Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133392e302f32342d3234203d3e203631373736.roa
File:                     3137372e35332e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          EuLrh33fKeWdDnDFfG6CWJYr2x2U5DIGjuek8q77jN0=
Subject key identifier:   3A:20:39:DA:9E:48:96:60:E9:14:22:B0:4E:40:2D:BD:DE:37:50:1F
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       552521524EF89EE86F3ACD5F9224DDD05639E45B
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        177.53.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:25:21:52:4e:f8:9e:e8:6f:3a:cd:5f:92:24:dd:d0:56:39:e4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=3A2039DA9E489660E91422B04E402DBDDE37501F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:d8:42:96:ce:27:39:a6:bb:de:f9:d4:db:
                    41:23:d5:0b:9e:18:d7:dd:e6:c9:76:f3:4f:74:cb:
                    a2:de:43:13:02:ef:de:67:73:bb:c3:4b:e8:aa:6e:
                    0c:c8:17:4f:04:08:b4:7e:bf:8c:82:6b:df:85:a0:
                    ad:cf:45:67:9c:98:a0:46:e6:63:e0:6f:05:a7:42:
                    98:51:b6:2f:e7:4e:fc:ba:40:42:ad:9a:18:9c:44:
                    51:37:09:3c:1b:98:2a:93:c5:76:18:cc:fd:56:1b:
                    37:20:95:22:f6:f6:38:5b:e6:a0:33:a9:26:e4:0c:
                    06:1f:b0:f5:4e:61:d2:05:2d:5c:e6:37:e7:95:53:
                    f8:90:be:dc:89:5a:fc:dc:d8:f7:50:20:ef:d7:87:
                    22:d9:e3:7d:d7:3f:9a:0b:95:d2:89:a3:6c:01:be:
                    11:cf:a4:74:69:cf:82:93:d2:18:8f:24:38:99:e4:
                    55:dd:3a:fc:e1:21:70:cf:2d:6c:c0:ea:f7:45:68:
                    56:ef:d9:88:2f:15:37:5d:44:a7:a2:58:1c:f9:18:
                    61:c3:1b:92:1b:49:b9:35:8a:d0:88:b9:61:88:9f:
                    bd:f0:13:50:84:19:3f:c3:a9:74:fb:d0:03:a1:7a:
                    e4:43:36:97:f9:09:5e:1a:93:65:0e:8a:f0:80:45:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:20:39:DA:9E:48:96:60:E9:14:22:B0:4E:40:2D:BD:DE:37:50:1F
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:bf:cf:92:d4:39:ab:2c:5c:44:ee:9b:24:60:3f:c2:05:
         13:4d:f4:4b:01:47:88:95:0b:8e:07:e0:e5:3f:ef:4c:5b:f0:
         9c:f5:49:ee:f9:6a:ee:3c:d4:d0:16:65:64:1d:f3:c9:c4:b0:
         d5:94:e9:41:23:ac:76:9f:01:cc:b5:99:cd:b1:85:0e:4f:f2:
         45:33:08:12:47:f8:32:33:0c:15:d5:3d:01:89:43:4b:22:1f:
         53:7a:44:4d:f5:e8:73:d3:d7:ac:8c:11:20:4e:c3:de:c0:b7:
         53:2a:18:1e:74:60:10:2f:f8:4a:58:6f:4f:05:75:b5:2b:a5:
         78:fc:a4:3f:1d:0f:26:6e:66:6f:97:f9:af:45:c1:30:19:fd:
         c2:59:87:4b:87:08:27:ac:45:18:96:44:e1:1f:d5:99:87:67:
         62:ab:43:4a:0b:81:0b:4e:2f:e3:2d:91:18:36:f9:0b:97:4f:
         bd:68:8f:92:08:f7:f6:7b:b7:b1:17:4f:18:4c:65:13:49:e4:
         70:96:bf:79:f2:46:6d:27:5a:70:4b:7b:d3:95:02:7a:91:a1:
         70:80:98:ea:cf:b1:4b:5e:ec:01:42:bd:92:dd:68:f0:a3:54:
         20:e6:54:f6:c1:69:db:1b:bf:d1:ef:7f:1c:80:a0:8e:3c:cb:
         3b:ad:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:05:47 2026 by rpki-client