Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32312d3231203d3e20323632353335.roa
File:                     3137372e38342e3230382e302f32312d3231203d3e20323632353335.roa (raw, json)
Hash identifier:          IuMXF4bJzG/veSKiwc/ufoHNg6OGmnbSt6Ovj8jBb+c=
Subject key identifier:   98:A0:5E:DF:B4:77:FE:1F:AA:D0:F6:D2:0B:BE:B5:2C:D5:B2:61:C8
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       3CD9D41C98A62BD14845600EF392FF2560E59D5C
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32312d3231203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:26:01 +0000
ROA not before:           Wed 11 Mar 2026 13:21:01 +0000
ROA not after:            Wed 10 Mar 2027 13:26:01 +0000
asID:                     262535
IP address blocks:        177.84.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d9:d4:1c:98:a6:2b:d1:48:45:60:0e:f3:92:ff:25:60:e5:9d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:21:01 2026 GMT
            Not After : Mar 10 13:26:01 2027 GMT
        Subject: CN=98A05EDFB477FE1FAAD0F6D20BBEB52CD5B261C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:89:b8:66:e2:8b:0b:dc:17:31:d4:d9:03:
                    a0:46:77:73:ea:cf:d8:30:74:41:43:31:17:30:01:
                    44:f0:c5:9c:b8:9e:80:0b:3f:73:ca:9e:7d:22:ad:
                    2f:0f:3f:78:af:8c:e1:a5:58:30:86:5f:1e:36:7a:
                    9e:41:84:15:a5:68:78:81:95:94:26:f7:da:6f:7f:
                    de:e0:f3:b9:2d:7b:77:74:7e:37:2a:7a:5d:18:be:
                    3a:b7:3a:1f:00:8e:b4:02:14:25:a6:4b:1d:4a:62:
                    54:6d:31:1f:b4:6e:87:7d:ff:41:51:55:00:2b:2d:
                    91:37:f1:4d:4f:b4:eb:d3:05:a6:73:32:45:3e:c5:
                    af:96:0b:79:0e:99:5d:8d:78:20:26:07:5b:60:a0:
                    39:e1:55:f3:ef:f6:c6:09:57:a0:96:80:be:ee:d7:
                    80:25:77:3c:4d:67:10:75:7d:70:1a:f8:b6:78:a4:
                    8c:99:f1:9a:e1:87:63:0a:8e:4d:7a:29:d0:2a:cc:
                    60:df:89:4f:4e:a8:7e:3b:c6:70:64:60:9d:5b:5e:
                    6a:be:b4:11:0c:74:48:65:c9:50:31:a1:42:15:09:
                    11:16:05:35:66:12:38:f4:7b:82:ac:5c:07:fd:57:
                    a3:b0:be:d1:13:87:01:58:3a:00:f5:76:ed:37:30:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:5E:DF:B4:77:FE:1F:AA:D0:F6:D2:0B:BE:B5:2C:D5:B2:61:C8
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32312d3231203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:98:37:c6:46:bb:21:cc:cd:5f:5f:ea:d0:46:75:8c:5f:bd:
         a6:d4:ff:3e:d6:91:21:e6:9e:0f:cb:88:2b:a3:bd:d4:ca:87:
         c1:84:c9:c2:1c:9b:4c:d1:1e:f0:b4:0f:06:54:ac:41:4c:fb:
         0d:44:b7:b5:d0:51:41:b5:b5:54:f2:3b:70:15:53:75:ac:6b:
         2a:62:6c:b4:c8:43:3e:b9:ec:f2:83:ff:84:f6:ab:34:4f:35:
         88:f6:fc:1b:42:a6:a1:22:c1:90:02:56:88:e3:df:bf:96:56:
         6a:c5:84:b7:11:8a:02:42:72:5e:31:2b:fc:b1:9d:ed:f4:4e:
         19:2f:69:65:e9:59:22:62:d0:ad:b0:4a:77:11:59:d1:8a:52:
         21:40:6f:ae:2b:be:ed:39:a8:f8:03:19:db:63:8f:52:18:07:
         b0:a0:fc:07:be:f0:1b:f9:1a:2f:47:23:a5:2a:99:3a:78:eb:
         47:58:e8:c4:eb:f7:d8:19:13:a4:87:df:18:97:7e:a2:93:df:
         47:ff:54:13:c7:c9:be:8e:24:a5:68:fd:38:f3:91:fb:18:03:
         a0:2f:ba:70:55:4d:23:df:b7:4b:09:77:ff:fc:f7:f6:3f:d7:
         3c:26:df:10:90:64:46:3d:ac:59:f8:14:a7:b2:e3:2d:a7:95:
         ed:9c:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:10:00 2026 by rpki-client