Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3332203d3e20323633363532.roa
File:                     3137372e37342e3233322e302f32322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          2Sn9PRAXQcg3YLxu3R+bWKiKAK19eCIumYNt3OQWdfo=
Subject key identifier:   35:5A:FF:B4:98:FF:44:B6:5B:B2:C3:FC:19:28:FF:8F:45:BE:C0:AF
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       7334D71781DDED29507C5C55CE5A2BDEBE39D307
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3332203d3e20323633363532.roa
Signing time:             Thu 12 Mar 2026 17:20:58 +0000
ROA not before:           Thu 12 Mar 2026 17:15:58 +0000
ROA not after:            Thu 11 Mar 2027 17:20:58 +0000
asID:                     263652
IP address blocks:        177.74.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:34:d7:17:81:dd:ed:29:50:7c:5c:55:ce:5a:2b:de:be:39:d3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:58 2026 GMT
            Not After : Mar 11 17:20:58 2027 GMT
        Subject: CN=355AFFB498FF44B65BB2C3FC1928FF8F45BEC0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:f8:fa:b7:43:dc:5a:d5:98:3f:60:52:68:
                    15:94:00:db:71:dd:76:27:70:98:60:68:37:e8:82:
                    dc:e7:f5:3b:71:7f:fd:74:a7:3a:05:cb:1a:78:bd:
                    30:89:68:42:65:2f:12:5d:60:09:2f:a0:1a:84:cb:
                    fc:55:48:ca:69:74:18:8d:2a:5b:b9:c9:74:49:d6:
                    eb:db:94:cb:e4:41:95:2b:79:59:a8:3e:24:fe:27:
                    a8:0d:ba:f1:58:35:94:74:18:59:7b:ff:65:f7:f8:
                    ee:bd:8a:c6:9f:1d:50:79:11:31:3e:79:9a:7e:8c:
                    d0:88:8d:ad:75:24:54:6a:db:52:02:e4:11:81:ce:
                    a0:c0:68:ee:88:eb:7e:2b:61:65:c5:af:87:24:b4:
                    32:c3:0b:5e:19:1a:d5:b0:14:c9:d9:08:3c:ca:ac:
                    13:f6:46:b0:8d:f7:62:fa:ee:e4:d5:31:14:7a:1a:
                    8e:b7:90:0b:2e:8b:80:55:b7:4c:a8:c5:71:4f:68:
                    07:1c:76:72:fb:41:09:33:ce:ab:5d:80:f1:04:94:
                    2b:3f:6c:04:5c:f1:f1:67:e6:d4:e9:7b:30:f5:28:
                    25:f3:7b:b1:24:d6:1d:e0:dc:56:ce:af:59:29:09:
                    51:11:68:6e:81:57:12:8f:e1:0c:1d:50:b7:46:5e:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:FF:B4:98:FF:44:B6:5B:B2:C3:FC:19:28:FF:8F:45:BE:C0:AF
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e37342e3233322e302f32322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:bb:8f:d6:69:da:d8:6e:70:0c:0e:33:a3:35:ba:44:99:
         30:cd:75:3f:7c:d8:c2:31:9e:3c:18:af:9d:b1:62:35:70:fb:
         53:75:9a:a9:ae:d8:5b:86:72:7f:b4:d7:de:92:6a:42:e2:84:
         6f:d8:67:38:45:ea:c8:84:c8:dc:64:12:80:79:f7:92:64:7d:
         77:b4:ce:19:9d:b0:11:84:1d:54:bc:be:c7:84:cd:c8:99:93:
         0a:67:13:99:0c:be:fe:28:99:c0:97:0c:33:c9:13:97:71:8c:
         34:91:cd:72:19:84:34:b1:0d:6f:ef:c6:91:e9:c6:57:d3:0a:
         97:19:5d:83:e7:06:87:3f:f5:cd:d8:6e:ea:08:7f:7f:3c:ae:
         cc:96:8c:40:9d:a1:97:33:6f:9f:5b:d9:da:65:c9:88:6a:4f:
         14:f7:be:15:9f:16:95:d4:75:bb:42:be:36:4d:e6:8f:92:98:
         c2:51:3d:8e:89:0d:fb:d3:f5:a0:80:95:be:14:9a:4a:c3:c4:
         c9:cf:ab:0d:aa:44:eb:1d:ec:27:48:07:66:f8:3a:46:ba:25:
         fa:b3:b6:1f:c2:c6:db:2c:7a:dd:31:56:d2:7e:75:99:5f:99:
         cd:42:69:35:21:d2:01:c4:03:cb:11:5e:ec:67:97:71:6b:6d:
         48:e7:b4:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUczTXF4Hd7SlQfFxVzlor3r450wcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI2NEQzMEE0ODVCQTlGOTQzOTU1NEQyN0I4MkNBQTUw
OURCNTZDMTAeFw0yNjAzMTIxNzE1NThaFw0yNzAzMTExNzIwNThaMDMxMTAvBgNV
BAMTKDM1NUFGRkI0OThGRjQ0QjY1QkIyQzNGQzE5MjhGRjhGNDVCRUMwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5fj6t0PcWtWYP2BSaBWUANtx
3XYncJhgaDfogtzn9Ttxf/10pzoFyxp4vTCJaEJlLxJdYAkvoBqEy/xVSMppdBiN
Klu5yXRJ1uvblMvkQZUreVmoPiT+J6gNuvFYNZR0GFl7/2X3+O69isafHVB5ETE+
eZp+jNCIja11JFRq21IC5BGBzqDAaO6I634rYWXFr4cktDLDC14ZGtWwFMnZCDzK
rBP2RrCN92L67uTVMRR6Go63kAsui4BVt0yoxXFPaAccdnL7QQkzzqtdgPEElCs/
bARc8fFn5tTpezD1KCXze7Ek1h3g3FbOr1kpCVERaG6BVxKP4QwdULdGXnVHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNVr/tJj/RLZbssP8GSj/j0W+wK8wHwYDVR0j
BBgwFoAUi2TTCkhbqflDlVTSe4LKpQnbVsEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMC84QjY0RDMwQTQ4NUJBOUY5NDM5NTU0RDI3QjgyQ0FBNTA5REI1NkMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNjREMzBBNDg1QkE5Rjk0
Mzk1NTREMjdCODJDQUE1MDlEQjU2QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzAv
MzEzNzM3MmUzNzM0MmUzMjMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSugwDQYJKoZIhvcNAQELBQADggEBAAmcu4/W
adrYbnAMDjOjNbpEmTDNdT982MIxnjwYr52xYjVw+1N1mqmu2FuGcn+0196SakLi
hG/YZzhF6siEyNxkEoB595JkfXe0zhmdsBGEHVS8vseEzciZkwpnE5kMvv4omcCX
DDPJE5dxjDSRzXIZhDSxDW/vxpHpxlfTCpcZXYPnBoc/9c3YbuoIf388rsyWjECd
oZczb59b2dplyYhqTxT3vhWfFpXUdbtCvjZN5o+SmMJRPY6JDfvT9aCAlb4UmkrD
xMnPqw2qROsd7CdIB2b4Oka6Jfqzth/Cxtsset0xVtJ+dZlfmc1CaTUh0gHEA8sR
Xuxnl3FrbUjntKY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:00:23 2026 by rpki-client