Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
File:                     3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa (raw, json)
Hash identifier:          cmAUPy4+wgTNtRFKcRfZUTMy6Ye0iaK8wGyOV+vQUO4=
Subject key identifier:   58:6D:F7:9C:4C:CF:9B:61:03:64:47:34:18:BE:1E:70:48:E0:4A:7E
Certificate issuer:       /CN=1C5A94248515529F06DE20A017F7CC42EFEAD24F
Certificate serial:       7E0D2F978523FCA7258C41F196FA48EAB7C2BE14
Authority key identifier: 1C:5A:94:24:85:15:52:9F:06:DE:20:A0:17:F7:CC:42:EF:EA:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
Signing time:             Wed 04 Mar 2026 13:49:22 +0000
ROA not before:           Wed 04 Mar 2026 13:44:22 +0000
ROA not after:            Wed 03 Mar 2027 13:49:22 +0000
asID:                     270797
IP address blocks:        177.131.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.crl
                          rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:2f:97:85:23:fc:a7:25:8c:41:f1:96:fa:48:ea:b7:c2:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5A94248515529F06DE20A017F7CC42EFEAD24F
        Validity
            Not Before: Mar  4 13:44:22 2026 GMT
            Not After : Mar  3 13:49:22 2027 GMT
        Subject: CN=586DF79C4CCF9B610364473418BE1E7048E04A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:bc:26:82:be:ff:c2:56:93:a9:61:52:1e:
                    f3:44:9d:d4:92:21:26:4c:0e:c4:30:3d:4d:21:66:
                    30:d4:76:ef:58:f7:eb:c0:39:f1:0d:db:d6:10:f2:
                    04:ed:20:86:24:a3:87:07:48:b3:af:9d:b0:c8:19:
                    cf:9c:bb:3e:74:24:ef:68:40:ab:7c:e0:0a:1d:90:
                    f7:a1:68:e0:54:d1:66:b0:71:33:53:17:28:eb:3e:
                    aa:0d:da:b5:7f:52:f4:a2:8d:4d:77:27:30:03:c9:
                    a0:c9:4c:e0:3c:e8:92:e6:39:a2:aa:48:a8:e5:8f:
                    49:e8:e0:ab:27:f0:18:83:c3:60:54:a1:06:c1:30:
                    a8:ae:2b:79:66:35:7c:6d:70:a4:8a:09:9b:68:47:
                    51:16:43:af:14:d1:99:9d:04:9f:28:57:d2:85:87:
                    67:69:49:d2:df:6b:27:9d:77:09:92:03:b1:8b:c0:
                    ee:17:cc:a1:7c:69:de:75:0d:10:f5:4d:51:b9:0f:
                    41:29:be:54:36:5d:0d:e7:73:8a:cb:ca:07:18:b0:
                    e0:4a:f3:f0:5c:59:0d:39:f8:c2:9c:f9:a1:9d:31:
                    d2:e2:8a:ed:9e:56:1f:32:97:b1:87:0b:39:71:d9:
                    63:a3:74:49:02:b9:db:bb:7f:47:eb:9a:50:b7:04:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:F7:9C:4C:CF:9B:61:03:64:47:34:18:BE:1E:70:48:E0:4A:7E
            X509v3 Authority Key Identifier:
                keyid:1C:5A:94:24:85:15:52:9F:06:DE:20:A0:17:F7:CC:42:EF:EA:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:a5:cd:16:d6:a4:9a:90:ad:1e:97:e3:57:74:77:a7:db:
         fe:03:f6:27:3f:5e:b3:58:30:7c:0a:4b:82:79:0a:2e:ff:01:
         d3:a0:de:36:1b:2c:20:16:2f:e3:7f:46:1e:c7:02:36:97:3d:
         ab:1f:0c:b9:b5:73:a6:fc:ce:02:eb:30:0f:d2:e5:ff:b5:61:
         ea:ba:92:0e:fa:e2:c5:cf:4f:9a:7f:bc:58:db:79:b9:c4:e8:
         f5:8b:d8:86:67:c1:9e:3b:09:18:8f:b7:bd:27:a7:c9:c9:c4:
         f4:55:21:bc:88:8a:1d:90:d6:15:fe:04:9c:ca:15:3b:6c:26:
         ac:9e:ab:28:5d:1e:a8:5c:b0:5d:cb:83:35:74:84:01:3b:a6:
         16:90:d4:db:be:73:b7:c7:db:2b:1a:c6:0a:7a:16:57:88:e9:
         03:a6:dc:86:f1:37:d7:d4:05:3f:35:f5:d0:24:8e:d9:ff:5f:
         4b:4b:22:44:84:a1:f0:85:b1:46:65:a1:51:18:8f:cb:f9:33:
         ad:c8:a3:34:ec:58:ac:12:24:c9:b2:46:4f:07:25:3b:69:20:
         97:dc:9d:28:e2:b9:7d:05:36:c3:8a:e8:f1:83:ae:8b:36:a4:
         5d:80:90:60:82:49:c4:f4:8d:64:e7:d1:e2:73:c8:2b:f5:64:
         e0:cb:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:17 2026 by rpki-client