Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3232203d3e20323730353135.roa
File:                     3138372e34392e3135322e302f32322d3232203d3e20323730353135.roa (raw, json)
Hash identifier:          KVBGmlujY9OXd6uXu7urXgr8EDsBWByWahVUkR8DeWI=
Subject key identifier:   E4:39:D5:FC:B8:99:12:5A:34:31:C7:D6:4A:1E:BB:B3:5D:EC:09:CB
Certificate issuer:       /CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
Certificate serial:       4FD01634309D09A16FE499467F415391D4CD7594
Authority key identifier: 37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3232203d3e20323730353135.roa
Signing time:             Mon 04 May 2026 16:55:36 +0000
ROA not before:           Mon 04 May 2026 16:50:36 +0000
ROA not after:            Mon 03 May 2027 16:55:36 +0000
asID:                     270515
IP address blocks:        187.49.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl
                          rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d0:16:34:30:9d:09:a1:6f:e4:99:46:7f:41:53:91:d4:cd:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
        Validity
            Not Before: May  4 16:50:36 2026 GMT
            Not After : May  3 16:55:36 2027 GMT
        Subject: CN=E439D5FCB899125A3431C7D64A1EBBB35DEC09CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:da:f7:8f:d9:ac:ca:9b:e1:7f:e7:21:08:
                    34:b3:93:33:75:77:6f:ca:39:e2:b1:73:3f:7a:33:
                    f5:cc:b8:e4:87:dd:50:cf:61:2c:17:d9:40:ec:56:
                    36:54:1a:36:88:7a:a3:7d:1b:d2:d8:54:d5:50:dd:
                    f4:06:90:61:d1:9e:56:1f:6e:0b:47:02:d3:aa:3f:
                    dc:c4:63:65:86:cc:3e:62:6b:d0:13:8c:61:96:7f:
                    c4:13:35:55:74:25:69:e3:0f:9c:e0:2a:48:fd:cf:
                    53:82:4b:b3:7d:ef:4b:69:4a:61:24:20:e2:d3:1f:
                    eb:bf:f8:80:39:39:8d:8c:13:2e:95:06:f0:7e:ab:
                    a9:45:9b:4d:cf:f5:ea:59:62:e5:bd:42:0d:ba:48:
                    f4:38:9d:bc:a2:e5:25:de:b5:93:84:84:1f:7b:4d:
                    f4:1b:d0:72:c0:23:42:37:82:32:96:c8:c2:f9:a3:
                    b1:05:8f:18:c4:aa:89:73:3c:ac:a3:87:08:7d:da:
                    b3:f3:a5:76:65:5a:42:83:41:b3:93:1b:ff:20:ec:
                    91:e1:7c:72:85:72:de:62:82:36:73:5b:64:76:b3:
                    1d:83:c4:8e:23:9d:96:bb:e1:1d:0a:c9:34:ed:29:
                    43:1c:af:d9:85:0a:d5:36:98:c1:02:40:6b:0e:ee:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:D5:FC:B8:99:12:5A:34:31:C7:D6:4A:1E:BB:B3:5D:EC:09:CB
            X509v3 Authority Key Identifier:
                keyid:37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135322e302f32322d3232203d3e20323730353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:9e:7b:88:79:3d:97:94:28:2b:8f:d4:ad:c2:c8:63:17:
         96:de:4b:69:42:ba:74:df:2b:b3:5e:15:43:31:f3:22:00:9b:
         83:19:31:4c:b0:ad:ca:fe:27:8c:7f:d0:7d:cf:d7:db:ab:e4:
         c9:e9:88:c0:59:ab:3e:df:d9:27:32:b7:5e:cf:71:4c:5e:af:
         7a:e2:6d:22:4d:12:f0:33:09:71:d5:f8:c7:39:16:5e:2b:08:
         82:18:99:07:6e:da:fd:8e:35:cc:00:d0:8f:81:e1:7f:d9:b8:
         71:8c:e3:5c:9b:d8:fe:94:2e:e1:f6:d0:e9:63:78:57:26:ab:
         20:af:ff:87:ff:dd:54:85:b8:49:04:db:ae:ba:02:66:8b:48:
         2b:e7:38:3c:0f:c0:4e:ca:6a:8f:89:a2:cb:66:44:9a:13:2a:
         1b:43:47:76:6d:7b:f1:95:7b:30:a9:4a:e2:8d:7e:8c:09:61:
         b4:19:ee:00:e6:f9:53:57:15:38:8d:8a:d4:45:b8:20:46:bf:
         ea:04:dc:e5:aa:e3:5b:7b:73:62:ec:50:e7:dd:92:66:6c:9b:
         2b:36:8b:71:7b:8e:36:f1:ec:10:3f:e0:44:b4:a9:f6:fb:97:
         a5:7e:e9:d3:c2:c3:b9:44:d1:a4:22:a9:7a:66:95:c7:cd:a7:
         cc:42:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:31 2026 by rpki-client