Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31372e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          gszRFLM8Tlx+KRBMSaSTJ9K2Q4cmc4bZMXYsf0z+Ocg=
Subject key identifier:   10:78:F8:F0:A4:BE:FD:17:1D:2F:C6:6B:43:C4:7A:67:27:58:24:12
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       49F8620B6BCD14B74E2EE1EC27AE9F64D70248F8
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:27:18 +0000
ROA not before:           Wed 13 May 2026 12:22:18 +0000
ROA not after:            Wed 12 May 2027 12:27:18 +0000
asID:                     53225
IP address blocks:        177.137.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f8:62:0b:6b:cd:14:b7:4e:2e:e1:ec:27:ae:9f:64:d7:02:48:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:22:18 2026 GMT
            Not After : May 12 12:27:18 2027 GMT
        Subject: CN=1078F8F0A4BEFD171D2FC66B43C47A6727582412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:07:08:57:36:da:0e:0d:11:1c:ee:46:18:
                    4d:a4:65:0c:1a:9e:37:0d:1b:3a:4d:06:b9:30:1b:
                    7d:a5:34:6d:fb:e3:8d:cb:d9:70:81:a7:a0:d1:1e:
                    8b:ed:73:41:70:08:4a:cc:1d:7c:27:c6:d0:89:7f:
                    8d:7d:5b:6d:aa:16:f0:bb:88:81:86:09:50:63:cb:
                    9f:a5:7c:32:95:82:9c:40:9f:96:5f:94:5c:7f:82:
                    e4:82:95:32:db:79:60:87:9a:4e:05:3e:a2:7e:67:
                    5e:cd:c6:bb:02:6a:32:3b:30:6b:df:f4:31:4c:96:
                    fd:7a:20:2c:62:18:00:bd:04:ea:53:44:d7:eb:6f:
                    ce:3f:67:20:60:5e:b1:d0:1e:21:ea:4b:54:e4:c7:
                    02:17:ea:a4:6d:da:b1:6f:21:07:7b:b3:2f:29:33:
                    e0:f3:4a:45:68:54:1d:33:d2:4b:f3:ec:02:e9:4d:
                    c6:69:7d:d4:04:6c:61:21:13:6e:5a:48:5e:f0:5e:
                    3b:24:5a:c3:3e:8c:04:de:c3:1a:ae:da:1d:07:2c:
                    f7:3a:b3:5c:e6:a5:f8:9f:d6:c6:e4:2a:f1:58:e7:
                    fa:e4:2d:b1:48:d5:55:1c:ce:3c:65:3c:0c:62:94:
                    3f:27:7a:3b:72:a3:74:df:25:6a:88:a4:11:4b:0f:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:78:F8:F0:A4:BE:FD:17:1D:2F:C6:6B:43:C4:7A:67:27:58:24:12
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f2:23:dd:ba:b9:b5:47:97:2f:46:1c:ad:e0:2c:07:d8:fa:
         e7:b7:f1:2b:51:30:bc:4e:13:1b:a9:76:c4:24:b4:5a:f6:e8:
         c6:8a:81:c7:a3:3c:7d:b4:45:e8:53:0c:28:07:25:b6:c1:9c:
         65:c7:e0:79:48:d9:85:26:f3:a1:a7:13:f2:92:1c:4c:b2:6f:
         06:91:82:87:b2:5f:e8:56:8d:13:6b:18:6e:5e:43:d6:8a:c4:
         b5:c0:43:64:47:9b:5a:de:9c:c7:8f:75:81:f0:57:4a:21:a9:
         76:9c:e8:a9:c1:7b:ae:1e:cb:f8:92:6a:0e:7c:12:a1:97:18:
         4f:72:db:ac:2e:5c:17:8e:f8:0d:31:96:3e:7e:8a:e5:7c:79:
         0a:53:20:f9:17:b2:f8:5f:c9:17:c2:91:c5:18:b0:dd:91:2d:
         a7:3d:92:2c:26:df:e3:65:44:86:a3:68:fd:30:6c:27:e5:64:
         5f:7e:3b:ae:01:d1:ef:92:c5:9c:54:7e:e4:ca:68:a4:1a:bf:
         8f:2d:f2:10:80:20:1b:20:c9:65:02:a7:7c:8c:00:14:2e:bd:
         29:fa:be:c1:10:20:0b:3b:c8:06:06:dd:3a:b8:29:15:6b:b7:
         05:97:a4:a4:f1:ab:72:b7:a2:60:db:f8:58:6d:b2:69:ef:95:
         96:45:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:11:25 2026 by rpki-client