Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa
File:                     3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (raw, json)
Hash identifier:          NZujrVTIXEbJ/ah47MK1vGl3GMmJWho+DffI2Yz4cU4=
Subject key identifier:   4A:3B:ED:02:E1:C7:63:B4:FE:3B:C0:88:70:42:E8:83:A9:42:B9:95
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       2F5DEE63D3F33AE951EF44631AFDE7D598384D0F
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa
Signing time:             Thu 30 Apr 2026 23:01:35 +0000
ROA not before:           Thu 30 Apr 2026 22:56:35 +0000
ROA not after:            Thu 29 Apr 2027 23:01:35 +0000
asID:                     271196
IP address blocks:        179.49.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5d:ee:63:d3:f3:3a:e9:51:ef:44:63:1a:fd:e7:d5:98:38:4d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Apr 30 22:56:35 2026 GMT
            Not After : Apr 29 23:01:35 2027 GMT
        Subject: CN=4A3BED02E1C763B4FE3BC0887042E883A942B995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:c7:bf:ae:d6:06:99:24:68:0d:dd:20:a1:
                    e4:3a:21:70:33:95:2a:04:3e:f1:3f:39:b4:63:40:
                    ef:51:5f:bb:76:0a:57:c6:19:6e:0c:c2:22:35:62:
                    30:38:51:9d:5b:cb:b3:0e:2c:8d:fd:0e:6e:c2:d0:
                    2f:1c:bc:83:7d:5d:70:27:aa:95:1a:79:6a:ac:17:
                    64:4a:b2:e0:68:d4:0f:fc:51:3a:94:35:1e:22:52:
                    e4:e4:69:45:74:fd:27:4a:c1:cf:83:ad:05:14:9e:
                    2b:86:b9:a5:dc:b1:6b:24:2f:70:d0:e2:60:4f:96:
                    bf:cd:45:3d:aa:94:ab:04:95:95:21:c5:d3:b7:04:
                    07:84:96:32:74:48:aa:41:fb:9d:fb:1b:0c:94:44:
                    f3:f1:6a:a8:60:23:05:2e:b4:f3:6a:a0:6f:6a:8e:
                    ae:bf:0b:36:99:55:58:31:eb:42:f8:15:6a:c5:e6:
                    bc:5d:66:89:a0:ff:3e:20:ae:fb:8b:f4:0d:a7:3b:
                    d8:37:0d:9e:a8:4b:dd:d1:46:5a:d2:a2:85:cd:56:
                    5e:45:9c:fb:89:8e:78:56:fd:80:c4:23:12:7f:20:
                    87:44:e1:93:e6:ac:4c:4e:8b:1a:14:dd:07:47:94:
                    10:7b:f3:9b:f7:b6:aa:d8:a6:ce:fc:80:9d:c6:e9:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3B:ED:02:E1:C7:63:B4:FE:3B:C0:88:70:42:E8:83:A9:42:B9:95
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:30:ba:e5:83:a4:58:75:b7:11:d4:76:9b:c4:5d:bd:8b:
         d0:2f:8e:7f:c6:40:2f:68:57:8b:28:f6:4d:37:dd:54:69:83:
         cf:45:54:b6:70:8d:1d:88:91:89:24:a4:ae:2e:6b:a8:bd:7c:
         a5:00:75:0a:1f:fa:8a:ae:de:69:5e:2f:3c:20:c2:35:13:74:
         a6:6f:8e:48:43:42:49:f1:fc:ad:e4:79:bb:63:4e:bb:c9:e7:
         2b:13:bb:a2:aa:a1:45:f3:6e:d6:51:23:73:88:59:16:86:d0:
         13:d6:e4:76:f0:05:cf:7b:8d:45:a0:3e:4b:c8:f3:c8:a2:b6:
         dc:29:33:94:53:74:f0:04:11:7a:60:d2:09:3f:d0:fb:7e:c0:
         af:34:ab:e3:98:b6:0b:e4:e8:22:fd:ed:f0:1a:32:81:6e:ba:
         b5:50:ae:89:be:a4:22:05:8b:e4:78:81:c0:11:8b:c1:6e:67:
         9e:5a:66:ec:16:15:dc:4d:5b:34:05:2a:28:42:23:b5:97:41:
         9f:56:bb:18:c7:8c:ac:0e:f4:40:1f:31:fb:e2:ee:8a:ad:d9:
         75:70:70:e6:c7:00:30:31:ae:ff:27:63:d0:dd:2a:40:d4:25:
         cb:ca:f8:a7:fc:c3:e8:6c:7a:a2:52:5c:38:ed:4e:a5:7f:bd:
         25:c2:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:44:44 2026 by rpki-client