Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/3137372e33392e33322e302f32312d3332203d3e20323632343136.roa
File:                     3137372e33392e33322e302f32312d3332203d3e20323632343136.roa (raw, json)
Hash identifier:          vJ/XR6JZrS4/6rSTL/Aqh/uRUjlvwyhli3yKHkPq8nM=
Subject key identifier:   98:26:97:10:E9:1C:1D:52:D5:8F:62:65:D0:2B:5B:94:0C:FC:1D:F1
Certificate issuer:       /CN=56E5656D40ED3F974D3DE1BCCAF72E86A16DB487
Certificate serial:       07D3EFFFA43D4CF2EB9E8AEF83861467EE499F18
Authority key identifier: 56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/3137372e33392e33322e302f32312d3332203d3e20323632343136.roa
Signing time:             Wed 25 Mar 2026 14:41:58 +0000
ROA not before:           Wed 25 Mar 2026 14:36:58 +0000
ROA not after:            Wed 24 Mar 2027 14:41:58 +0000
asID:                     262416
IP address blocks:        177.39.32.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.crl
                          rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 03:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d3:ef:ff:a4:3d:4c:f2:eb:9e:8a:ef:83:86:14:67:ee:49:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E5656D40ED3F974D3DE1BCCAF72E86A16DB487
        Validity
            Not Before: Mar 25 14:36:58 2026 GMT
            Not After : Mar 24 14:41:58 2027 GMT
        Subject: CN=98269710E91C1D52D58F6265D02B5B940CFC1DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:2c:e9:5c:82:c8:66:e7:56:8c:70:f5:0e:
                    48:e5:a9:85:e9:65:ef:15:89:24:37:3f:a9:85:03:
                    f5:af:90:15:19:c6:2c:d3:94:f6:b6:b3:c7:4f:33:
                    4e:dc:67:cc:c2:97:af:93:c8:9a:e5:85:45:f5:34:
                    27:d2:26:c5:7a:c3:02:e2:6a:c5:f8:4e:b6:da:e5:
                    1d:5a:d9:fc:25:7d:7e:90:3f:a5:88:7f:70:3d:d2:
                    a4:53:5e:f2:95:5e:9c:ba:fb:eb:72:33:67:54:45:
                    1f:3a:8d:ea:d6:b4:01:00:0d:ba:a2:27:a8:e9:80:
                    7b:2a:b9:26:58:b6:14:5c:ec:ec:fb:15:41:7a:62:
                    be:01:08:1d:e8:d6:b0:19:c1:7a:62:04:3f:fd:83:
                    7b:3f:df:3c:d2:42:23:db:01:5a:40:ed:eb:b7:8b:
                    b7:71:18:98:44:31:12:e1:e5:de:e7:44:63:c5:60:
                    b5:90:87:0b:38:8f:c6:b8:c0:ab:05:c0:80:db:fe:
                    c5:a4:69:87:2e:26:35:8b:e0:8f:71:52:93:b6:d5:
                    12:25:4c:79:3f:a6:7f:95:f4:f1:4f:c2:d2:2c:ff:
                    06:67:c8:51:95:14:a9:08:45:28:8c:cd:3f:7c:f2:
                    71:c1:b4:7b:59:51:66:d2:5d:03:c7:8a:66:c9:30:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:97:10:E9:1C:1D:52:D5:8F:62:65:D0:2B:5B:94:0C:FC:1D:F1
            X509v3 Authority Key Identifier:
                keyid:56:E5:65:6D:40:ED:3F:97:4D:3D:E1:BC:CA:F7:2E:86:A1:6D:B4:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56E5656D40ED3F974D3DE1BCCAF72E86A16DB487.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5G2vdVWrMr8Yrystkwpw1asCcLFT4UmtJjvR8qd1F2Y/0/3137372e33392e33322e302f32312d3332203d3e20323632343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:8f:3f:e3:ff:48:25:e5:05:fa:fb:4d:46:80:73:d2:d6:
         cd:b6:d0:a5:f3:49:8a:f0:e8:93:77:c9:e5:83:6f:e6:55:88:
         37:0a:20:80:63:46:98:36:30:07:20:35:e1:43:d4:0c:bd:60:
         77:9a:1d:34:26:cb:5e:d9:a9:ea:b4:28:5f:5f:d3:fd:ff:22:
         9f:d7:12:82:4b:51:26:5b:c7:57:29:1d:d6:7e:ef:46:48:7e:
         1d:dd:ea:e9:61:d2:c7:bf:89:16:f1:e3:8e:c4:8a:69:05:06:
         e9:7f:b6:ed:84:68:71:b4:69:90:b6:03:8e:9d:40:63:c4:78:
         84:35:c3:6c:1f:8a:ac:14:25:2b:8c:3a:77:8a:6d:ec:ce:ce:
         6d:ef:95:7c:ca:e6:77:d2:e3:29:aa:d2:e0:70:12:58:9f:44:
         a6:4b:bf:c3:f5:36:51:00:7a:b5:bd:6d:15:12:40:e4:74:4d:
         a7:3c:c1:17:14:4d:50:ae:e8:9c:91:d0:e6:dc:7f:ec:ac:34:
         68:e3:15:28:b3:70:d2:26:9c:02:96:22:11:6e:15:11:e0:dc:
         f1:86:e5:90:73:20:ba:f6:63:5a:c8:26:f2:60:5c:2f:8f:37:
         de:9b:99:a7:06:80:dc:91:73:b1:e3:dd:11:0e:40:ce:9a:52:
         83:e5:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:35:49 2026 by rpki-client