Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa
File:                     3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa (raw, json)
Hash identifier:          8knMJym2zkNX5OXQCka2uttcb5Yne0M5nzzZfybC3K0=
Subject key identifier:   BE:FE:9A:97:C8:C3:9F:19:CA:97:E1:1B:BA:65:BD:76:F7:1B:CC:E2
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       713D025E61B1A8A343EED795B17D38398BD44FA7
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa
Signing time:             Fri 20 Mar 2026 13:16:02 +0000
ROA not before:           Fri 20 Mar 2026 13:11:02 +0000
ROA not after:            Fri 19 Mar 2027 13:16:02 +0000
asID:                     53107
IP address blocks:        177.104.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3d:02:5e:61:b1:a8:a3:43:ee:d7:95:b1:7d:38:39:8b:d4:4f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 20 13:11:02 2026 GMT
            Not After : Mar 19 13:16:02 2027 GMT
        Subject: CN=BEFE9A97C8C39F19CA97E11BBA65BD76F71BCCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:24:f4:c7:b1:b0:f9:13:d2:92:90:de:d4:
                    f0:70:68:71:9d:1d:51:8c:7a:e7:38:ac:d3:90:f8:
                    72:ac:89:85:0f:1b:2d:83:5d:38:8f:1b:ed:2f:90:
                    39:44:4d:ab:3e:7d:61:b3:61:5c:37:ff:49:68:f8:
                    8f:37:3c:ad:94:5c:a5:2e:0c:de:30:ff:ec:ab:39:
                    1d:dd:9d:7c:69:01:39:f7:15:ec:74:ce:a1:cb:f2:
                    c8:c8:c9:ae:55:84:1b:0e:52:ed:5a:eb:7f:06:5a:
                    3f:5a:b6:11:e5:c7:54:c5:c2:59:ed:ec:84:69:b2:
                    2a:89:03:3c:77:da:8b:6a:58:c7:bf:18:d1:ec:ad:
                    db:9b:e8:ee:51:eb:da:22:90:1f:ab:a4:2f:2f:ba:
                    71:2a:f5:c7:91:13:20:3c:de:b4:12:96:08:99:0a:
                    b4:49:b8:68:e6:3a:4f:09:c9:c6:f0:bd:0f:a7:b6:
                    b2:09:a5:dc:f2:f9:fc:4e:0f:7d:4c:4f:ba:ef:44:
                    d2:a5:ce:7d:e0:03:2a:15:f9:9a:20:44:9d:1b:b5:
                    b7:c2:e6:86:e8:15:97:97:0e:c3:33:3c:4e:3e:ab:
                    f7:64:11:d7:79:a2:2f:44:a8:7a:79:d4:56:50:72:
                    e2:0f:2c:4c:01:60:e1:09:bd:3a:59:19:d0:de:8b:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:9A:97:C8:C3:9F:19:CA:97:E1:1B:BA:65:BD:76:F7:1B:CC:E2
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3132382e302f31392d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:b3:d5:d4:0d:a6:a5:6b:a2:69:e1:ad:aa:06:c4:87:9b:
         f5:26:5e:10:b3:ce:51:44:07:8a:4b:09:7e:c5:8e:bd:b6:09:
         e4:c8:b8:75:97:24:7f:be:74:80:d1:f8:b5:77:5c:da:41:26:
         66:fe:fb:13:76:4c:de:5d:7f:c7:ab:94:a0:a9:56:c4:00:39:
         b2:25:48:d2:ae:ae:62:a5:92:a3:ac:52:d0:bb:92:e9:19:c7:
         88:c0:f6:97:0e:1b:51:6e:46:70:52:e2:de:44:a8:30:e1:2d:
         68:e8:dd:b3:7b:cf:52:24:de:4f:31:f2:eb:f4:97:66:a3:54:
         21:83:3c:e9:d4:9d:b8:a6:f4:72:9b:7f:0e:11:9d:52:db:40:
         b5:99:0e:a7:ab:3a:b2:8b:72:a0:df:81:cd:ec:24:48:24:af:
         de:80:94:19:12:5e:e6:d6:7c:c8:8f:6b:b5:46:e7:09:79:7d:
         ba:b5:4a:62:e0:fe:92:1c:81:52:eb:ea:3c:f3:0a:a0:b9:5d:
         b3:39:fa:7e:7a:47:a3:6a:0d:13:5e:49:32:98:99:cc:1d:0f:
         f2:52:01:ac:84:82:8f:8e:30:a1:d9:41:ac:71:9f:56:81:73:
         b1:23:75:2b:bd:74:a5:74:9d:a6:89:c1:10:e3:0d:0d:51:24:
         61:e0:bb:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcT0CXmGxqKND7teVsX04OYvUT6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNjAzMjAxMzExMDJaFw0yNzAzMTkxMzE2MDJaMDMxMTAvBgNV
BAMTKEJFRkU5QTk3QzhDMzlGMTlDQTk3RTExQkJBNjVCRDc2RjcxQkNDRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCiT0x7Gw+RPSkpDe1PBwaHGd
HVGMeuc4rNOQ+HKsiYUPGy2DXTiPG+0vkDlETas+fWGzYVw3/0lo+I83PK2UXKUu
DN4w/+yrOR3dnXxpATn3Fex0zqHL8sjIya5VhBsOUu1a638GWj9athHlx1TFwlnt
7IRpsiqJAzx32otqWMe/GNHsrdub6O5R69oikB+rpC8vunEq9ceREyA83rQSlgiZ
CrRJuGjmOk8JycbwvQ+ntrIJpdzy+fxOD31MT7rvRNKlzn3gAyoV+ZogRJ0btbfC
5oboFZeXDsMzPE4+q/dkEdd5oi9EqHp51FZQcuIPLEwBYOEJvTpZGdDeizHlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvv6al8jDnxnKl+EbumW9dvcbzOIwHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzNzM3MmUzMTMwMzQyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxaIAwDQYJKoZIhvcNAQELBQADggEBAEhLs9XU
Daala6Jp4a2qBsSHm/UmXhCzzlFEB4pLCX7Fjr22CeTIuHWXJH++dIDR+LV3XNpB
Jmb++xN2TN5df8erlKCpVsQAObIlSNKurmKlkqOsUtC7kukZx4jA9pcOG1FuRnBS
4t5EqDDhLWjo3bN7z1Ik3k8x8uv0l2ajVCGDPOnUnbim9HKbfw4RnVLbQLWZDqer
OrKLcqDfgc3sJEgkr96AlBkSXubWfMiPa7VG5wl5fbq1SmLg/pIcgVLr6jzzCqC5
XbM5+n56R6NqDRNeSTKYmcwdD/JSAayEgo+OMKHZQaxxn1aBc7EjdSu9dKV0naaJ
wRDjDQ1RJGHgu/c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:42 2026 by rpki-client