Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa
File:                     3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa (raw, json)
Hash identifier:          9YIbsc02CJRJnEUTXNcVcC3dwpP00GO1wKqEWWc8oqc=
Subject key identifier:   E1:27:85:B4:FA:5A:34:78:05:4E:EC:17:68:D5:9B:75:BF:F3:D2:08
Certificate issuer:       /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial:       3EC958BE4FE09BCD7B595C764C8021FFA38F9719
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     271204
IP address blocks:        179.49.188.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:58:be:4f:e0:9b:cd:7b:59:5c:76:4c:80:21:ff:a3:8f:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=E12785B4FA5A3478054EEC1768D59B75BFF3D208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:9a:92:69:47:bf:0f:54:03:25:02:83:f3:
                    25:95:90:37:71:93:69:f4:06:61:0c:2c:c2:4f:e3:
                    ad:d3:b0:c0:a3:5b:16:8d:d9:28:dc:6d:b0:0d:2d:
                    aa:93:2d:7d:b1:c6:ca:cf:3a:f5:ad:5f:06:ca:2f:
                    34:0a:73:05:55:bf:be:71:9c:df:cd:40:b6:bc:d1:
                    90:d1:ac:62:59:1b:24:66:f9:70:36:43:c3:00:c0:
                    d8:dc:b4:90:8c:b7:7a:7b:78:c8:27:f3:d6:a5:0b:
                    fc:ec:38:9b:af:dd:e1:32:04:a3:02:20:f6:5a:37:
                    47:5c:77:65:b4:c0:66:5f:d3:30:a4:ae:0b:02:0a:
                    3b:1a:74:6d:78:1a:55:80:dd:65:31:11:ee:1b:91:
                    08:4b:7a:08:6f:bb:a8:1c:43:1d:19:d4:df:ae:dc:
                    92:80:d8:39:85:ff:63:15:9c:b4:e7:df:fd:a0:93:
                    24:4c:24:81:0d:67:c2:5d:b6:ec:32:d5:36:2d:10:
                    6d:42:f2:c6:bd:b6:75:0a:3d:e1:67:09:ba:0e:ee:
                    d2:d5:ab:b0:bc:93:f5:d1:46:ad:e7:7f:ef:21:8f:
                    31:2f:82:77:2c:07:12:1c:6d:90:67:17:af:1b:1b:
                    a0:87:6c:4a:1e:f0:c9:b2:06:50:4a:f0:f8:8d:69:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:85:B4:FA:5A:34:78:05:4E:EC:17:68:D5:9B:75:BF:F3:D2:08
            X509v3 Authority Key Identifier:
                keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:13:cd:41:6e:83:c3:b9:c2:86:4e:f0:e0:6a:40:17:34:
         7a:cd:b8:b9:a3:aa:5d:db:af:a3:7b:b2:4b:72:aa:b7:31:3f:
         68:1f:0a:1d:b7:cb:99:97:e1:8c:cc:c2:90:99:2f:66:ad:00:
         3b:04:93:84:3b:c7:9d:39:f3:68:18:e4:57:c3:68:c9:73:56:
         21:4c:9f:a6:22:e9:a7:61:77:31:f3:d4:e0:34:87:7a:81:0d:
         06:99:38:b1:51:32:0a:46:e1:0d:f7:c2:36:5d:fc:98:85:45:
         01:86:23:23:dc:14:f1:62:b7:39:a4:5e:25:24:a5:5f:ef:07:
         44:2e:14:4a:5c:89:8f:9e:52:09:8c:13:90:97:80:82:fc:b0:
         80:9f:23:ee:01:11:45:df:e9:bb:9d:ea:7c:52:39:a5:66:93:
         d5:bf:4d:ac:c3:f1:94:75:3d:7e:17:2a:38:5c:f0:a3:20:68:
         d9:24:a3:f4:9f:90:38:84:50:cd:e7:29:9a:fe:63:ef:3d:22:
         34:a2:26:e3:2a:2b:54:5c:ec:17:fb:2e:2e:41:0b:95:50:75:
         da:b1:c8:83:31:ce:0a:c7:39:3c:45:ec:60:e1:53:14:df:8c:
         0d:9a:cc:78:54:70:f8:d9:9f:fb:93:49:0d:ff:83:fb:fc:a3:
         be:47:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:07 2026 by rpki-client