Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          3Bu51OMBt7i1Lx6LfQGIaLgb9BvqZTOtOJK6PNzpP84=
Subject key identifier:   5A:1C:0D:FC:A9:AD:B4:01:03:37:D5:CD:54:B7:78:B3:F5:E6:3A:9C
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       5E35A4A1950FF69A1AB670CA3EBEB876DDFA5D0F
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa
Signing time:             Thu 30 Apr 2026 20:00:26 +0000
ROA not before:           Thu 30 Apr 2026 19:55:26 +0000
ROA not after:            Thu 29 Apr 2027 20:00:26 +0000
asID:                     262313
IP address blocks:        177.105.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:35:a4:a1:95:0f:f6:9a:1a:b6:70:ca:3e:be:b8:76:dd:fa:5d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr 30 19:55:26 2026 GMT
            Not After : Apr 29 20:00:26 2027 GMT
        Subject: CN=5A1C0DFCA9ADB4010337D5CD54B778B3F5E63A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:6b:72:5a:0d:56:00:c2:6b:16:14:1e:5c:
                    09:56:33:29:91:14:c7:d0:c8:71:c1:a6:fb:c7:0a:
                    00:fb:9c:76:e3:45:cf:db:b2:d4:fc:68:b9:79:0a:
                    22:31:3f:50:ed:42:36:9b:56:5b:4e:4d:8c:38:75:
                    3c:43:b7:ec:fb:fe:c1:09:a0:88:a6:9b:10:74:41:
                    13:dc:51:ee:09:a3:f1:64:c1:59:df:b2:91:b1:0a:
                    b0:8c:24:6a:30:7d:a5:fa:84:61:2d:1d:e2:31:49:
                    39:de:f1:ab:3f:ac:0d:7b:dd:3b:67:d8:bc:7f:d1:
                    85:99:e8:47:2c:0f:e6:c9:9c:4a:4c:e8:f4:89:49:
                    a9:e2:9a:0e:cc:3e:3e:18:3e:66:0c:00:53:dc:70:
                    1c:b5:62:6e:4d:91:13:46:d0:fe:34:b3:f5:a8:dd:
                    b8:06:e6:01:d6:dd:b5:8b:e2:59:69:e9:b1:2f:56:
                    95:ee:43:14:74:2f:e1:98:b4:47:3c:14:dd:e7:83:
                    d7:8c:9d:3a:f3:d1:5d:e7:9f:88:c9:da:c7:09:7f:
                    b0:c7:61:11:98:e2:86:a3:be:fa:94:9a:1e:38:38:
                    2a:d6:88:1b:f4:53:14:af:d6:36:32:bb:37:42:6b:
                    e2:7f:32:14:0f:c9:73:72:c4:bc:ef:07:e8:b2:44:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:0D:FC:A9:AD:B4:01:03:37:D5:CD:54:B7:78:B3:F5:E6:3A:9C
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:92:58:1e:cc:98:f8:38:46:46:61:e0:a6:b3:29:4f:3a:64:
         4b:6a:81:0d:68:ed:61:20:87:77:ba:4e:05:8b:8e:dd:7e:89:
         4f:94:45:d2:a2:12:ef:d8:df:8c:e0:c1:eb:a8:72:80:3f:a2:
         b0:e2:87:7d:db:85:a4:13:f1:f3:34:b8:c2:c0:cb:6e:31:ea:
         6d:8c:04:85:39:81:dc:71:65:42:41:c5:37:30:0b:d1:24:d3:
         3d:0d:21:0c:d4:24:e8:ae:d0:7e:ac:44:79:ae:53:47:83:da:
         eb:09:43:3b:cf:30:90:18:d1:6e:8a:b1:a9:9b:ee:60:b7:40:
         62:68:b7:5c:09:22:e5:72:80:7d:7a:51:5f:37:b9:1b:fb:3c:
         30:91:07:80:7a:ed:60:6d:f7:a2:50:a6:bc:1d:eb:95:0e:78:
         b1:69:ba:42:51:d7:37:de:ad:5a:4b:f3:69:6c:1a:09:8b:37:
         62:b9:48:4b:60:34:87:7c:95:46:82:76:39:99:fa:6f:af:2d:
         57:63:4c:da:4b:2b:88:f0:17:30:b6:69:d7:4c:7c:1d:76:40:
         27:42:e5:66:0b:1a:01:2d:5b:0b:70:06:6c:cd:45:a1:c5:81:
         d9:52:8b:0b:98:3d:89:36:55:20:18:e4:99:c6:04:97:66:cc:
         6b:6a:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:52:40 2026 by rpki-client