Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          WTnOtiuUxZVnNd5zGHrmMsT6KBrtH/K2shO+mbsJbpo=
Subject key identifier:   C0:67:0B:D0:DB:D8:5B:75:1E:AC:DD:07:3A:50:2D:83:62:86:4C:4E
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       67F10A94AC7B4E416517027DD3A0C975F16C99C1
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa
Signing time:             Thu 12 Mar 2026 17:20:20 +0000
ROA not before:           Thu 12 Mar 2026 17:15:20 +0000
ROA not after:            Thu 11 Mar 2027 17:20:20 +0000
asID:                     52601
IP address blocks:        177.124.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f1:0a:94:ac:7b:4e:41:65:17:02:7d:d3:a0:c9:75:f1:6c:99:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:20 2026 GMT
            Not After : Mar 11 17:20:20 2027 GMT
        Subject: CN=C0670BD0DBD85B751EACDD073A502D8362864C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:a4:ce:6e:4f:f4:1e:6d:0c:f4:16:94:2a:
                    ce:fd:51:c8:3e:7e:97:90:95:00:81:3c:b1:88:75:
                    ce:a7:ea:f4:15:d4:6a:dd:41:01:c4:67:6f:fd:09:
                    91:66:f0:c2:10:f1:93:38:6a:db:59:b0:19:75:86:
                    55:f9:8c:13:2a:1f:4b:5f:2c:2e:98:de:fa:2c:0f:
                    70:bd:14:a0:df:b9:f7:07:bb:46:01:73:be:f4:d1:
                    f8:20:f9:52:0e:0b:24:b3:7f:37:8c:ef:30:f7:dc:
                    7e:97:20:75:e0:3e:a2:35:2c:f6:14:70:a9:79:ee:
                    a1:2e:b4:47:8a:16:e4:80:da:8b:0b:1c:34:3f:5b:
                    88:f8:2d:0d:39:54:29:97:66:dc:ea:30:62:bd:c3:
                    80:cd:bc:24:c0:27:39:6b:0b:a5:99:13:64:02:c0:
                    f8:63:00:68:3e:af:83:69:0e:37:0d:bd:1f:dd:aa:
                    eb:4c:c1:35:ce:9a:00:d2:cb:84:57:aa:39:bc:fc:
                    5c:42:34:d7:b5:9d:2f:ec:ae:0d:97:a4:b6:88:0b:
                    dc:3f:98:a6:28:27:98:c6:78:fd:66:ab:36:d7:bf:
                    85:e1:2e:72:c5:45:ea:84:1f:09:66:2b:c5:6e:2d:
                    6a:23:d5:c4:13:40:b8:d0:1c:0b:80:fb:1a:87:14:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:0B:D0:DB:D8:5B:75:1E:AC:DD:07:3A:50:2D:83:62:86:4C:4E
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:10:17:37:44:e1:9c:79:0e:5c:7c:4b:7e:2c:19:30:9e:
         f9:94:20:4b:18:f8:75:7a:6c:6c:ad:e5:49:d6:ab:38:ae:35:
         6a:30:4f:e8:b8:53:51:eb:0b:57:99:fa:66:bc:72:0f:a5:2f:
         da:9f:d8:31:fc:64:b1:e1:bf:4f:3f:48:cc:22:98:9f:f7:0d:
         dd:8b:cf:17:62:f3:e1:48:91:e5:97:10:c8:76:18:fc:0d:dd:
         9c:1d:9d:ec:2f:4a:ef:f7:ce:7e:5f:c7:40:93:e9:8a:16:41:
         4f:50:97:f9:9e:d7:21:12:74:96:90:eb:96:6c:3f:2c:0e:7c:
         d2:83:1c:63:99:2d:03:ba:e7:27:15:2b:6f:8f:21:b1:59:49:
         38:43:f8:74:94:59:27:59:f0:98:65:16:7e:7d:bb:b4:ca:e8:
         cc:55:21:51:a8:e4:db:12:27:2a:55:ba:e7:50:d2:ed:a7:f9:
         6f:ba:92:a9:35:1e:41:ea:63:4b:6b:27:9d:48:08:72:a7:2f:
         1a:ec:34:dd:17:e3:00:9d:26:0f:eb:8e:94:f4:0f:3b:13:e7:
         dc:96:d9:54:7b:49:93:75:46:59:7d:a4:c4:75:14:56:a5:14:
         36:02:3c:da:1c:b0:9b:fb:b8:10:ce:84:9b:d6:30:e8:99:8f:
         3c:d1:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:44 2026 by rpki-client