Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e3135352e39362e302f32322d3234203d3e203238363532.roa
File:                     3137372e3135352e39362e302f32322d3234203d3e203238363532.roa (raw, json)
Hash identifier:          AlZy5iaz2hqtY7ABhh6d0RAqfChvxh7kApxiTiHqluA=
Subject key identifier:   57:AD:F8:94:8D:1B:D4:EA:4D:29:16:F0:0B:28:AB:24:4D:F2:49:63
Certificate issuer:       /CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
Certificate serial:       3E24E7C90062A43CB145919283ED61B0013C3A00
Authority key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e3135352e39362e302f32322d3234203d3e203238363532.roa
Signing time:             Tue 17 Mar 2026 17:53:02 +0000
ROA not before:           Tue 17 Mar 2026 17:48:02 +0000
ROA not after:            Tue 16 Mar 2027 17:53:02 +0000
asID:                     28652
IP address blocks:        177.155.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl
                          rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:e7:c9:00:62:a4:3c:b1:45:91:92:83:ed:61:b0:01:3c:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
        Validity
            Not Before: Mar 17 17:48:02 2026 GMT
            Not After : Mar 16 17:53:02 2027 GMT
        Subject: CN=57ADF8948D1BD4EA4D2916F00B28AB244DF24963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:66:77:96:95:ff:2a:2e:d3:33:b3:31:79:
                    45:12:27:7f:fd:8f:af:b3:8b:fd:1e:3d:17:c0:4b:
                    d5:74:ea:52:f9:c3:99:ba:ab:b3:01:22:7a:77:8d:
                    68:6b:c6:2d:a5:f4:b5:2a:9a:8a:7f:3e:d0:9b:08:
                    17:10:7d:45:76:9e:b1:8e:ec:0f:12:bf:fb:c1:85:
                    ce:da:0f:6d:78:94:59:28:1a:af:e1:4c:00:5f:1f:
                    71:9e:ff:b9:1b:b1:81:ad:04:ed:dc:12:3a:02:b5:
                    dd:a8:01:92:ad:83:15:a4:39:f9:da:36:2f:00:13:
                    69:a2:46:4d:13:c1:27:35:bf:9c:ab:cc:56:7b:20:
                    03:56:43:f3:4e:6c:2a:ed:41:c4:a6:9a:42:69:54:
                    5b:d5:9d:4a:69:cc:70:94:2e:cc:5e:b0:95:4b:da:
                    33:41:ac:b3:98:6f:4a:a7:57:de:18:14:af:22:0e:
                    c5:0e:64:2c:ed:e2:cd:b4:af:4e:ea:47:84:1f:10:
                    2f:bf:e0:8f:8b:a1:d5:47:91:0f:13:b0:c3:d2:35:
                    95:61:12:a8:8f:b8:40:5d:30:82:2a:bc:49:26:b2:
                    34:e8:47:90:e6:31:cd:01:d0:0f:31:65:28:b0:2f:
                    b7:9a:7a:91:3b:25:b4:ec:f3:18:aa:df:f1:c4:25:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:F8:94:8D:1B:D4:EA:4D:29:16:F0:0B:28:AB:24:4D:F2:49:63
            X509v3 Authority Key Identifier:
                keyid:5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e3135352e39362e302f32322d3234203d3e203238363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:5d:18:19:03:77:0e:69:f0:3d:92:8e:7c:62:68:6a:4b:
         f7:e1:d6:55:37:6e:57:95:cb:f7:de:dc:1d:42:af:0a:72:20:
         d0:e5:f4:2b:3a:a4:05:72:8a:83:17:f0:8d:89:c8:0b:a0:1a:
         ca:10:ef:17:bd:8d:41:f2:b0:84:9a:fd:bd:6b:10:11:8d:72:
         85:1c:1b:68:a9:65:48:e5:00:da:6d:8e:55:c6:e6:64:2c:99:
         36:eb:c7:9b:3f:d9:64:03:20:21:70:1d:c5:4a:61:38:5a:c0:
         88:33:c4:62:8c:7c:76:7f:7b:ec:52:36:d2:a7:3e:6c:2e:80:
         fb:ea:3a:da:34:05:ac:02:50:2c:e1:dd:06:77:1e:2e:ec:15:
         bd:32:96:f4:55:2d:ec:31:04:c5:e9:06:86:25:e3:4f:35:c2:
         73:0c:90:fe:32:86:de:ef:c8:6a:fc:87:18:79:cd:01:9d:5d:
         00:4f:41:16:1d:df:e2:ac:6d:37:34:55:48:99:87:aa:c5:90:
         e2:ca:2f:75:c4:24:e7:75:59:a0:89:a1:dc:8a:8b:7c:10:eb:
         2d:c3:fa:f3:c0:f0:75:53:ac:e2:87:9c:8d:c1:cb:31:69:21:
         f4:e8:46:a5:0e:39:31:5e:12:5f:ba:e9:91:30:9b:bb:5d:7c:
         0c:76:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:01 2026 by rpki-client