Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138322e302f32332d3233203d3e203532393233.roa
File:                     3137372e3138342e3138322e302f32332d3233203d3e203532393233.roa (raw, json)
Hash identifier:          0TO1OnCXMdFO0uL4NoIvgFPZen5mSnxFw2pVgpZhHfQ=
Subject key identifier:   41:44:51:12:D4:F1:D1:7E:23:CD:00:D8:F3:76:87:AC:18:21:90:53
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       5CD4A03717E63B18513601ACD6E3F62E127AC935
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138322e302f32332d3233203d3e203532393233.roa
Signing time:             Mon 16 Mar 2026 17:43:07 +0000
ROA not before:           Mon 16 Mar 2026 17:38:07 +0000
ROA not after:            Mon 15 Mar 2027 17:43:07 +0000
asID:                     52923
IP address blocks:        177.184.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:a0:37:17:e6:3b:18:51:36:01:ac:d6:e3:f6:2e:12:7a:c9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Mar 16 17:38:07 2026 GMT
            Not After : Mar 15 17:43:07 2027 GMT
        Subject: CN=41445112D4F1D17E23CD00D8F37687AC18219053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:98:74:f6:a2:82:c8:29:77:45:b3:27:f2:
                    c4:1a:4a:0a:c5:81:23:a8:bc:8f:23:46:67:06:21:
                    ca:9b:fc:f3:ca:ab:a7:b3:13:b6:fd:c2:f3:ed:e8:
                    2a:a9:82:23:95:81:b6:03:a6:a5:c2:68:5e:03:95:
                    20:70:a4:21:ba:80:cd:26:a3:b5:87:4c:8e:5f:d6:
                    e0:48:5e:a9:59:54:29:46:40:8c:79:d0:e5:07:75:
                    aa:f3:e7:a0:5e:b9:7b:0c:45:4a:0a:25:9f:f4:53:
                    89:00:fb:9f:97:dc:85:4c:f3:9f:ce:6c:4c:6f:2c:
                    69:9f:5c:10:ec:ce:ae:de:a2:31:78:8a:8e:d7:54:
                    0e:01:d8:0a:27:76:d7:ce:38:ee:f5:25:fa:44:52:
                    c4:d2:4d:2f:4c:ad:c6:40:a7:6a:2d:9f:95:c1:b1:
                    90:a6:89:bf:e3:c7:fe:7b:d2:02:ea:96:c7:4c:f9:
                    d6:7d:09:5f:e8:06:f1:41:cf:9c:d7:0c:23:5d:91:
                    d7:42:96:81:dd:b9:09:da:6b:f0:5a:0e:76:0f:58:
                    1e:c0:2d:ca:f2:09:0c:20:32:7a:5a:88:54:4f:fc:
                    89:ce:e2:fe:ed:28:b6:ed:6f:2d:14:51:05:2a:c9:
                    98:6a:1f:a4:fd:0c:96:f0:77:ff:27:9a:9e:97:69:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:44:51:12:D4:F1:D1:7E:23:CD:00:D8:F3:76:87:AC:18:21:90:53
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138322e302f32332d3233203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:a6:47:0f:6b:ff:14:5b:03:26:6b:ec:56:8f:db:14:20:
         5b:81:f0:d7:86:67:84:41:82:37:64:89:e7:ab:e6:ae:26:40:
         f7:54:e9:39:5f:10:72:c0:1f:e4:0c:8d:bc:cf:cc:1e:a8:b6:
         0e:cb:0a:e1:6c:93:f0:a6:91:26:3c:a5:d9:11:0f:98:2a:0d:
         7a:95:71:f5:69:9d:1e:2d:74:17:dd:fe:6b:4e:10:05:38:37:
         e5:02:b0:78:63:ed:a7:cf:44:06:7d:76:43:85:06:20:08:68:
         95:98:84:87:e9:6d:68:58:62:22:69:24:63:c9:7e:b0:31:38:
         9f:e0:f0:e4:2e:02:3c:f3:da:9a:6b:1a:28:35:b6:4a:81:40:
         44:48:9a:ea:51:f3:06:e2:2b:0a:8b:89:db:a0:87:4a:19:d2:
         aa:4c:46:a3:03:31:f7:31:43:bb:75:30:22:9f:7d:c8:80:13:
         8a:e8:63:20:b2:78:ff:2e:df:3e:9e:38:08:d9:eb:6b:dc:dd:
         ee:50:eb:d7:5d:ca:f7:f1:2c:c9:60:51:8b:15:37:35:d1:f3:
         bb:ec:cb:55:b8:df:42:52:4b:3c:42:52:80:52:20:bf:6c:f5:
         7b:a9:81:cb:37:d7:7a:fa:af:87:6b:94:10:ba:ca:88:10:15:
         be:a0:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:44 2026 by rpki-client