Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          VT7sf3WeJtLO+tKigR3F8cgJToqdcB8qP+eGiqiTn7A=
Subject key identifier:   EE:8B:C6:A2:30:D3:FC:2C:21:75:48:65:38:31:7C:ED:83:36:A0:87
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       4C447A3EA4F67F52BEC9341AA9C139C1C8283FA0
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:25:59 +0000
ROA not before:           Wed 11 Mar 2026 13:20:59 +0000
ROA not after:            Wed 10 Mar 2027 13:25:59 +0000
asID:                     262535
IP address blocks:        177.67.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:44:7a:3e:a4:f6:7f:52:be:c9:34:1a:a9:c1:39:c1:c8:28:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:20:59 2026 GMT
            Not After : Mar 10 13:25:59 2027 GMT
        Subject: CN=EE8BC6A230D3FC2C2175486538317CED8336A087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:a4:62:d7:8c:f5:e9:42:62:e9:7c:bf:40:
                    89:b0:f7:77:7f:37:d3:1e:08:9f:f6:8a:3b:38:58:
                    d8:ac:f8:7c:73:dd:b5:b0:be:80:e4:26:6c:72:7a:
                    bd:0c:e2:81:c6:80:a1:90:7d:34:aa:d0:d4:86:6e:
                    91:c6:0f:24:0d:4d:d1:43:c8:99:b9:05:92:8d:41:
                    1a:45:66:eb:4b:e7:ec:2e:ac:fe:47:85:cd:f5:4f:
                    1e:6c:29:86:9f:98:25:04:44:78:ec:4d:e2:d9:18:
                    e5:8c:2d:0a:b2:c8:05:62:1c:e6:a5:71:c5:e9:47:
                    75:7b:27:f3:71:6f:75:e0:2c:f4:0a:85:45:85:ac:
                    34:4b:74:59:6a:79:53:00:0b:a6:45:71:c6:3a:50:
                    81:6f:a1:dc:73:99:ff:bf:00:9e:c8:92:c0:cd:16:
                    9a:08:30:80:6b:5d:09:75:96:71:e1:e3:e1:9d:14:
                    dc:c9:2f:0d:cc:06:a0:89:39:c2:aa:9b:cd:c2:57:
                    1e:68:49:10:3c:27:b8:b1:a3:fd:4b:7e:03:37:1e:
                    f2:d7:56:90:c5:7c:fe:f1:19:e0:b3:3c:c7:13:31:
                    79:33:1e:1d:2b:4d:4b:dc:c9:bd:48:56:fe:3a:0d:
                    97:4d:cc:bf:9e:78:11:23:0e:b1:22:4c:94:cc:6a:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8B:C6:A2:30:D3:FC:2C:21:75:48:65:38:31:7C:ED:83:36:A0:87
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:91:55:5b:62:93:5e:6b:43:31:e7:35:4a:d9:28:82:0b:
         23:d2:d2:86:91:cc:ef:3d:23:a2:24:ed:8a:27:7e:fe:25:9a:
         d5:67:9c:ab:7b:81:7d:75:39:1c:77:68:08:e8:97:ef:28:52:
         b6:91:23:30:7f:bd:93:a6:f3:0e:5d:14:35:ff:af:bf:70:f9:
         eb:b3:0f:94:42:81:b5:63:d4:cd:8f:23:ce:66:d0:ff:ba:da:
         d5:90:9a:fa:a5:5f:85:6f:a2:69:4e:8c:9b:e5:34:bb:12:71:
         b1:2a:7c:12:c3:dd:f7:3a:4d:c8:00:1c:fb:80:77:26:e5:99:
         50:8b:a8:6f:c5:ca:8c:80:4a:73:41:8a:43:7e:13:71:de:23:
         8a:ad:62:64:1c:de:40:97:e9:62:1c:7b:33:bf:08:95:dc:29:
         57:5d:a4:73:35:b2:81:2a:d8:7e:d3:8a:04:29:45:ec:22:09:
         74:4b:fa:22:26:0f:8d:da:75:2e:45:fa:86:cb:8c:71:9d:89:
         35:70:27:1a:e9:73:94:d3:04:16:3c:b2:29:12:2c:ab:a4:91:
         aa:46:bd:97:85:9f:2a:4a:dc:3d:26:f5:65:cd:c8:ae:78:f1:
         29:02:cf:2f:a1:55:0b:43:59:c7:54:5d:26:c5:48:b0:76:33:
         cf:7b:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:10:10 2026 by rpki-client