Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32322d3332203d3e20323633363532.roa
File:                     3137372e37342e3232342e302f32322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          caLgroo+E86t8k2ZAxLpq/Opejd9OY0zR5f8grdeiDw=
Subject key identifier:   87:D7:A7:65:C9:AD:01:36:A9:0B:2A:2F:94:FE:22:6B:CF:D5:DA:8E
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       2B4DB75499B617F1F5A088B2A5B3FEE52AF5AA25
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32322d3332203d3e20323633363532.roa
Signing time:             Thu 12 Mar 2026 17:20:48 +0000
ROA not before:           Thu 12 Mar 2026 17:15:48 +0000
ROA not after:            Thu 11 Mar 2027 17:20:48 +0000
asID:                     263652
IP address blocks:        177.74.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4d:b7:54:99:b6:17:f1:f5:a0:88:b2:a5:b3:fe:e5:2a:f5:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:48 2026 GMT
            Not After : Mar 11 17:20:48 2027 GMT
        Subject: CN=87D7A765C9AD0136A90B2A2F94FE226BCFD5DA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:6a:ba:97:86:63:3c:e1:09:a4:b2:f0:98:
                    ac:3a:3b:f8:db:4a:de:14:a8:81:ec:2f:33:4c:71:
                    40:1f:28:92:6d:0e:48:e0:15:64:a7:84:2a:5b:25:
                    80:fa:fe:03:0a:1e:f3:02:6f:5d:2f:29:ce:8b:29:
                    b1:3c:0d:1e:07:6f:f8:f7:fe:c6:85:79:0a:ea:6c:
                    ad:14:6e:e8:06:ed:76:ec:96:ef:cd:82:ff:47:6a:
                    80:b2:a3:25:13:5c:a5:60:28:fa:56:4f:e2:fc:8d:
                    fd:be:8e:79:a4:a2:eb:43:3a:6f:e5:1d:23:08:19:
                    e1:f0:f8:7a:c4:bc:6d:77:1a:cc:15:2c:dc:1d:7b:
                    f8:ea:ea:a5:fa:99:c1:f6:bd:14:1f:99:9a:e9:d3:
                    67:e5:08:55:dd:3b:1a:a7:a4:f5:06:da:1c:d4:17:
                    64:7a:e1:e1:63:46:ce:28:d8:e8:0b:42:a1:37:ac:
                    3f:3c:e8:cb:1e:48:b5:16:4f:5e:18:00:ac:40:f2:
                    53:90:a4:40:e9:6f:c1:b2:e1:4f:9c:a3:18:88:73:
                    80:ea:44:b9:62:c0:2d:07:c0:f5:41:72:f9:74:df:
                    25:d9:72:b4:70:c7:cf:d8:6b:80:a5:0f:17:da:ff:
                    9b:50:c3:45:6b:e4:6c:57:ba:c1:51:99:37:28:ac:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:A7:65:C9:AD:01:36:A9:0B:2A:2F:94:FE:22:6B:CF:D5:DA:8E
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232342e302f32322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:53:68:ca:c2:f3:b7:48:fd:ad:3c:71:cb:49:49:8e:6c:
         06:9a:7b:17:3d:4b:ae:cd:9e:05:7d:1a:32:4b:af:2e:88:84:
         bb:fc:07:5a:d8:da:bb:30:9e:10:22:15:c9:b8:55:e3:96:b4:
         bb:e1:e3:e1:69:d1:35:8f:7c:da:fd:83:d6:80:d3:9f:69:74:
         33:4e:e6:48:4e:e8:ff:8a:26:ab:6d:9a:0e:6d:7a:17:ea:d9:
         8f:a5:b7:c9:99:f6:a6:1a:5f:66:4d:e1:74:49:e5:21:3f:fd:
         b4:5b:2d:f3:ee:04:48:da:f6:b8:ce:a9:85:9d:c0:be:04:d1:
         8e:92:12:69:6d:f3:df:cc:4c:23:2f:20:c6:33:8e:f4:08:fe:
         8a:5c:8e:9b:dc:0a:ec:cb:2d:fc:e9:ea:37:30:fa:7d:97:c0:
         6b:ef:82:ae:49:15:73:2f:e5:4c:81:8b:59:20:a4:89:3b:ab:
         c3:97:44:f7:39:94:ab:2e:08:5d:d5:7f:ce:ae:08:9c:1a:e8:
         26:af:a6:7c:79:99:92:5e:96:aa:1d:f5:69:51:73:19:0b:e2:
         23:5e:c1:c3:90:37:3b:99:be:f7:27:83:a9:79:89:bd:12:bc:
         c6:d6:b7:04:f7:67:dc:f8:dc:77:0b:32:89:50:1f:00:50:10:
         95:b9:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:47 2026 by rpki-client