Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32332d3233203d3e20323632353335.roa
File:                     3137372e38342e3231342e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          fioeXlxBHWkrsIDrRaOx4ndZhsuvdn2SZoy9khmF7NY=
Subject key identifier:   59:A6:71:9B:6F:FC:C4:07:9D:C7:4F:BE:E5:23:00:71:4B:BD:7E:81
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       3DD649344327B7F580E44DFB7B9DAA6B40F92101
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32332d3233203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:26:10 +0000
ROA not before:           Wed 11 Mar 2026 13:21:10 +0000
ROA not after:            Wed 10 Mar 2027 13:26:10 +0000
asID:                     262535
IP address blocks:        177.84.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d6:49:34:43:27:b7:f5:80:e4:4d:fb:7b:9d:aa:6b:40:f9:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:21:10 2026 GMT
            Not After : Mar 10 13:26:10 2027 GMT
        Subject: CN=59A6719B6FFCC4079DC74FBEE52300714BBD7E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:f0:b9:f9:c4:23:6b:3b:07:dc:fc:2d:a0:
                    1a:c3:33:dc:12:69:28:71:f1:f4:e7:bd:9b:b8:e1:
                    e6:7a:c0:07:5a:f1:60:6c:00:e5:f5:6a:19:e7:90:
                    18:2a:4d:81:59:38:a8:51:52:d3:82:36:df:ce:8d:
                    85:9d:72:0f:1d:40:7c:6d:d2:5f:bc:42:23:e9:78:
                    9d:84:a7:aa:ba:35:81:ac:a1:b9:30:d9:9d:0a:92:
                    e0:1e:10:f4:46:48:5f:5b:b9:1c:f5:69:ca:13:ae:
                    ec:f2:1a:21:1b:42:c8:01:42:aa:21:04:c9:c6:60:
                    70:d5:72:24:ad:a7:1b:40:f1:d6:4f:8a:87:32:a6:
                    d1:41:13:a1:6d:a8:a7:5f:4e:38:3d:ae:70:e9:b1:
                    ac:0f:f4:7d:75:5b:b3:7b:7f:f1:fc:eb:43:b3:54:
                    07:71:8b:ce:b7:04:15:0d:10:fa:82:ba:1d:b7:ba:
                    59:61:57:bc:e7:30:1c:97:37:6d:28:b1:04:16:4a:
                    b9:47:63:06:8f:b2:e1:a2:7a:30:b5:a8:6d:4f:cc:
                    1c:38:35:70:b5:b8:0a:8f:a3:83:89:f5:1e:d5:1b:
                    bf:38:b5:67:50:4d:a7:c2:a3:de:59:6b:2b:f9:d4:
                    d2:b6:16:e8:11:37:ba:de:29:21:86:88:f3:cf:e0:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:71:9B:6F:FC:C4:07:9D:C7:4F:BE:E5:23:00:71:4B:BD:7E:81
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e38342e3231342e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:90:8f:7d:a3:99:39:00:5f:56:2f:99:3a:c9:0c:8e:fe:29:
         cc:42:41:f5:e0:a6:fb:49:08:d3:41:7c:50:2b:7b:6b:af:c4:
         eb:15:a2:70:a6:00:d3:e3:0b:e5:d4:86:68:17:70:da:f8:c4:
         f5:60:4b:65:7f:85:a7:26:b6:8b:e7:9b:97:09:6a:35:3d:0a:
         3c:cd:f7:33:8c:97:d6:5f:0e:5c:3f:9d:26:d8:f0:5b:05:5d:
         e7:75:04:54:c6:7e:d5:69:bf:00:d2:f5:dc:46:df:d6:81:94:
         42:25:77:63:66:00:85:89:aa:73:40:be:6a:04:e1:f3:16:be:
         e0:2a:d3:99:d4:fb:e7:d6:ec:74:b7:a4:73:c4:1f:cc:fc:54:
         50:5b:3c:99:9a:ff:07:c3:37:ea:64:fb:a9:5e:ee:96:c7:00:
         07:43:2e:43:10:b7:36:8d:1e:da:29:7c:0c:75:c3:9b:06:2b:
         6e:af:ba:ce:73:ee:77:46:69:33:30:60:7d:4d:64:a6:3a:e3:
         2c:e6:16:b5:24:49:5c:85:cf:cb:9a:85:c9:c8:0c:c1:ba:5d:
         7d:61:b6:72:2a:93:e4:8b:88:56:c1:6c:92:b6:c1:51:cf:a3:
         91:c8:dd:73:0a:c8:22:0f:f0:a6:f9:96:34:ce:50:cf:c5:c1:
         26:b6:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:29 2026 by rpki-client