Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/3137372e3130342e3234302e302f32302d3332203d3e203532363537.roa
File:                     3137372e3130342e3234302e302f32302d3332203d3e203532363537.roa (raw, json)
Hash identifier:          O86NJg7LOwETAj9VtU7snB9SSILckJeQgosm6OfPOfA=
Subject key identifier:   42:98:1B:10:C5:AE:35:0B:BF:16:29:31:BF:81:E5:0F:E5:52:98:04
Certificate issuer:       /CN=D11A03F81EF5476E2A52DD0F98CBADB10BD22264
Certificate serial:       1C5A6AD8E9F986742F70D7AC1C0B90F2020F979B
Authority key identifier: D1:1A:03:F8:1E:F5:47:6E:2A:52:DD:0F:98:CB:AD:B1:0B:D2:22:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/3137372e3130342e3234302e302f32302d3332203d3e203532363537.roa
Signing time:             Wed 06 May 2026 21:13:12 +0000
ROA not before:           Wed 06 May 2026 21:08:12 +0000
ROA not after:            Wed 05 May 2027 21:13:12 +0000
asID:                     52657
IP address blocks:        177.104.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.crl
                          rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:6a:d8:e9:f9:86:74:2f:70:d7:ac:1c:0b:90:f2:02:0f:97:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11A03F81EF5476E2A52DD0F98CBADB10BD22264
        Validity
            Not Before: May  6 21:08:12 2026 GMT
            Not After : May  5 21:13:12 2027 GMT
        Subject: CN=42981B10C5AE350BBF162931BF81E50FE5529804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:d5:af:ed:23:98:a7:54:84:27:88:69:3f:
                    25:cc:cd:bc:08:15:29:e3:57:d7:74:9f:d2:8b:ce:
                    e1:50:6b:ca:4b:07:9b:15:7e:c3:bb:b1:63:1f:3f:
                    af:d5:a9:ea:8a:7e:c4:1f:50:db:f1:2f:ac:9f:1f:
                    89:bd:2f:26:e8:c1:9c:fd:60:80:38:52:41:30:84:
                    8c:62:89:45:85:0c:14:1e:af:18:30:aa:3c:66:22:
                    4e:b8:cd:01:ab:3c:0a:a4:3a:71:d4:a5:2b:74:fc:
                    e3:a9:05:06:f9:14:90:74:c7:1f:8c:3d:32:7b:f2:
                    ef:8f:da:a7:06:62:6f:e8:a1:53:8f:70:77:4d:c1:
                    e0:82:f8:73:97:e5:55:4e:2d:77:12:ed:5f:74:64:
                    88:d0:a0:b5:ee:70:e0:9d:ac:13:f7:97:88:fc:6d:
                    a4:c4:f6:f0:cd:fc:d2:70:3d:b7:5d:04:52:ea:de:
                    32:10:b2:2a:fe:f1:e9:f9:a1:12:ba:8c:ff:75:c6:
                    e5:1c:a9:77:e0:68:70:6c:b9:23:72:28:62:5d:24:
                    20:b7:06:8c:50:c1:0f:90:69:e9:34:c7:1b:e7:71:
                    af:11:99:ee:88:b6:a9:74:76:97:7d:2e:38:f6:5e:
                    f8:55:64:95:2a:f3:37:c7:c4:d3:87:50:e1:de:13:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:98:1B:10:C5:AE:35:0B:BF:16:29:31:BF:81:E5:0F:E5:52:98:04
            X509v3 Authority Key Identifier:
                keyid:D1:1A:03:F8:1E:F5:47:6E:2A:52:DD:0F:98:CB:AD:B1:0B:D2:22:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/3137372e3130342e3234302e302f32302d3332203d3e203532363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:79:2b:09:a6:c7:5c:d4:4a:f6:02:a7:76:f8:a9:bc:ea:1e:
         f8:1e:c0:ef:45:2d:30:ec:1a:aa:c8:7b:7a:c2:fe:2c:4a:91:
         9e:1f:23:f8:8d:c7:13:10:69:60:8f:59:bc:c5:d4:38:b7:f8:
         c3:f6:77:56:11:0c:07:21:96:16:d4:01:3e:bc:c0:f4:68:40:
         ad:1a:20:4d:70:fa:c9:9e:38:bb:bc:f4:36:03:f8:53:6f:8a:
         90:c7:ce:76:64:79:38:c2:4e:ef:07:b0:17:02:28:55:96:15:
         28:e2:02:c4:87:70:42:ea:06:5e:84:34:63:e9:5f:e5:46:61:
         76:11:49:f6:6b:77:aa:8a:34:00:8b:53:2d:6a:e5:eb:31:45:
         d4:33:ce:c9:84:a3:4b:d8:27:6d:ec:12:e2:4f:21:88:2f:65:
         19:79:2b:14:1e:4a:91:8e:b3:3e:52:c0:8f:af:d1:26:a2:c4:
         67:f9:d7:5b:35:9b:7b:68:7e:98:aa:2d:1c:5f:54:41:0a:c2:
         73:d8:9e:63:29:2d:53:ef:ff:70:0f:14:74:5a:6c:77:d8:79:
         c7:18:2a:a6:f3:79:19:5c:5a:c6:0a:80:4c:30:59:81:4f:24:
         be:f8:bc:3c:20:33:7b:57:39:de:ba:70:35:4e:8e:45:af:ed:
         e6:4e:3e:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHFpq2On5hnQvcNesHAuQ8gIPl5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExQTAzRjgxRUY1NDc2RTJBNTJERDBGOThDQkFEQjEw
QkQyMjI2NDAeFw0yNjA1MDYyMTA4MTJaFw0yNzA1MDUyMTEzMTJaMDMxMTAvBgNV
BAMTKDQyOTgxQjEwQzVBRTM1MEJCRjE2MjkzMUJGODFFNTBGRTU1Mjk4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDtWv7SOYp1SEJ4hpPyXMzbwI
FSnjV9d0n9KLzuFQa8pLB5sVfsO7sWMfP6/VqeqKfsQfUNvxL6yfH4m9LybowZz9
YIA4UkEwhIxiiUWFDBQerxgwqjxmIk64zQGrPAqkOnHUpSt0/OOpBQb5FJB0xx+M
PTJ78u+P2qcGYm/ooVOPcHdNweCC+HOX5VVOLXcS7V90ZIjQoLXucOCdrBP3l4j8
baTE9vDN/NJwPbddBFLq3jIQsir+8en5oRK6jP91xuUcqXfgaHBsuSNyKGJdJCC3
BoxQwQ+Qaek0xxvnca8Rme6Itql0dpd9Ljj2XvhVZJUq8zfHxNOHUOHeEz23AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQpgbEMWuNQu/Fikxv4HlD+VSmAQwHwYDVR0j
BBgwFoAU0RoD+B71R24qUt0PmMutsQvSImQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdTUHBFWEpVVkplWnY1c3FFWnJ3ejg0dVBYOU1ueGs1RU5lNjNTYWJt
TFYvMC9EMTFBMDNGODFFRjU0NzZFMkE1MkREMEY5OENCQURCMTBCRDIyMjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUEwM0Y4MUVGNTQ3NkUy
QTUyREQwRjk4Q0JBREIxMEJEMjIyNjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3U1BwRVhKVVZKZVp2NXNxRVpyd3o4NHVQWDlNbnhrNUVOZTYzU2FibUxWLzAv
MzEzNzM3MmUzMTMwMzQyZTMyMzQzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1
MzIzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxaPAwDQYJKoZIhvcNAQELBQADggEBAAV5Kwmm
x1zUSvYCp3b4qbzqHvgewO9FLTDsGqrIe3rC/ixKkZ4fI/iNxxMQaWCPWbzF1Di3
+MP2d1YRDAchlhbUAT68wPRoQK0aIE1w+smeOLu89DYD+FNvipDHznZkeTjCTu8H
sBcCKFWWFSjiAsSHcELqBl6ENGPpX+VGYXYRSfZrd6qKNACLUy1q5esxRdQzzsmE
o0vYJ23sEuJPIYgvZRl5KxQeSpGOsz5SwI+v0SaixGf511s1m3tofpiqLRxfVEEK
wnPYnmMpLVPv/3APFHRabHfYeccYKqbzeRlcWsYKgEwwWYFPJL74vDwgM3tXOd66
cDVOjkWv7eZOPrE=
-----END CERTIFICATE-----
Generated at Wed May 13 19:12:12 2026 by rpki-client