Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          mFwJ6BNrppF7uWglzTW8BrOFb+RXg5EQ9TV3G5Co5Nw=
Subject key identifier:   AD:6D:82:C5:5E:6F:42:DD:F6:83:4A:4F:7C:DE:E7:AA:9D:22:F7:03
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       67F5C1B94728E12F95413765B121974B8ED31030
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 01 May 2026 18:18:36 +0000
ROA not before:           Fri 01 May 2026 18:13:36 +0000
ROA not after:            Fri 30 Apr 2027 18:18:36 +0000
asID:                     262578
IP address blocks:        177.84.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:c1:b9:47:28:e1:2f:95:41:37:65:b1:21:97:4b:8e:d3:10:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May  1 18:13:36 2026 GMT
            Not After : Apr 30 18:18:36 2027 GMT
        Subject: CN=AD6D82C55E6F42DDF6834A4F7CDEE7AA9D22F703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:48:89:0f:09:a3:3d:76:65:4d:30:6a:af:
                    ca:e1:f4:d6:a4:db:ca:ae:bc:70:8e:a1:cf:05:a3:
                    2e:1c:4f:bb:35:37:a9:30:74:9b:be:61:c0:11:1c:
                    63:10:e6:49:3d:ed:b9:dd:09:c5:3c:5e:0e:c5:79:
                    c1:fc:3e:8b:24:23:b6:f7:7b:22:51:3e:6c:d8:cc:
                    b8:eb:08:ee:e9:ab:01:29:05:5c:1e:7c:d9:d6:9b:
                    44:46:b5:f4:93:ce:89:f8:d5:a3:5c:c2:54:20:53:
                    3c:e3:99:9c:65:eb:30:ca:e2:fe:fe:71:ab:73:ec:
                    ec:be:36:47:d2:22:10:4e:e1:1f:02:34:2b:10:21:
                    d7:44:0d:27:04:55:6a:4a:91:41:de:1f:af:98:22:
                    ce:43:db:68:91:43:cf:af:e9:3b:02:25:a5:f4:db:
                    b7:7c:fe:51:62:3f:d3:2c:b6:28:25:9f:86:59:9b:
                    d8:2b:7e:fc:82:dc:ae:fa:49:e5:46:ce:f7:f6:9f:
                    d7:d6:11:91:ca:49:61:74:44:9b:2f:6f:99:42:71:
                    c6:d9:b6:01:33:f5:11:8b:73:0b:10:d6:1e:3d:1d:
                    45:2a:7d:6a:3a:88:94:3b:09:e7:c6:29:d4:de:4b:
                    f8:0a:a8:5b:6e:ec:4f:50:cd:d0:be:23:89:23:ba:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:82:C5:5E:6F:42:DD:F6:83:4A:4F:7C:DE:E7:AA:9D:22:F7:03
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:aa:8e:d3:66:cd:e9:2f:61:25:57:ff:6e:62:12:1c:55:5c:
         29:93:7e:de:68:74:e7:99:c9:9a:81:e7:fc:4b:e3:2c:d2:32:
         f5:67:40:47:66:fb:ce:fd:3f:e2:e4:ad:b8:4c:4a:46:e2:9d:
         9e:a2:35:8e:32:22:02:3d:c7:b6:8c:b4:99:1e:74:e2:5d:d9:
         be:ae:1e:8a:f9:41:85:54:12:1e:c7:f5:1d:ec:66:c3:ba:1d:
         69:7d:47:5c:f2:a8:b2:a6:86:52:02:c6:f6:09:75:af:3a:7f:
         d4:2d:45:5c:03:77:3e:df:01:dd:b9:7c:42:3e:cb:93:af:a6:
         87:fc:57:6e:06:09:52:41:e8:0d:5a:f5:b1:88:e1:20:38:a0:
         a5:75:93:9f:54:de:6b:e7:21:fc:73:cb:c9:52:10:18:4d:cd:
         4a:38:1b:f7:7e:26:ec:e9:6c:6e:71:06:88:e1:85:78:b4:e5:
         03:8c:67:1f:38:3d:3f:27:2a:b2:75:32:de:64:be:64:f3:0f:
         2e:41:33:94:8d:1d:a2:37:12:5c:ca:19:9f:35:48:b8:04:26:
         83:75:29:74:50:8a:bf:56:58:f2:e5:29:c1:24:dc:d2:5c:94:
         fd:7b:ca:46:0c:7d:e6:0e:c7:60:8c:95:e2:ef:0a:ff:b6:ad:
         8f:47:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:39:06 2026 by rpki-client