Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          U2BYaBcZLjD/W4XvPtIQPN+Pad/Z17g5zK+HmBW8qVE=
Subject key identifier:   C0:CF:F1:55:60:F9:23:CB:DD:20:47:AD:06:4C:B6:AA:5E:56:D7:FC
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       6D6C790178752134F2618228442D5DB06F90F7E1
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:26:03 +0000
ROA not before:           Wed 11 Mar 2026 13:21:03 +0000
ROA not after:            Wed 10 Mar 2027 13:26:03 +0000
asID:                     262535
IP address blocks:        177.67.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6c:79:01:78:75:21:34:f2:61:82:28:44:2d:5d:b0:6f:90:f7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:21:03 2026 GMT
            Not After : Mar 10 13:26:03 2027 GMT
        Subject: CN=C0CFF15560F923CBDD2047AD064CB6AA5E56D7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:14:2b:24:d7:d9:62:28:a2:c1:81:ca:8e:
                    94:cb:02:ac:6c:4f:84:77:bf:75:d8:78:e3:8d:9f:
                    d1:1c:42:1d:62:11:81:14:18:f5:db:91:be:6e:53:
                    17:68:b7:3c:e7:21:1f:30:7b:4a:29:1b:17:5e:fd:
                    39:2c:03:78:a0:c8:bc:75:54:fb:60:92:74:11:e9:
                    83:0e:e0:58:23:73:fe:1f:27:91:b7:d4:5e:57:e4:
                    4e:4e:cb:60:26:63:4e:31:d0:50:46:b0:62:9e:b5:
                    30:0f:30:9d:0f:e9:a0:e2:b4:58:0d:7e:1d:da:04:
                    ed:4d:e0:4c:be:be:19:36:06:19:2a:6b:13:05:25:
                    d5:95:57:ec:5d:df:6f:e6:3c:7e:b5:b0:54:60:02:
                    81:a3:b6:e5:ba:49:63:2d:5c:91:83:1c:6a:32:24:
                    0d:71:ef:ee:33:3b:2c:44:7a:dc:16:ff:da:b8:ec:
                    1b:98:11:74:8a:a5:5d:7b:f3:45:0f:22:f3:91:d2:
                    5c:78:02:06:d2:ed:87:a0:57:26:d1:f2:bd:13:81:
                    5d:85:af:0c:18:d7:d5:bd:ab:b1:05:bd:e6:20:2d:
                    8e:87:ff:14:66:98:f6:26:d5:ea:05:d2:18:9c:2e:
                    a3:ce:9e:c7:d4:44:ff:cd:25:28:80:0c:e2:d8:94:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CF:F1:55:60:F9:23:CB:DD:20:47:AD:06:4C:B6:AA:5E:56:D7:FC
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3c:db:e1:09:78:67:40:60:0e:49:df:dd:d4:35:b9:c9:eb:
         0b:ab:36:d5:2c:03:88:32:31:ba:0a:e1:d4:a5:aa:9d:d8:80:
         3a:fd:20:0c:62:c1:7f:65:f4:e0:e0:14:8a:8d:98:30:7d:d7:
         b2:88:64:91:63:bb:31:97:4d:b3:f3:a8:c7:bf:73:d7:79:85:
         7f:bc:e3:86:a0:fc:0b:4a:61:39:15:04:ce:dd:12:57:91:18:
         22:b3:00:a9:aa:3e:bf:36:f3:e9:8c:1f:e8:56:a8:b4:07:7e:
         53:80:ad:b9:8d:0c:35:e5:60:58:b5:f0:d4:e1:3d:44:89:ff:
         03:c5:7e:58:2c:a1:91:88:bb:3a:0f:11:7b:7c:bc:58:85:22:
         f5:d1:ac:e0:dd:c8:19:b8:e3:fb:1f:5b:9e:05:5d:81:0c:6b:
         57:6a:c3:ed:9c:04:0c:1f:7e:f8:27:79:be:00:19:25:03:f2:
         7f:f9:27:58:b8:50:72:f0:bf:5f:d6:77:77:bc:a5:61:37:aa:
         a7:a0:da:e3:e8:63:78:80:99:c8:ab:b5:f3:7f:26:9f:2c:a3:
         86:12:2a:33:01:53:d0:06:bd:72:96:89:1a:82:2d:5c:ba:a4:
         aa:b6:9f:c5:0c:f1:4c:a1:02:2b:11:ec:99:42:96:dd:15:6f:
         71:17:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:43 2026 by rpki-client