Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa
File:                     3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa (raw, json)
Hash identifier:          wrOqIfh9fEKXoFSBK+Fw5524/rKNzE+dycZ3SqGtfi0=
Subject key identifier:   B0:39:B5:95:12:56:AB:37:F5:70:0D:64:C5:FD:B9:CD:61:8E:43:84
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       48147F43751776AB18B353CE274A57ED13B17844
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa
Signing time:             Tue 28 Apr 2026 11:30:01 +0000
ROA not before:           Tue 28 Apr 2026 11:25:01 +0000
ROA not after:            Tue 27 Apr 2027 11:30:01 +0000
asID:                     52771
IP address blocks:        177.107.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:14:7f:43:75:17:76:ab:18:b3:53:ce:27:4a:57:ed:13:b1:78:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: Apr 28 11:25:01 2026 GMT
            Not After : Apr 27 11:30:01 2027 GMT
        Subject: CN=B039B5951256AB37F5700D64C5FDB9CD618E4384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:f5:8e:5f:bb:c6:6a:dc:e9:7f:bc:ca:d9:
                    a0:6e:fa:7c:6a:ab:c5:27:60:f1:54:40:51:03:c2:
                    e1:22:23:a8:bc:e5:64:7e:4c:9a:a5:e4:c8:7e:25:
                    44:c4:58:b6:43:69:1b:7d:51:32:37:48:56:fb:2b:
                    9c:b6:1a:bc:1b:a6:84:a0:e2:b1:d3:8d:73:02:62:
                    00:33:ff:4e:46:22:62:de:99:74:e3:3c:4f:39:48:
                    d5:27:82:1d:13:b0:09:d2:ee:27:e8:66:6f:f2:45:
                    d2:b1:3d:1f:9f:89:01:de:fc:4b:9e:f0:65:33:f6:
                    ee:36:77:54:5a:cf:5d:87:06:35:86:ec:e8:e0:89:
                    5a:c6:46:64:d3:82:56:f2:c5:c5:b2:41:5c:56:fb:
                    e2:fe:b7:7a:20:79:64:73:68:d9:38:0f:cb:9c:da:
                    52:83:af:49:e7:73:1f:32:63:66:1f:53:b7:7a:e4:
                    85:bd:7b:4c:0b:8a:6a:97:96:7e:09:e6:d8:f4:35:
                    81:00:d4:0a:de:01:cc:d2:c6:c2:ae:8e:53:36:18:
                    0f:98:58:35:de:5f:71:3f:65:61:b8:88:34:b1:eb:
                    ff:8a:38:a2:c2:78:cc:95:a2:38:86:fa:8f:4e:29:
                    c9:a4:33:c3:b1:7a:90:99:5b:6f:3a:91:1e:e8:3f:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:B5:95:12:56:AB:37:F5:70:0D:64:C5:FD:B9:CD:61:8E:43:84
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:70:b9:65:f5:0b:fb:33:ce:e5:58:35:7a:e2:b2:33:0b:
         e9:a4:b5:ee:cb:45:ca:e3:00:71:66:01:5f:dd:25:3b:87:49:
         39:6e:93:19:73:d2:c8:e0:68:df:1a:fa:1b:ef:96:66:5f:66:
         bb:c1:5a:bf:6c:f1:a2:01:7b:27:ca:44:88:d6:2f:e8:da:67:
         aa:b8:48:3e:1e:b9:ba:82:bb:ce:1d:09:f7:85:70:44:94:d6:
         b0:aa:2f:9b:04:9f:90:ee:ca:2a:7a:6d:af:5b:8d:ae:73:28:
         6c:9b:e4:b1:73:2a:a3:5a:d6:82:a8:e6:d0:01:5d:80:72:a1:
         38:e3:19:26:41:08:71:01:83:58:06:5d:07:be:0b:e3:50:20:
         80:bf:6c:b5:04:a8:8f:55:57:45:d3:c7:eb:b9:9a:00:4b:75:
         da:55:cf:c1:29:e7:c4:0c:ee:e2:d2:43:6c:eb:91:6e:33:6e:
         8d:00:22:8e:3f:10:82:52:ca:c1:1f:c5:cc:96:f3:bc:9c:66:
         8c:6d:0f:52:0c:1a:7f:8d:b8:ff:ee:7e:4c:c2:90:a5:32:fd:
         27:00:cb:cc:20:23:2f:03:be:44:9e:f0:3a:f6:24:88:90:77:
         0f:d1:7e:bb:bd:3a:94:31:34:33:8b:4a:e9:bc:08:9d:eb:a4:
         5d:2b:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:00 2026 by rpki-client