Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3332203d3e20323633363532.roa
File:                     3137372e37342e3232382e302f32322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          Ax/8DqYhVskZiYRM6ybF8BUa6uzFgKPIX9oEsPYh2K4=
Subject key identifier:   28:5E:A1:7A:33:33:8D:F2:8C:58:A1:73:04:F6:F7:C7:52:76:EE:FE
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       3757482F1B930E024D9F035F463684314EBEEB64
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3332203d3e20323633363532.roa
Signing time:             Thu 12 Mar 2026 17:20:53 +0000
ROA not before:           Thu 12 Mar 2026 17:15:53 +0000
ROA not after:            Thu 11 Mar 2027 17:20:53 +0000
asID:                     263652
IP address blocks:        177.74.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:57:48:2f:1b:93:0e:02:4d:9f:03:5f:46:36:84:31:4e:be:eb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:53 2026 GMT
            Not After : Mar 11 17:20:53 2027 GMT
        Subject: CN=285EA17A33338DF28C58A17304F6F7C75276EEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:d8:75:cd:67:82:11:c7:8d:25:44:32:30:
                    14:5f:d5:ce:4c:66:13:d6:35:9b:82:63:54:06:4d:
                    d8:d9:e8:f3:78:1e:cc:e3:4b:85:fd:09:e1:38:e5:
                    3a:7c:ab:23:83:19:59:98:65:6c:97:cd:4e:ee:f5:
                    ed:06:14:8f:b6:7f:3e:eb:bd:ad:1d:e6:00:40:59:
                    2e:b9:56:78:84:8a:be:c6:8b:e4:44:87:2e:27:bd:
                    78:bf:d3:9c:1a:9a:07:75:ae:c0:37:1f:ae:c4:de:
                    21:df:83:25:d3:dc:89:8b:65:e3:49:7e:d7:63:02:
                    bc:27:fb:bc:a7:a6:09:d1:94:a6:51:fa:c4:55:6f:
                    2a:cd:62:49:16:39:cd:a0:51:50:76:b8:09:15:3f:
                    02:65:18:a1:55:1c:d8:73:74:4b:ab:fa:b9:52:5f:
                    ad:0b:f7:3d:26:ad:7e:d9:5e:db:53:d8:54:2b:b9:
                    30:9c:b7:ec:3c:22:c5:76:1e:51:14:a6:d8:41:2d:
                    78:7f:cd:ef:a1:33:68:77:b5:f2:ce:3a:06:6d:79:
                    09:91:62:86:45:2f:a5:60:af:89:af:df:73:62:6f:
                    1a:ab:fb:be:f5:cb:93:03:53:f4:20:1d:9f:f9:0b:
                    9b:33:da:7c:ca:15:c5:91:95:f5:c2:3a:73:69:08:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:A1:7A:33:33:8D:F2:8C:58:A1:73:04:F6:F7:C7:52:76:EE:FE
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3232382e302f32322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:93:a8:c4:44:28:b5:1e:f3:5b:9d:ac:46:69:9b:e4:cf:
         ff:25:b6:7b:8a:ab:1d:87:53:ad:f3:af:83:18:4c:35:78:5b:
         a0:03:f5:83:6b:5e:97:b6:70:6a:18:63:a7:8b:3d:a2:93:80:
         35:f5:d4:17:11:47:8f:1b:47:d5:b1:1b:8f:3c:67:45:57:8c:
         96:6f:4d:3c:d1:7c:48:bc:c7:0e:b5:8b:cf:01:49:67:95:e2:
         37:c6:b5:8c:0b:10:ab:b7:1f:f1:84:f3:26:cf:cc:30:4a:40:
         60:dc:00:e1:1e:df:dd:8c:e2:4d:d9:a7:0f:c2:88:49:f0:9e:
         04:de:5f:a7:93:a8:f1:b7:55:d3:95:fa:92:bf:fd:80:d1:40:
         bd:b8:a4:25:00:03:de:1b:68:55:7a:a5:d7:56:30:de:a4:6c:
         ea:e1:4a:93:ed:c4:40:b4:3f:c1:42:47:e8:63:a1:21:99:9b:
         b4:8f:a0:95:49:d9:53:0d:7e:4a:88:fa:37:7c:ba:bb:2e:e7:
         2f:f7:66:f6:47:38:27:91:d3:c1:40:99:f9:ee:18:34:3c:5e:
         d1:95:9b:a1:b4:e4:56:66:8c:8e:43:ec:e0:2d:29:9a:6d:d8:
         16:7d:41:3a:0b:61:54:06:b8:7a:70:09:91:d3:ea:72:e3:53:
         56:bc:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:11 2026 by rpki-client