Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3138203d3e203533313837.roa
File:                     3137372e3232302e302e302f31372d3138203d3e203533313837.roa (raw, json)
Hash identifier:          OfMu/WhDdsp5C6MCPV4tk3A0L74TLDKllqJvmBI/HzQ=
Subject key identifier:   99:B2:7B:0D:B0:33:66:2E:66:E0:79:A1:58:7F:B6:06:13:B2:9D:55
Certificate issuer:       /CN=6F7D8AE9AD04B92F95B440AF01346CFC36C90542
Certificate serial:       23ACB7E02EC7B4A3C8081244F02A12D799314638
Authority key identifier: 6F:7D:8A:E9:AD:04:B9:2F:95:B4:40:AF:01:34:6C:FC:36:C9:05:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3138203d3e203533313837.roa
Signing time:             Wed 15 Apr 2026 18:25:14 +0000
ROA not before:           Wed 15 Apr 2026 18:20:14 +0000
ROA not after:            Wed 14 Apr 2027 18:25:14 +0000
asID:                     53187
IP address blocks:        177.220.0.0/17 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ac:b7:e0:2e:c7:b4:a3:c8:08:12:44:f0:2a:12:d7:99:31:46:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7D8AE9AD04B92F95B440AF01346CFC36C90542
        Validity
            Not Before: Apr 15 18:20:14 2026 GMT
            Not After : Apr 14 18:25:14 2027 GMT
        Subject: CN=99B27B0DB033662E66E079A1587FB60613B29D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:97:93:ad:70:fb:58:86:d4:a8:98:43:45:
                    12:fd:93:d5:88:1d:33:67:47:6d:5c:dc:41:2a:92:
                    a3:e2:66:f4:a4:34:d4:e0:8e:9c:53:66:f6:e6:e5:
                    a4:6c:55:d6:0f:ae:5d:3f:d2:35:bf:54:ea:25:7a:
                    d7:e9:73:71:56:80:72:60:d0:78:2f:e0:e0:d0:d7:
                    9e:19:e3:0f:b8:36:75:bf:e3:0b:c9:9d:ec:27:fc:
                    ae:d0:40:59:13:f2:56:eb:b6:1e:82:6c:26:05:54:
                    f3:b8:33:8e:62:66:be:c7:fb:e4:b9:03:23:56:93:
                    ca:b0:2c:41:69:9b:2c:98:13:ef:4b:ea:2e:77:f2:
                    df:32:fd:ad:f4:e5:d0:21:69:df:9c:bb:9d:dd:94:
                    57:a4:0b:dd:c9:86:55:66:b9:dd:fd:24:a8:08:d5:
                    0e:0e:c7:31:ed:f9:2a:44:e4:18:50:d2:95:c2:0b:
                    ab:fd:ce:5d:f4:31:6f:11:b1:53:fa:63:6c:3e:7b:
                    e0:77:60:ec:6c:b1:34:6e:c9:f1:ff:16:22:3a:ee:
                    6f:98:ce:c0:d9:8d:57:1f:b5:fa:2e:62:5c:c9:f1:
                    2d:0e:1a:37:11:f3:17:c6:6c:83:82:86:ac:98:29:
                    7d:ea:82:3c:01:b1:cb:ba:03:15:ee:24:e5:2c:ed:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:7B:0D:B0:33:66:2E:66:E0:79:A1:58:7F:B6:06:13:B2:9D:55
            X509v3 Authority Key Identifier:
                keyid:6F:7D:8A:E9:AD:04:B9:2F:95:B4:40:AF:01:34:6C:FC:36:C9:05:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e3232302e302e302f31372d3138203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.220.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:5b:7f:97:d1:85:f9:21:37:f6:40:bb:44:27:96:51:dc:
         fe:98:90:ca:e5:cc:4f:12:5b:3d:e0:cd:42:af:21:35:e0:60:
         2d:dd:de:b4:59:ea:bb:02:3f:3f:2c:9c:fd:2c:2e:40:1a:fb:
         95:19:ca:d3:a4:99:39:b1:53:74:e7:97:6b:82:12:56:5d:73:
         e3:e3:39:5b:35:80:f7:96:69:79:8d:27:ac:ed:e6:e0:b2:75:
         fa:a9:95:de:00:92:8d:f3:a6:bb:20:da:cc:84:b1:0a:ab:81:
         b0:e9:d4:4a:84:f3:71:20:b6:73:8a:0c:4c:39:4a:5a:51:cd:
         96:33:ee:9f:ee:43:27:c0:6c:87:99:1a:23:94:3e:71:0c:27:
         fa:9c:3f:66:8e:10:57:3d:1e:ba:63:e5:1a:16:a9:ec:7f:78:
         ed:e1:9d:dc:e9:6c:c9:d0:d3:64:97:d4:32:d3:71:d5:af:b0:
         20:8f:2b:07:e5:96:e5:51:46:06:71:59:36:fd:82:01:a5:e1:
         cc:84:79:73:55:c6:c9:78:f8:4b:f3:37:43:68:9a:96:45:ff:
         bb:c0:43:cf:dd:12:a7:88:26:0b:0e:ec:57:12:27:57:31:19:
         d1:10:a6:ee:bf:8c:2e:c6:82:ea:cb:89:c3:89:23:13:b4:89:
         50:a0:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:14 2026 by rpki-client