Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          H1lSSmeXRfE7EppKS5kSYB0bmhL8SEWA2kUVAfEIvic=
Subject key identifier:   1B:81:9A:C6:94:EA:41:6E:2B:CE:E9:91:C6:FD:D9:AD:EF:26:39:0A
Certificate issuer:       /CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
Certificate serial:       0CBB287E9076A50909FC0679CCE55BA5017C9A2D
Authority key identifier: EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
Signing time:             Wed 29 Apr 2026 01:18:12 +0000
ROA not before:           Wed 29 Apr 2026 01:13:12 +0000
ROA not after:            Wed 28 Apr 2027 01:18:12 +0000
asID:                     52772
IP address blocks:        177.39.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bb:28:7e:90:76:a5:09:09:fc:06:79:cc:e5:5b:a5:01:7c:9a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
        Validity
            Not Before: Apr 29 01:13:12 2026 GMT
            Not After : Apr 28 01:18:12 2027 GMT
        Subject: CN=1B819AC694EA416E2BCEE991C6FDD9ADEF26390A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:02:9c:0f:bf:76:4f:99:6e:3d:02:df:f7:
                    00:5c:25:24:ab:d2:35:e4:6e:32:51:1b:ea:2f:d6:
                    a3:50:2f:d4:1e:3f:6c:b6:ba:ba:00:82:e9:fd:36:
                    24:fc:d6:a1:f9:5d:8e:22:5d:6c:15:ac:d9:b9:10:
                    9a:d0:09:04:05:36:01:47:00:99:ed:81:91:25:b7:
                    b7:61:a9:09:d5:00:ec:a9:7f:ef:7c:1a:a5:f6:ca:
                    ac:7d:d0:bc:9b:02:e8:60:83:f7:6d:8b:b4:dc:4e:
                    a7:d1:5b:f7:b3:69:e7:01:d8:71:01:19:89:f8:be:
                    d1:93:11:85:74:2d:85:94:76:5b:cc:74:a5:e8:98:
                    13:78:35:c5:3e:e5:bc:8f:9a:ed:d1:b9:45:84:f0:
                    d5:ea:0e:88:f4:52:95:34:d2:84:0d:4a:95:4d:49:
                    90:db:4b:46:f3:00:98:37:b6:22:a7:91:40:08:cf:
                    35:77:c3:60:a3:b2:f1:3a:04:ee:9d:ca:8a:66:33:
                    72:60:13:43:a3:bb:f0:38:b2:68:37:a8:21:84:d3:
                    8c:12:0c:7f:4a:23:a4:f7:30:e4:cd:7e:e6:7e:27:
                    9e:4d:82:20:be:01:ce:84:01:74:7a:ac:9f:cc:a4:
                    d9:b2:f9:c8:62:2b:68:37:d7:0e:29:f0:3f:59:a6:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:81:9A:C6:94:EA:41:6E:2B:CE:E9:91:C6:FD:D9:AD:EF:26:39:0A
            X509v3 Authority Key Identifier:
                keyid:EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:a3:f9:28:71:8f:53:0b:b8:66:14:95:41:bd:9e:f0:e0:
         e0:bd:12:a4:83:f6:7b:98:f2:80:21:6e:a9:10:ee:fb:8f:03:
         48:93:86:3c:61:a1:5f:a3:ff:c0:f0:83:4f:d0:17:4f:56:e2:
         1d:45:a2:f2:b2:88:87:36:6e:c9:51:68:83:65:d8:a6:d5:87:
         ff:79:a5:9f:da:de:43:ae:cf:74:d6:2a:fe:93:1f:c1:d7:2a:
         01:a5:a0:3a:04:5e:b6:ea:04:8d:86:8d:7a:90:fa:17:61:c9:
         91:49:df:ad:35:22:a2:c4:87:d5:ef:78:a8:cb:30:b5:fe:a6:
         d1:b3:14:66:62:ea:3b:a0:ef:c5:60:be:78:e7:ff:ea:59:4d:
         38:ff:9b:64:ee:b5:35:0c:a4:c7:18:2d:76:41:21:76:80:00:
         ed:8c:c9:0e:a6:3f:7a:79:29:f9:14:b8:57:d5:7f:31:2e:ab:
         3e:a8:8f:4a:19:8f:43:48:ed:9b:f5:ea:19:5a:cf:8e:8a:9b:
         ef:e1:8c:50:9f:af:b3:60:30:e6:d4:ab:65:20:d5:df:4c:c9:
         d2:17:89:12:7f:84:4e:c8:a1:f1:9c:17:a8:92:a2:12:ee:f6:
         37:fc:9e:c4:12:86:54:d2:bd:0b:21:66:e5:ad:20:6f:3b:65:
         b1:35:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:11 2026 by rpki-client