Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
File:                     3137372e35352e3132382e302f32302d3332203d3e203533303033.roa (raw, json)
Hash identifier:          u4fRZpwqSP8rO5kHVwK5P9+Ywt8aTT+qqmPZF2x7inM=
Subject key identifier:   DD:A3:E4:B5:F8:1A:02:B8:1D:AB:05:B7:F5:2C:A2:B5:DC:8A:36:AE
Certificate issuer:       /CN=7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA
Certificate serial:       47C1895949600FF956D652998B2BC6A8A1E96C34
Authority key identifier: 7E:46:57:E1:70:DA:05:FB:31:73:DE:63:B1:4C:9B:8F:6E:D4:1D:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
Signing time:             Wed 11 Mar 2026 11:47:56 +0000
ROA not before:           Wed 11 Mar 2026 11:42:56 +0000
ROA not after:            Wed 10 Mar 2027 11:47:56 +0000
asID:                     53003
IP address blocks:        177.55.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.crl
                          rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c1:89:59:49:60:0f:f9:56:d6:52:99:8b:2b:c6:a8:a1:e9:6c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA
        Validity
            Not Before: Mar 11 11:42:56 2026 GMT
            Not After : Mar 10 11:47:56 2027 GMT
        Subject: CN=DDA3E4B5F81A02B81DAB05B7F52CA2B5DC8A36AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:a4:82:c4:b0:90:ff:b6:aa:8e:17:30:78:
                    32:42:7a:12:fa:2b:a4:81:02:83:5c:de:d4:d0:bc:
                    c6:a7:5e:13:61:ba:76:c3:88:4c:1a:4c:fd:cf:a5:
                    1f:28:af:6d:c2:a5:cb:d9:f0:dc:3b:e9:bb:53:fa:
                    93:4f:4b:bd:cd:1d:97:7e:e2:22:a9:ab:af:a3:ca:
                    6a:b3:d0:ae:e0:1b:6d:98:4a:ff:44:3a:4b:53:e0:
                    73:de:d1:77:96:58:c4:66:81:c9:c8:e8:e1:41:53:
                    f0:20:8f:6b:ab:f8:77:85:c6:8b:db:fa:5a:54:23:
                    3f:27:fc:25:c9:50:00:03:6b:cb:b8:2d:66:ec:d9:
                    f3:46:62:be:93:09:ad:65:9c:fb:a9:c1:5d:a1:ec:
                    52:4d:cd:67:44:36:3f:0b:ee:f4:04:01:aa:82:3d:
                    6c:e0:ca:3e:75:30:aa:5d:75:33:23:ea:51:a7:fb:
                    f0:f3:32:8c:24:ca:74:b4:41:58:9c:8e:df:6c:ef:
                    c3:de:75:35:f1:cf:97:b6:e7:02:50:6f:72:85:f1:
                    92:15:97:ab:79:f4:d1:35:5a:db:a8:53:f8:76:44:
                    78:87:28:67:a2:cf:49:6b:af:38:22:0f:6a:85:b4:
                    67:af:c9:3b:f0:11:d3:85:27:f5:95:fa:bb:07:06:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A3:E4:B5:F8:1A:02:B8:1D:AB:05:B7:F5:2C:A2:B5:DC:8A:36:AE
            X509v3 Authority Key Identifier:
                keyid:7E:46:57:E1:70:DA:05:FB:31:73:DE:63:B1:4C:9B:8F:6E:D4:1D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E4657E170DA05FB3173DE63B14C9B8F6ED41DAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:17:09:c6:c6:5b:a6:57:57:6e:44:ce:bc:75:20:68:5a:
         68:41:b3:cd:22:ce:28:22:0a:d4:75:4a:c7:14:6a:0d:82:1e:
         1e:16:18:f9:f6:f7:c2:a8:2d:3f:16:af:88:a6:c3:41:11:f6:
         9e:65:40:fa:b9:c9:2a:c3:8d:61:bb:10:e2:97:e7:c6:6c:c7:
         d3:5f:e1:a6:6f:8d:5e:33:83:76:14:bd:af:52:3c:a1:3e:97:
         8d:9a:5c:77:13:ae:f6:c1:8a:38:44:96:5b:8f:89:8d:b8:ca:
         4a:f2:3f:8f:19:d4:3f:a3:88:a2:e7:3a:26:16:95:1b:40:8f:
         50:a6:86:c5:65:72:ed:48:65:43:8a:1e:85:45:68:f0:d6:0f:
         3a:e0:9d:05:44:b6:32:00:e8:2a:02:f9:d8:20:3d:81:39:4b:
         97:24:0f:1a:69:8d:17:17:1c:5c:85:eb:7c:c8:30:e2:a0:61:
         ac:40:e2:b1:6f:66:bb:c7:13:d5:10:5f:51:8a:93:2b:a6:af:
         a7:8c:2d:b5:d6:b1:fa:8a:07:a6:d5:fc:ea:7b:c7:67:7e:ee:
         70:7a:e9:5d:e3:bc:34:7e:a9:31:65:be:61:a1:a7:14:82:c7:
         4a:1d:1d:c5:f4:4b:c4:e9:5c:91:38:08:76:37:7b:b3:bb:05:
         16:3f:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:57:21 2026 by rpki-client