91:
                    45:2c:dd:ac:89:b1:06:98:ee:d1:20:e8:d7:0f:8b:
                    19:7b:91:08:20:fb:7e:c5:f3:55:6a:b8:6e:c5:44:
                    ea:28:05:b2:ea:e4:e6:c1:e5:48:8c:82:1c:41:fe:
                    33:c6:12:fd:62:1b:53:02:1d:63:68:87:d8:ea:23:
                    5a:3a:b7:fa:80:90:9c:41:8c:fb:72:e1:e8:f4:e1:
                    3b:9f:59:a8:27:13:ff:ae:d1:bd:21:dd:c3:bd:3f:
                    47:22:25:74:df:8a:6e:c1:3b:be:0e:1b:8f:1a:10:
                    22:61:99:8e:54:f3:25:30:d1:3a:b9:8a:12:a8:3f:
                    de:61:3e:24:a7:07:3e:d4:b1:f7:5f:fe:3a:60:72:
                    00:67:e5:03:6d:47:96:1a:18:f3:49:a6:48:52:3b:
                    70:e9:96:ca:ad:ea:ae:6e:7a:e5:8e:3d:b9:2a:3a:
                    12:59:3c:c2:2e:da:52:41:47:f4:19:ff:fe:45:23:
                    12:24:d0:0d:5a:83:86:4c:fd:7e:02:97:f1:44:0c:
                    b9:ae:30:77:be:c3:dc:5d:ca:4d:0a:e3:7c:f4:f7:
                    c3:17:67:68:91:77:5e:ec:5c:46:b9:bb:9f:08:00:
                    20:c6:50:ce:ef:67:7e:9e:22:1a:19:65:72:5d:5c:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:00:92:25:77:03:D1:BD:DF:AA:26:ED:0D:CF:DA:BB:B6:B1:D3
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133362e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:71:f5:d8:7c:48:4f:2a:68:e6:1e:d0:f5:77:6b:38:5e:0d:
         d9:62:23:c6:a8:da:0b:d3:ea:fd:c3:ae:6f:f5:1d:72:bf:44:
         72:ac:a0:1c:61:4f:ec:6b:3d:ad:9d:d3:44:9f:1e:4f:84:23:
         29:fc:7a:f4:1f:d9:f1:2b:66:65:11:cb:54:10:07:e9:0b:d0:
         e3:1c:e2:12:73:0d:4b:91:51:98:05:45:43:a1:3f:69:26:a7:
         ad:92:e4:39:a3:83:38:cd:77:c7:18:5e:41:27:de:97:05:7a:
         30:5a:ad:d8:b7:4e:a2:5c:19:d4:eb:8b:89:c4:58:72:5d:6d:
         a9:b0:89:cf:68:44:b5:78:5d:4a:71:cb:0d:4f:ae:b4:18:c4:
         6f:4c:75:62:d4:bb:e6:9a:de:26:b4:49:3d:e8:f5:7e:84:b0:
         03:04:bb:72:a9:9d:c2:ad:56:2c:2b:42:e9:f3:6d:9d:98:fc:
         3c:8d:2b:ad:7e:f5:d3:80:4c:22:a8:f9:65:9a:04:cb:c7:f1:
         f0:5b:9c:06:da:aa:5c:8c:d7:c4:d1:31:5e:84:7a:4d:2b:66:
         21:d3:ae:20:ef:71:04:f1:da:ec:46:66:ae:28:26:ca:73:22:
         f5:81:c0:4f:e4:be:2f:0d:48:63:5d:aa:5c:bc:4e:8c:82:07:
         bd:a3:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:55 2026 by rpki-client