Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138342e302f32332d3233203d3e20323733343937.roa
File:                     3230312e34392e3138342e302f32332d3233203d3e20323733343937.roa (raw, json)
Hash identifier:          lxAFRoCa+OCuNjXP+rAb0CHNEAYmEYxxueijEa8KvHw=
Subject key identifier:   E8:05:6D:BA:CE:0F:E8:23:4D:52:7A:85:45:2C:F0:81:37:AC:B9:AB
Certificate issuer:       /CN=EDC7376D677994F3424FE38D9980A13F6A72A967
Certificate serial:       29FC18394D68E3F20D0777DE88ECD527C6B227E1
Authority key identifier: ED:C7:37:6D:67:79:94:F3:42:4F:E3:8D:99:80:A1:3F:6A:72:A9:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC7376D677994F3424FE38D9980A13F6A72A967.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138342e302f32332d3233203d3e20323733343937.roa
Signing time:             Tue 14 Jul 2026 15:48:41 +0000
ROA not before:           Tue 14 Jul 2026 15:43:41 +0000
ROA not after:            Tue 13 Jul 2027 15:48:41 +0000
asID:                     273497
IP address blocks:        201.49.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/EDC7376D677994F3424FE38D9980A13F6A72A967.crl
                          rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/EDC7376D677994F3424FE38D9980A13F6A72A967.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC7376D677994F3424FE38D9980A13F6A72A967.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fc:18:39:4d:68:e3:f2:0d:07:77:de:88:ec:d5:27:c6:b2:27:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDC7376D677994F3424FE38D9980A13F6A72A967
        Validity
            Not Before: Jul 14 15:43:41 2026 GMT
            Not After : Jul 13 15:48:41 2027 GMT
        Subject: CN=E8056DBACE0FE8234D527A85452CF08137ACB9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:3c:30:d3:b9:fe:b6:77:6a:86:be:9a:f6:
                    d2:4b:e8:ca:67:25:de:d8:1d:b5:84:06:90:a7:95:
                    9e:15:b6:22:3c:22:f9:a1:de:70:66:f0:51:18:d8:
                    ca:d4:31:06:ac:21:c5:94:2a:d1:f2:6c:48:68:55:
                    c6:82:d6:a5:05:47:8a:dc:24:6a:87:5e:fa:d3:76:
                    66:91:86:67:16:f6:33:1e:25:3d:79:35:53:f6:cf:
                    a1:2e:d0:a9:fe:1a:99:1c:eb:11:0e:6e:16:14:26:
                    c4:c2:9a:50:32:a2:57:37:c1:98:ae:c5:fe:12:c5:
                    84:17:1f:d9:e1:02:68:48:97:2c:7f:3b:59:ed:34:
                    9b:df:8f:4e:2e:e1:96:bb:35:c5:6f:d0:18:72:d0:
                    08:7b:18:bd:d5:67:3f:3d:cf:50:7f:e9:19:5a:1a:
                    99:af:bc:87:69:4f:7f:dd:9e:d7:88:70:2c:f2:c0:
                    be:7b:bf:a3:f9:45:48:8e:84:4d:fa:cf:9d:0c:8f:
                    3a:38:e1:d5:c2:20:9f:63:f8:c1:df:ec:e6:3b:5c:
                    e7:67:bd:25:ec:30:5e:77:11:0f:3b:2a:04:28:68:
                    d0:b5:30:21:32:b3:45:2c:4e:5f:6c:80:eb:ac:cb:
                    c8:4a:39:08:58:b8:8e:5f:5e:9e:85:f1:12:2f:25:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:6D:BA:CE:0F:E8:23:4D:52:7A:85:45:2C:F0:81:37:AC:B9:AB
            X509v3 Authority Key Identifier:
                keyid:ED:C7:37:6D:67:79:94:F3:42:4F:E3:8D:99:80:A1:3F:6A:72:A9:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/EDC7376D677994F3424FE38D9980A13F6A72A967.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDC7376D677994F3424FE38D9980A13F6A72A967.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138342e302f32332d3233203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:f9:4d:9e:8a:13:6f:f2:e2:49:e1:34:e7:6a:d5:f3:77:
         6d:e9:e6:04:05:79:8d:ee:70:96:13:2c:26:e6:f1:e3:90:7c:
         e6:ec:aa:b8:95:92:95:26:de:78:41:f5:aa:3f:86:81:96:4b:
         bd:b2:8b:8a:24:74:8b:e1:d9:b3:71:48:f6:ff:93:89:22:bb:
         a5:c9:aa:35:e9:1f:ee:54:e0:f4:99:e6:7d:50:bf:77:93:df:
         be:c7:23:09:e0:68:78:cf:67:aa:bd:f0:89:bc:ab:0b:34:06:
         b3:99:10:e4:36:5d:d0:d0:a6:e0:7c:c5:17:43:3c:e6:c7:43:
         7c:da:e5:a6:56:53:dc:91:74:ea:5e:00:0f:2b:c9:81:ce:9b:
         d0:a6:eb:58:22:e3:4f:e3:0a:ea:9b:ad:b6:2f:79:71:06:fa:
         6c:0f:22:4a:e2:3f:7f:95:f0:eb:02:70:6c:bb:7f:c6:d8:1f:
         79:d5:28:91:d5:af:c8:a5:b6:bf:10:0f:76:e3:8d:20:3f:78:
         89:50:ea:bf:17:18:85:c3:a1:18:f9:da:a0:ef:3c:a5:93:63:
         61:b6:45:fb:d7:08:a4:f8:32:6e:f1:de:9d:8c:18:e4:80:02:
         7c:5d:b7:d9:e3:bc:ae:ca:f6:64:06:21:8c:59:d1:71:3e:4d:
         f7:db:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:36:35 2026 by rpki-client