Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          FFOy9sobpum4Kz8rL+o12rHr7l2nPkSQMCeaJB7Q6iQ=
Subject key identifier:   DE:ED:AB:9C:EB:64:02:5F:BB:1E:D7:36:16:EF:28:04:7A:98:1B:76
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       4D7317A0FC1FE330A6BC8E0989A3DE4AEA771A33
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:25:54 +0000
ROA not before:           Wed 11 Mar 2026 13:20:54 +0000
ROA not after:            Wed 10 Mar 2027 13:25:54 +0000
asID:                     262535
IP address blocks:        177.84.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:73:17:a0:fc:1f:e3:30:a6:bc:8e:09:89:a3:de:4a:ea:77:1a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:20:54 2026 GMT
            Not After : Mar 10 13:25:54 2027 GMT
        Subject: CN=DEEDAB9CEB64025FBB1ED73616EF28047A981B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:0f:da:b9:1d:cf:93:8b:e7:64:db:c3:cc:
                    0e:b5:3b:b3:53:d1:b5:03:9b:ae:d6:da:79:e9:60:
                    ca:c8:e8:3e:07:75:e2:0c:4c:54:b1:27:7a:92:28:
                    36:67:a2:a5:a8:7d:1e:cf:00:5b:e7:4e:51:3a:2b:
                    37:ec:37:ae:35:4e:8b:42:db:c3:a4:fd:0a:ce:45:
                    f1:5c:49:df:30:0e:14:b1:3a:dd:93:74:fa:1e:7c:
                    41:e3:7b:0f:92:b3:9e:fc:1e:61:e3:d0:1f:fd:df:
                    53:ac:05:c1:12:39:6e:e8:42:9c:af:76:b2:01:4f:
                    f1:3c:cb:b7:da:0e:9a:45:0d:80:9b:ad:61:56:77:
                    91:6a:15:8e:be:29:99:04:23:5b:c1:dd:91:84:be:
                    00:52:c7:54:7b:14:29:1a:db:70:ad:de:20:1b:f8:
                    d8:9e:c4:7c:7a:7a:2d:c8:99:3b:34:a8:6e:6c:da:
                    b9:55:78:fb:3e:fd:73:b1:4d:ed:90:96:bb:b5:23:
                    ba:df:53:cd:e4:08:4c:e3:db:e5:77:a1:f8:3e:a5:
                    b1:7e:cb:76:c8:df:58:57:d1:b2:62:cb:1f:d1:a1:
                    45:47:80:b4:71:ea:6c:30:8b:41:66:e8:45:7e:07:
                    68:f7:68:09:bf:77:e8:91:a8:4b:42:b2:a3:d0:14:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:AB:9C:EB:64:02:5F:BB:1E:D7:36:16:EF:28:04:7A:98:1B:76
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231322e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:b6:ed:5a:63:a0:e2:1a:07:9b:2f:52:f4:69:31:10:a9:
         25:53:43:f1:7c:74:2e:5a:4a:1c:62:5a:25:4b:5c:42:6f:be:
         ab:91:e4:3c:5e:74:39:e8:de:13:3e:f0:e2:e9:52:21:e9:4e:
         52:29:fe:2f:ca:16:08:83:fa:cb:e2:1c:65:ac:87:f8:11:58:
         e1:ba:6f:c7:5a:11:8b:57:43:57:fe:00:f2:b3:c8:3f:9a:5c:
         1c:4d:02:df:8e:2d:65:68:5e:61:7c:b0:a9:db:09:d4:73:a5:
         e3:99:76:ba:fc:72:20:be:01:bf:63:f5:87:49:67:d4:16:bf:
         91:bc:07:21:7a:a0:11:b7:63:ad:d6:fc:11:29:8f:b3:27:6f:
         15:f7:32:f8:f3:74:6c:17:3a:4f:0b:1f:97:52:8b:39:11:e6:
         a6:d5:7e:21:bc:78:21:ab:63:4e:8a:ab:61:a4:a9:b8:4c:2c:
         b1:6f:de:a9:dc:33:e8:cf:51:ca:5c:b1:1b:d6:12:a3:3d:8c:
         51:62:a8:4a:73:80:e1:db:5b:21:3a:bf:1e:bb:6c:25:e7:57:
         88:0a:80:1d:2c:83:5b:e8:d4:d3:8a:90:66:18:d5:36:fd:b9:
         58:01:e4:90:ca:0c:c8:8e:57:79:4f:87:fa:8c:ce:f7:71:91:
         58:b7:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:10:06 2026 by rpki-client