Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa
File:                     3137372e35352e39352e302f32342d3234203d3e20323734363838.roa (raw, json)
Hash identifier:          m3vuXHD/ukjtNt13Z/qp+NhCrMt28XhW1eB8U3k78UQ=
Subject key identifier:   12:5B:94:F5:6B:D0:F7:74:C6:E9:C7:E3:EE:89:3A:2F:CB:59:B6:B7
Certificate issuer:       /CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
Certificate serial:       60250EF0A8841504BA96B6CBDD550CC5F8CA30E1
Authority key identifier: E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa
Signing time:             Fri 01 May 2026 12:24:06 +0000
ROA not before:           Fri 01 May 2026 12:19:06 +0000
ROA not after:            Fri 30 Apr 2027 12:24:06 +0000
asID:                     274688
IP address blocks:        177.55.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl
                          rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:25:0e:f0:a8:84:15:04:ba:96:b6:cb:dd:55:0c:c5:f8:ca:30:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
        Validity
            Not Before: May  1 12:19:06 2026 GMT
            Not After : Apr 30 12:24:06 2027 GMT
        Subject: CN=125B94F56BD0F774C6E9C7E3EE893A2FCB59B6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:b9:da:8c:cb:b2:5d:3c:ce:cc:e2:b2:5d:
                    5d:88:34:b5:0e:4c:66:7d:32:91:6e:ac:ca:57:30:
                    e4:60:eb:c2:86:d0:f3:76:1f:ba:24:a6:03:7a:b0:
                    33:c6:0e:8f:6f:cb:9f:18:de:4e:40:e3:06:47:fb:
                    aa:96:de:68:fb:a7:51:b8:a5:76:20:53:20:8c:a1:
                    1a:ce:b2:7a:65:e7:be:ac:5f:1e:d9:aa:99:6f:2a:
                    be:9f:a1:64:60:4a:c2:0f:c3:40:c2:94:c1:a3:83:
                    e2:68:71:ab:80:69:f1:c8:01:c2:6a:32:25:79:3b:
                    e8:1f:54:51:d2:4e:fd:41:f7:a1:d8:9b:86:f7:a8:
                    a7:73:f7:50:98:cb:8a:9a:c7:5e:fd:e3:c3:bd:0e:
                    38:ca:da:b1:b3:0b:4f:ac:7d:2c:11:f1:8a:7d:3e:
                    a7:00:83:b1:20:84:44:39:14:49:7c:87:51:1c:68:
                    76:2c:1f:ad:65:77:91:48:6a:2d:f3:05:08:5f:1a:
                    b6:6b:0e:1d:cd:6e:30:56:2c:f6:6d:ac:b2:ef:41:
                    ce:ad:07:f6:d2:75:fe:d7:1e:b4:bb:4d:db:bb:89:
                    d3:fc:4f:45:44:88:a1:5f:f2:29:32:87:98:fd:d2:
                    ee:90:6a:72:b6:ca:83:19:24:6a:04:94:aa:71:e4:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:94:F5:6B:D0:F7:74:C6:E9:C7:E3:EE:89:3A:2F:CB:59:B6:B7
            X509v3 Authority Key Identifier:
                keyid:E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:76:6d:41:bb:ed:ec:70:02:e7:80:cb:29:76:75:d4:9a:
         0b:62:a1:aa:74:74:3c:fd:f4:02:db:2f:50:53:1d:a2:77:e2:
         d3:22:6e:e8:d6:a8:ad:cf:c0:e3:cc:75:02:59:65:fd:95:30:
         9a:20:e6:00:bc:47:fe:d2:ef:60:75:a4:8d:bd:88:f2:b8:ae:
         8c:7e:b1:3a:4e:70:40:43:2e:13:cf:36:10:39:96:39:43:7d:
         b1:e4:e0:57:54:06:61:50:d1:5f:46:4d:cb:d0:8b:62:5e:09:
         8f:b8:48:9d:fa:51:22:0c:b6:50:f9:ba:77:aa:83:fb:9f:f8:
         1e:5b:98:5a:da:fd:4b:b3:e9:05:20:e2:65:03:b4:2b:29:da:
         44:45:77:ef:5d:12:f0:55:45:91:86:70:51:d3:34:bc:70:db:
         31:63:14:47:2d:c3:eb:10:31:61:0e:1a:b0:d0:e4:ee:77:3b:
         57:8e:19:da:27:e8:8b:16:9f:39:f8:a3:c5:99:1d:d5:a6:e4:
         05:d9:15:77:6a:33:3d:dd:1b:39:71:a7:f5:39:34:0b:76:b4:
         e8:57:31:a0:68:89:15:03:e4:d1:bc:0c:49:cb:d0:78:e3:70:
         27:11:d3:a7:83:31:67:b8:92:5c:7f:0d:34:e9:fc:4e:17:1c:
         c1:92:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:32:17 2026 by rpki-client