Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3332203d3e203532363031.roa
File:                     3137372e3132342e37362e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          brMpRwrr4hjj+o77Y+VW7wSs5lVvAGFuBf9Bd+rCpHc=
Subject key identifier:   B8:82:5F:F2:39:F0:E6:29:A4:BF:A9:7A:B7:16:BF:08:D6:E9:E0:E4
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       2EC0AC1AE73159C9FE73A29BEBE0E6A66B09F2D6
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3332203d3e203532363031.roa
Signing time:             Thu 12 Mar 2026 17:20:25 +0000
ROA not before:           Thu 12 Mar 2026 17:15:25 +0000
ROA not after:            Thu 11 Mar 2027 17:20:25 +0000
asID:                     52601
IP address blocks:        177.124.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c0:ac:1a:e7:31:59:c9:fe:73:a2:9b:eb:e0:e6:a6:6b:09:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:25 2026 GMT
            Not After : Mar 11 17:20:25 2027 GMT
        Subject: CN=B8825FF239F0E629A4BFA97AB716BF08D6E9E0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:09:41:27:c5:2b:c0:d2:c8:5b:0e:8a:e2:
                    41:96:47:7b:ad:06:9a:ae:ec:f3:82:5b:06:4c:79:
                    71:52:91:ac:9e:df:6c:b0:f6:7d:3c:8a:7e:ee:1b:
                    74:26:90:f9:1f:60:3f:9f:aa:4b:8b:77:e5:e9:9a:
                    e2:01:d1:80:4d:ae:f9:42:3e:83:74:e1:a3:7c:21:
                    1f:f4:e5:28:77:70:c5:92:90:b1:78:14:1f:cb:a5:
                    7a:4c:68:fd:1f:79:4f:b4:66:8c:74:93:d6:87:29:
                    7b:37:53:55:9e:2c:61:fc:db:b4:89:0d:b4:d3:14:
                    b4:a2:01:4a:66:1c:d8:bf:3c:36:6f:9d:eb:7f:c6:
                    58:25:a3:d5:2c:af:20:80:d8:bd:62:a4:6f:38:5f:
                    b3:06:4d:88:c9:46:6f:e0:79:c2:83:79:3c:eb:e3:
                    53:91:bc:40:9f:f8:78:14:23:72:79:52:7b:16:8f:
                    86:bd:bb:48:2c:e7:d9:6e:6d:62:95:ba:3e:21:05:
                    62:c8:4f:ba:dd:53:06:aa:0b:5a:42:70:62:a0:a4:
                    38:2e:71:75:35:4b:f7:e2:8e:fd:e8:d6:5f:62:57:
                    3c:45:c0:ff:67:79:ab:ef:52:c0:71:7b:50:ef:d8:
                    a0:7d:a0:5a:e9:59:38:e8:4a:b0:74:48:2b:52:63:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:5F:F2:39:F0:E6:29:A4:BF:A9:7A:B7:16:BF:08:D6:E9:E0:E4
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37362e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:46:9a:25:5b:a3:b9:43:e7:09:5a:04:d7:0c:09:78:72:
         60:24:c0:9a:6a:90:2f:94:c4:d0:09:6d:1f:6d:00:e1:64:cd:
         be:9e:5e:3e:e5:3c:ad:01:e2:cd:07:0b:d9:1c:3e:ce:9d:e9:
         91:38:80:3c:f5:e9:71:e5:a7:de:21:5c:41:b8:b9:09:8e:f8:
         9a:82:73:a9:af:94:24:bd:10:ca:99:0e:eb:f8:6a:b6:d9:e5:
         c1:a2:f1:a6:ee:79:8a:43:1c:7e:39:a7:d3:13:65:2e:cb:d7:
         0c:ce:5c:50:78:d3:d8:c7:65:bc:18:14:18:a2:ab:ce:b2:b1:
         d5:eb:1b:48:0f:46:a9:53:46:5b:2b:6d:5e:71:ee:ed:14:05:
         12:9d:20:8f:0f:b8:4b:42:93:88:72:44:2d:d5:cb:cb:54:42:
         4b:3a:cc:11:4b:36:33:96:c3:39:cb:e4:63:13:fe:93:96:3d:
         67:7f:2d:7e:c4:c4:63:b3:23:42:2d:fc:31:5f:19:e2:b4:39:
         fe:ca:e7:cc:1b:6a:37:7c:ba:5c:fc:1e:fe:6c:24:4b:b8:b3:
         0e:87:23:fe:73:3b:7a:cd:ac:51:85:80:45:18:c8:67:e2:8f:
         de:d3:aa:37:c5:e2:fe:f3:d0:cf:39:4b:e1:21:6c:12:2f:db:
         7a:ba:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:48 2026 by rpki-client