Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa
File:                     3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          P3aksLOYEtFuefPZy7brZsOo7gzArfSGeQ3xpJ+jy8I=
Subject key identifier:   04:67:50:89:61:9A:36:76:6F:1D:67:24:A7:03:5C:79:76:E8:19:89
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       4FCBE60D182F5CDAB82A7AEDFD45A2A8F07F2345
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:25:51 +0000
ROA not before:           Wed 11 Mar 2026 13:20:51 +0000
ROA not after:            Wed 10 Mar 2027 13:25:51 +0000
asID:                     262535
IP address blocks:        177.84.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:e6:0d:18:2f:5c:da:b8:2a:7a:ed:fd:45:a2:a8:f0:7f:23:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:20:51 2026 GMT
            Not After : Mar 10 13:25:51 2027 GMT
        Subject: CN=04675089619A36766F1D6724A7035C7976E81989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:6e:03:28:4a:55:b3:9f:eb:70:5f:9d:d9:
                    d3:6e:96:b5:00:74:55:df:b2:fd:df:5d:c5:32:f3:
                    51:bd:b0:5f:73:64:b2:61:a1:3a:9b:a0:59:87:06:
                    fd:63:1d:32:b4:df:9e:13:96:39:3e:cc:9d:f5:7b:
                    71:28:64:a0:f2:0e:09:a3:79:64:ba:26:0a:f0:08:
                    d6:0e:3e:33:40:58:b1:89:49:0b:54:c2:9b:43:c7:
                    1a:c5:5e:c6:94:8e:bd:8d:a5:5c:ea:0f:ca:7e:88:
                    69:06:62:52:f1:1f:7f:19:cb:26:bd:14:3e:c9:74:
                    53:be:bd:25:18:73:e2:93:c5:60:6c:74:28:95:7a:
                    e1:f0:a5:a3:46:dc:47:03:f1:32:b1:67:db:4f:55:
                    65:be:87:1f:ad:25:25:82:a7:7e:d3:a0:af:d6:5b:
                    05:ab:5d:f7:54:b2:e5:9a:e9:27:2a:d2:dd:fc:88:
                    87:fd:83:a5:79:4d:00:67:95:95:c9:14:3c:a8:5e:
                    3e:22:e1:2b:c2:e6:f9:d9:f1:7a:dc:0e:09:6d:75:
                    d7:1e:84:cb:e9:18:43:bb:6e:1d:0b:c5:b3:e0:61:
                    81:94:96:76:f6:8b:af:1e:03:69:4c:ce:36:dc:00:
                    8f:9a:f4:08:13:d2:ef:0b:40:63:cd:9a:1c:01:70:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:67:50:89:61:9A:36:76:6F:1D:67:24:A7:03:5C:79:76:E8:19:89
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3230382e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:85:65:e9:d3:25:03:e9:8e:71:7b:9b:d4:b5:da:64:be:2c:
         56:1c:c7:56:77:e6:a3:02:ad:8f:2e:aa:b3:c5:fc:e9:80:31:
         fa:89:aa:96:11:52:08:b5:32:f5:36:d6:6b:b2:ce:ce:dd:17:
         8a:19:c1:da:d0:24:cd:fd:e6:e8:90:cd:c5:82:71:e1:a9:5f:
         37:77:bf:be:e6:c2:3d:bd:d2:f7:b6:ff:8f:b3:80:57:3f:cc:
         e9:3f:af:22:1e:d2:6b:0e:d7:bf:30:27:b4:a6:5d:43:99:c1:
         e1:b5:3c:75:ba:39:7d:94:b3:4c:c1:24:6f:66:27:ee:59:0b:
         61:3b:38:92:68:38:ca:5b:0c:89:a0:fa:7e:89:b4:53:75:4a:
         81:71:2c:e8:60:0e:a3:ac:d3:c3:b4:a4:13:b6:dc:dd:67:29:
         71:4a:05:7d:09:63:be:1a:89:51:10:83:ef:f0:f8:2b:89:e3:
         c1:b5:1d:89:8f:67:20:fc:0b:85:0d:ca:42:61:18:af:94:eb:
         9d:8a:4d:f2:bc:8b:aa:5c:1d:d7:61:d2:6b:94:3e:88:3e:f7:
         07:8d:5a:6f:4f:c9:1a:ca:cd:0a:a3:49:7d:b5:d9:15:ec:0a:
         a5:25:15:bc:72:e4:9b:c1:cd:64:38:ba:aa:30:12:27:9d:eb:
         b3:11:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:53 2026 by rpki-client