Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
File:                     3137372e33372e36342e302f31392d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          nh7O9CRG2Kpxb8b84k5r6hgV7rbMibiKUJwMDaoCWTY=
Subject key identifier:   5A:E4:E5:75:E1:79:D3:17:B9:A3:C8:CD:75:48:E2:4F:4A:7D:AC:4B
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       302141E97A4CE4800A7CBA1C217B7C1E594298A2
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:19:08 +0000
ROA not before:           Tue 30 Jun 2026 14:14:08 +0000
ROA not after:            Tue 29 Jun 2027 14:19:08 +0000
asID:                     262417
IP address blocks:        177.37.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:41:e9:7a:4c:e4:80:0a:7c:ba:1c:21:7b:7c:1e:59:42:98:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:14:08 2026 GMT
            Not After : Jun 29 14:19:08 2027 GMT
        Subject: CN=5AE4E575E179D317B9A3C8CD7548E24F4A7DAC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:3e:57:64:9d:ea:4d:9e:f4:38:2c:b3:95:
                    bf:06:42:71:67:a8:e2:6c:06:66:f9:bc:22:ed:e5:
                    f4:d0:ff:7b:70:d1:95:6a:0f:25:0c:91:ea:80:c0:
                    c1:02:fd:32:e1:20:43:b2:81:3e:63:c4:30:1d:ce:
                    ba:69:f3:e1:d8:1f:f7:4b:3f:6c:1b:24:18:6c:16:
                    97:71:5b:74:13:88:11:ec:74:ca:e9:7e:36:86:7a:
                    b9:e2:dc:58:41:f9:51:77:2e:f4:f9:62:30:f2:18:
                    88:49:fe:2b:41:26:d0:8e:5b:94:4a:48:86:0c:8a:
                    78:b7:d5:de:2e:1f:0c:20:8e:4b:81:6d:93:03:25:
                    55:59:1f:28:02:05:33:02:38:3d:32:ea:47:4b:17:
                    86:c2:eb:14:32:2c:78:c3:1f:d7:a6:b1:08:0d:c0:
                    4e:b7:85:89:46:dc:ae:27:1d:68:bc:53:83:c5:6a:
                    0c:a7:03:f9:ce:c9:f7:33:dc:73:94:d6:f6:4c:e3:
                    a1:b5:d9:92:43:c5:97:e5:a7:3b:cc:6b:32:01:c3:
                    ae:57:38:f4:c4:50:46:52:e9:23:3e:0f:d0:9c:bb:
                    8f:a4:8a:20:7b:e8:45:0d:91:fd:f0:06:a8:52:5b:
                    b5:9c:ab:3f:db:58:ef:62:73:a6:de:21:08:47:5f:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E4:E5:75:E1:79:D3:17:B9:A3:C8:CD:75:48:E2:4F:4A:7D:AC:4B
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e33372e36342e302f31392d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:07:17:82:35:5f:0f:49:02:af:1d:79:6d:f2:0b:41:f5:4d:
         3f:e0:9c:f1:93:81:d8:81:22:93:cc:db:82:18:91:2a:cf:0e:
         2c:a6:f1:c9:f1:18:d6:78:7e:18:0c:c6:43:02:66:f1:f3:da:
         ba:27:0d:4b:ae:b6:c2:6b:2c:cb:f6:35:06:25:ee:88:72:dd:
         b9:a9:cb:90:c7:77:88:68:ce:8f:73:fd:4c:df:d9:a7:63:04:
         2d:74:70:ff:1b:48:3c:9e:ab:8b:e1:a3:12:05:e2:e6:3c:ef:
         27:be:09:96:61:72:98:60:23:d8:c4:33:91:de:13:16:69:86:
         f9:92:5c:ce:3c:70:17:9d:7e:cf:6a:00:39:09:7b:b6:33:e6:
         24:8e:4f:2f:d3:36:a8:06:b0:c6:14:74:50:8f:a4:dc:7f:ae:
         de:54:7b:d4:b4:2b:8e:ac:2c:3e:6c:b4:53:3b:f6:36:df:b9:
         df:01:9b:e8:dc:a5:50:d2:3a:49:c5:fa:d8:07:18:5b:d2:b2:
         7d:ae:d9:97:52:7b:1b:5c:38:a2:46:ee:26:fb:ee:78:9a:fc:
         a4:f7:4a:b9:03:6c:a5:39:f5:11:7c:0d:f3:e6:bb:5e:52:38:
         00:04:dc:36:01:4e:31:d7:44:14:0f:3a:e4:ad:88:83:56:be:
         34:7f:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:04 2026 by rpki-client