Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135352e302f32342d3234203d3e20323730353135.roa
File:                     3138372e34392e3135352e302f32342d3234203d3e20323730353135.roa (raw, json)
Hash identifier:          PAR0+lSbrxYP7P8f+N+itmPbl7u498p8UvBrmJK1SVw=
Subject key identifier:   D9:69:DB:DA:11:F1:38:0F:21:F1:88:5C:E9:5F:38:40:42:17:84:35
Certificate issuer:       /CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
Certificate serial:       5240C505A90FE4A74094A042AFE91F11FCD257EA
Authority key identifier: 37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135352e302f32342d3234203d3e20323730353135.roa
Signing time:             Mon 04 May 2026 16:55:35 +0000
ROA not before:           Mon 04 May 2026 16:50:35 +0000
ROA not after:            Mon 03 May 2027 16:55:35 +0000
asID:                     270515
IP address blocks:        187.49.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl
                          rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:40:c5:05:a9:0f:e4:a7:40:94:a0:42:af:e9:1f:11:fc:d2:57:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
        Validity
            Not Before: May  4 16:50:35 2026 GMT
            Not After : May  3 16:55:35 2027 GMT
        Subject: CN=D969DBDA11F1380F21F1885CE95F384042178435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:0a:09:b7:aa:65:17:85:ba:13:27:96:9c:
                    15:06:80:d2:ab:ac:1d:57:e5:4b:b6:98:1b:70:38:
                    70:1b:b0:fc:d4:3d:f9:ff:94:b8:46:b8:c6:39:30:
                    67:6c:c9:8f:c2:3c:4a:19:11:0e:3f:58:0f:5b:0b:
                    58:57:d4:c8:55:15:a9:fd:e9:97:c3:89:fa:ac:8d:
                    22:87:54:13:ce:b1:b0:ac:06:da:bc:57:d8:66:e5:
                    d5:c4:b1:d6:8b:14:f3:3f:3e:ce:1a:50:da:ce:29:
                    22:35:e2:df:45:ae:4d:5c:0c:8a:50:ee:cb:f1:42:
                    12:90:86:6a:23:3a:7a:96:6f:85:77:b0:93:aa:19:
                    01:a4:07:41:bd:eb:36:d5:11:a7:60:8d:85:9a:08:
                    32:36:89:da:98:6d:99:34:8c:d7:f2:b6:09:15:16:
                    12:9b:19:db:4a:8e:8f:0c:15:e9:72:fa:d6:f4:d3:
                    42:12:c0:1d:64:9e:09:dd:96:c6:4c:33:bc:f0:9a:
                    f0:43:61:d3:91:97:2f:d5:26:e0:8c:13:d0:e0:cb:
                    29:3f:12:23:e9:47:d0:78:85:1f:b9:ff:7e:83:0d:
                    6f:f1:83:ef:74:fc:de:c5:d6:d3:9e:a2:f8:15:f3:
                    26:c4:68:b1:3c:4c:61:00:17:5a:4f:a3:17:01:64:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:69:DB:DA:11:F1:38:0F:21:F1:88:5C:E9:5F:38:40:42:17:84:35
            X509v3 Authority Key Identifier:
                keyid:37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/3138372e34392e3135352e302f32342d3234203d3e20323730353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:99:73:d1:7f:63:0d:54:9c:00:f4:63:83:b8:1a:d6:3e:
         87:4d:f9:d8:88:16:7b:d9:3a:2d:3b:f6:02:dd:67:ba:f6:17:
         83:93:79:69:dd:ec:90:a5:c2:78:fd:de:a2:cc:2d:d1:07:5c:
         35:15:33:5d:e4:dc:90:96:a8:d2:d9:8f:1a:0a:4a:89:8b:5c:
         8f:8a:51:f2:2c:ef:a7:17:5f:3a:21:65:7d:3c:d4:2d:7a:3e:
         69:21:71:0f:4e:dd:e7:9d:25:15:ba:93:37:fe:21:4b:4b:1c:
         06:75:d6:51:93:e5:f2:45:b9:76:55:af:6c:15:ab:64:50:26:
         8b:5f:2e:12:68:90:ee:15:1a:f4:50:f9:58:cf:42:1e:23:50:
         7d:0e:26:2b:b7:ae:0d:c1:80:34:8f:f1:77:08:96:a2:75:19:
         e8:da:38:12:40:35:9d:d3:3c:55:68:66:ce:fe:4f:6c:0a:3a:
         5c:fc:3e:9f:f4:39:ed:35:a7:cc:f8:7e:dc:87:d2:ba:5a:ce:
         a6:1f:c7:76:e7:df:e7:58:6c:89:16:90:1c:62:2e:b1:e0:0f:
         bb:ef:2d:b2:c6:44:97:6f:6e:2e:65:e6:36:e0:11:e5:94:1f:
         ef:df:33:0f:88:d2:df:04:94:3a:6e:73:00:84:68:f9:a9:c4:
         9a:b2:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:30 2026 by rpki-client