Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39342e302f32332d3233203d3e20323734363838.roa
File:                     3137372e35352e39342e302f32332d3233203d3e20323734363838.roa (raw, json)
Hash identifier:          M/W3ejhe3yJOj8XbAiYA8qGItpb6UZD7wcCZsRuz/js=
Subject key identifier:   44:57:FB:F3:A5:40:6C:12:B3:86:EF:FB:57:C4:16:16:BC:38:84:2B
Certificate issuer:       /CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
Certificate serial:       159F1C7F846CFE7984DBA26ECD2441E5B28E68D7
Authority key identifier: E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39342e302f32332d3233203d3e20323734363838.roa
Signing time:             Fri 01 May 2026 02:24:05 +0000
ROA not before:           Fri 01 May 2026 02:19:05 +0000
ROA not after:            Fri 30 Apr 2027 02:24:05 +0000
asID:                     274688
IP address blocks:        177.55.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl
                          rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9f:1c:7f:84:6c:fe:79:84:db:a2:6e:cd:24:41:e5:b2:8e:68:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
        Validity
            Not Before: May  1 02:19:05 2026 GMT
            Not After : Apr 30 02:24:05 2027 GMT
        Subject: CN=4457FBF3A5406C12B386EFFB57C41616BC38842B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:bc:3d:54:b5:79:2d:73:46:e5:43:15:f0:
                    b5:43:14:61:61:73:42:46:1d:42:be:eb:ef:36:e6:
                    66:93:c7:d8:04:c8:7e:34:b9:39:02:e5:10:88:a7:
                    a5:d7:8a:bc:4c:06:43:c9:08:e7:0c:29:47:77:03:
                    fd:31:95:f4:f3:4a:ae:48:88:1c:1f:02:d0:c7:13:
                    2f:b3:e3:8b:9a:e2:1b:d0:23:e3:87:a0:57:99:ef:
                    9b:07:c1:bc:1e:e5:5e:8f:a3:a8:23:65:6c:cb:6d:
                    7c:59:4c:b0:5a:bd:0f:bd:b2:60:5a:ea:b2:d2:95:
                    bf:b5:33:fc:78:56:bf:0b:b4:57:9f:72:d6:68:74:
                    b7:32:0d:4a:34:6e:8c:b8:69:7f:f8:8e:bd:4e:91:
                    b6:12:96:46:d6:b9:1b:e3:87:bd:49:64:59:69:66:
                    1e:99:00:8b:26:77:e2:c9:2a:ec:f2:d0:0c:78:c8:
                    9b:e2:f7:ca:67:0a:3c:d4:b3:2a:36:77:6a:f7:4d:
                    ec:74:d2:b4:24:94:37:b0:a9:32:90:ba:3e:9f:95:
                    b6:7d:b5:5e:dd:3c:45:8c:31:a8:18:fa:8a:d8:93:
                    05:c9:47:88:62:e2:6f:7c:bc:3b:5d:28:f0:91:87:
                    75:0f:20:5c:2a:12:eb:0b:2d:13:29:0c:62:f8:28:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:FB:F3:A5:40:6C:12:B3:86:EF:FB:57:C4:16:16:BC:38:84:2B
            X509v3 Authority Key Identifier:
                keyid:E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39342e302f32332d3233203d3e20323734363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:4a:de:af:3b:aa:f7:93:b7:21:79:e4:5a:5c:b3:74:17:
         8b:78:ad:6c:e3:83:9c:4b:fc:8b:cf:3b:43:14:28:1e:33:21:
         00:74:48:53:5b:31:80:a8:a1:7e:8b:1f:05:db:8b:91:30:16:
         63:55:de:91:ed:74:82:ef:7b:75:b0:22:27:02:fb:7a:d1:01:
         53:39:44:29:24:61:36:dd:8f:6f:1b:5c:98:79:54:f6:3e:63:
         3e:00:1f:a7:26:b6:a6:65:ca:15:54:8f:67:46:e2:c4:d0:69:
         d9:c5:ba:88:71:6d:9a:1b:b2:52:d5:c5:47:c3:9c:07:56:25:
         e4:c9:cd:3d:53:9f:00:7b:ab:87:82:4c:43:10:83:4f:10:30:
         19:4a:ca:19:27:c8:5d:7b:32:c6:95:95:5b:87:f4:6a:70:17:
         9f:53:3c:5f:d1:c9:08:4e:4e:9e:9d:d9:02:1b:96:2f:d8:92:
         f5:3d:64:06:e3:34:d7:ce:2b:ce:6d:25:b0:a8:94:d8:a8:40:
         b2:16:03:bf:12:f1:e7:62:b8:8a:eb:6b:5d:ab:07:a1:33:39:
         96:77:85:ef:1c:0d:78:37:74:33:8c:0a:3f:8e:5d:a2:4f:65:
         e5:0d:05:55:1a:66:6e:7e:cb:d7:47:12:70:d6:e5:8e:7f:ed:
         d2:55:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:31:47 2026 by rpki-client