Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3332203d3e203532373838.roa
File:                     3137372e33382e36382e302f32322d3332203d3e203532373838.roa (raw, json)
Hash identifier:          1a66xgC+CVT+OeGVsMfsl1wjw+2IWyu7T+uoiRFIEA8=
Subject key identifier:   26:64:A8:36:4A:FA:E6:8D:19:A1:FC:50:2D:86:40:82:44:04:B2:71
Certificate issuer:       /CN=77E39CEBDB108D2D785A0B4118756ED63CCC8DC1
Certificate serial:       7B1ACCA0ABB7D6B1C1C887A7C4DFEF932CC6EB3E
Authority key identifier: 77:E3:9C:EB:DB:10:8D:2D:78:5A:0B:41:18:75:6E:D6:3C:CC:8D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3332203d3e203532373838.roa
Signing time:             Fri 20 Mar 2026 12:11:26 +0000
ROA not before:           Fri 20 Mar 2026 12:06:26 +0000
ROA not after:            Fri 19 Mar 2027 12:11:26 +0000
asID:                     52788
IP address blocks:        177.38.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.crl
                          rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1a:cc:a0:ab:b7:d6:b1:c1:c8:87:a7:c4:df:ef:93:2c:c6:eb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E39CEBDB108D2D785A0B4118756ED63CCC8DC1
        Validity
            Not Before: Mar 20 12:06:26 2026 GMT
            Not After : Mar 19 12:11:26 2027 GMT
        Subject: CN=2664A8364AFAE68D19A1FC502D8640824404B271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:36:f9:38:04:1c:92:1e:49:e4:06:d7:b0:
                    57:a6:fd:87:a7:17:da:4a:7c:a1:cd:60:2c:85:7d:
                    ec:27:d4:c3:2f:2c:f6:a9:45:dc:1b:6d:4a:ff:93:
                    e5:4b:74:25:c2:a6:31:c1:02:52:bc:c5:06:1e:c0:
                    02:61:ff:63:3c:f5:ba:5d:e6:86:b6:9a:95:7a:7e:
                    5a:d9:72:98:11:ef:9a:8f:86:d0:c6:5f:ce:24:2b:
                    99:6e:d0:ad:f6:86:36:4d:58:32:7a:62:7b:d7:10:
                    aa:88:2d:bc:5f:e0:fd:f7:fc:a5:58:73:77:a7:61:
                    d3:33:ac:62:72:73:ef:dd:24:48:78:58:b5:1b:38:
                    b0:fb:1c:28:75:fa:ff:73:10:b6:54:b2:9b:61:75:
                    09:05:69:be:34:dd:05:42:8e:ec:f6:62:b4:4a:84:
                    16:7f:8f:41:4c:62:6f:7b:f6:95:e9:f0:ad:38:b6:
                    08:23:78:f6:3a:f2:b4:ef:33:17:b3:fb:3a:8b:94:
                    a9:cd:0b:09:71:a8:59:da:44:9e:6f:c4:5c:26:c9:
                    ad:f6:79:04:4b:bf:49:a1:27:f7:99:b1:51:66:95:
                    65:fa:55:34:d8:88:90:ac:da:da:8a:72:6c:1c:5e:
                    69:b1:9d:96:27:35:a2:b4:55:47:36:81:73:23:57:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:A8:36:4A:FA:E6:8D:19:A1:FC:50:2D:86:40:82:44:04:B2:71
            X509v3 Authority Key Identifier:
                keyid:77:E3:9C:EB:DB:10:8D:2D:78:5A:0B:41:18:75:6E:D6:3C:CC:8D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77E39CEBDB108D2D785A0B4118756ED63CCC8DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/3137372e33382e36382e302f32322d3332203d3e203532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:16:88:b4:f8:d0:c0:f2:b4:5e:9b:5f:21:81:32:c8:65:
         2e:f4:53:15:b6:17:b8:eb:df:c6:ce:57:79:1a:1f:b6:65:45:
         b6:31:0a:49:37:f6:15:ce:d9:53:5c:e0:19:d2:53:86:e9:21:
         40:d9:66:0a:ea:68:31:1b:e1:c2:ae:31:b3:4f:27:37:98:da:
         c8:39:9b:24:e8:28:58:0a:e2:2c:4c:c2:41:3f:e1:ca:d9:18:
         95:83:8e:95:65:80:d4:5c:eb:31:a5:18:08:3a:86:50:a9:d7:
         d2:67:47:27:3b:27:24:37:a3:54:ef:e6:d9:3d:23:16:5d:78:
         9a:05:37:0f:e4:f1:af:f6:0b:cd:1a:31:81:47:8c:14:38:52:
         f6:9d:ef:d0:73:a9:25:b3:71:86:bf:f0:6d:7f:11:24:40:dc:
         59:91:ec:4a:6e:61:32:28:b0:3b:47:5f:3b:d9:d3:26:c1:80:
         fd:3c:d6:7c:be:1e:e7:82:b0:f9:3f:88:d5:67:b2:92:f8:1a:
         55:5f:1e:31:fb:44:1f:9e:f7:44:a0:56:9c:a5:9d:7d:8e:41:
         22:c2:c7:01:ac:0b:75:a0:a4:64:53:40:80:91:a5:71:fb:e5:
         06:75:35:07:dd:25:1d:d0:ce:26:88:6e:3a:9a:d9:d7:41:61:
         c2:8e:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:28:59 2026 by rpki-client