Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          u/D4mAVwU+R8k3khTu6uCC9x4VBXmuxX0LXR57a01/0=
Subject key identifier:   FC:5B:81:66:18:71:EB:D1:B7:F6:D9:28:AE:75:FC:BA:74:F1:28:B5
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       485608A56225421F8E7100E9E964692D78484BD5
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 05 May 2026 21:33:40 +0000
ROA not before:           Tue 05 May 2026 21:28:40 +0000
ROA not after:            Tue 04 May 2027 21:33:40 +0000
asID:                     52587
IP address blocks:        177.87.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:56:08:a5:62:25:42:1f:8e:71:00:e9:e9:64:69:2d:78:48:4b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: May  5 21:28:40 2026 GMT
            Not After : May  4 21:33:40 2027 GMT
        Subject: CN=FC5B81661871EBD1B7F6D928AE75FCBA74F128B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:e8:72:3f:d2:66:f9:f5:ae:1c:c3:63:c6:
                    be:0f:f3:10:82:c1:45:4c:56:ce:8e:43:d3:d9:ed:
                    07:bb:97:b0:f2:9b:49:af:20:cf:fa:e6:ed:8e:3a:
                    5f:5b:e5:72:3f:f6:17:3f:ab:02:f0:f7:49:98:6f:
                    eb:e0:1c:fa:af:b1:d8:cd:df:b1:9d:c9:64:c8:53:
                    04:63:49:57:f5:68:af:d7:43:97:2b:16:e4:52:30:
                    7a:7c:7e:24:86:13:e1:e7:19:77:ad:41:b2:8d:27:
                    74:dd:e6:21:19:e7:5a:12:60:31:0b:b6:5e:6e:21:
                    50:32:05:26:83:7d:cf:30:e7:7a:17:53:ff:e4:d0:
                    25:44:9f:14:e3:f0:73:b1:a6:b1:57:1f:41:9b:8e:
                    10:79:79:a8:8c:26:cb:b0:e9:53:87:62:07:2e:07:
                    3e:76:b5:06:47:52:d7:38:ed:8c:c5:10:28:e9:ed:
                    29:3c:02:bc:98:50:c0:7f:e1:01:1b:93:ff:87:46:
                    c4:f3:c4:ae:cd:da:cb:b0:32:e6:15:2a:26:df:e3:
                    23:2f:f4:6a:c0:d7:4a:24:32:f8:09:3b:eb:8c:d3:
                    1d:19:d3:ea:c0:d0:fb:fe:16:bb:68:0d:31:9b:cf:
                    e8:2d:7d:8b:46:00:8d:da:dd:b0:62:5b:d7:5a:36:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:81:66:18:71:EB:D1:B7:F6:D9:28:AE:75:FC:BA:74:F1:28:B5
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:e1:bd:d6:74:52:61:3f:3d:4c:f0:f6:9f:af:e0:80:3b:
         8d:fa:59:a5:40:11:3a:90:92:8c:07:24:b7:7e:3c:51:c7:ce:
         89:21:2d:db:ba:b0:c6:2d:62:6a:ba:57:a4:51:24:cc:ac:44:
         42:20:27:15:e5:01:01:43:e1:cb:ca:6b:a3:02:86:7b:7e:9f:
         97:3e:35:6d:d7:79:fc:9f:c8:f4:e6:93:a4:ce:ae:92:93:1a:
         39:a8:85:47:0b:e6:b2:9b:21:c9:c4:24:b3:25:07:49:2a:1e:
         37:dd:e7:2d:96:aa:6a:1e:71:c4:5c:8c:58:c0:ea:8e:5e:fa:
         46:fa:29:fd:6a:ff:99:23:a5:59:72:51:d0:c9:01:9a:30:23:
         6e:64:a3:03:96:11:c7:b2:41:25:f6:6a:e4:0f:77:6b:3a:ee:
         3a:ed:42:9a:73:18:79:44:1f:17:07:36:06:d0:26:50:c3:6e:
         f6:26:f8:fe:2f:12:c3:f5:b9:d2:f5:23:5c:a5:a5:35:2e:aa:
         0d:eb:c6:64:26:67:5e:34:0f:83:15:f7:7c:8b:87:0a:ff:29:
         24:ba:6e:ec:d2:a0:14:a1:b5:c7:59:45:e2:f1:78:60:0a:3f:
         99:fd:5c:db:d9:60:d0:07:28:3b:c5:ce:e9:56:43:51:7a:21:
         fb:9d:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:55:05 2026 by rpki-client