Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa
File:                     3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (raw, json)
Hash identifier:          T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=
Subject key identifier:   40:97:D3:C8:F4:09:E9:9C:23:51:E7:49:5D:C1:1E:70:95:DA:27:D6
Certificate issuer:       /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
Certificate serial:       6DE78C173CA27731174C8FF03EB470EB8431FDE3
Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa
Signing time:             Thu 19 Mar 2026 18:35:45 +0000
ROA not before:           Thu 19 Mar 2026 18:30:45 +0000
ROA not after:            Thu 18 Mar 2027 18:35:45 +0000
asID:                     263087
IP address blocks:        177.137.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:8c:17:3c:a2:77:31:17:4c:8f:f0:3e:b4:70:eb:84:31:fd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
        Validity
            Not Before: Mar 19 18:30:45 2026 GMT
            Not After : Mar 18 18:35:45 2027 GMT
        Subject: CN=4097D3C8F409E99C2351E7495DC11E7095DA27D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:15:26:d1:fb:32:ec:6a:7c:b2:3f:68:36:
                    14:57:7d:9b:a4:1c:4e:0e:6f:f9:14:d1:74:b3:13:
                    2d:04:ae:7d:0f:81:ff:69:42:d5:6b:57:e5:1c:8b:
                    e1:55:fa:75:1e:f8:a3:40:29:71:f6:75:fc:df:c1:
                    36:fb:36:db:35:aa:99:68:51:61:d5:e1:e9:b4:35:
                    ce:8b:4c:4c:f8:33:93:0e:aa:f3:4f:cc:d4:e6:49:
                    36:c1:18:89:c3:f8:2f:98:7f:a3:84:42:70:a6:a2:
                    8f:de:0e:38:9e:aa:87:8c:a6:ca:76:fd:cb:63:20:
                    96:af:e7:4e:ee:62:e0:c5:37:d1:55:0f:48:4a:fe:
                    43:14:fc:82:d6:ad:84:ec:9c:2d:35:cf:22:f3:8a:
                    7e:9d:ec:7f:15:3b:85:c6:5a:59:b4:86:df:09:3a:
                    12:2a:67:f9:5d:6a:91:5e:d7:58:c4:db:81:d2:ae:
                    1d:77:f5:47:d0:ae:06:7c:11:55:87:08:73:da:88:
                    52:b5:c1:27:46:79:f3:70:de:58:1b:94:31:d1:94:
                    b4:6d:d0:40:7c:8f:d5:81:11:0d:e2:4a:49:6c:3b:
                    84:1b:b0:3d:f7:6d:11:56:af:dc:10:1a:0f:20:4f:
                    86:7a:b8:81:74:cd:55:db:dd:96:d4:d3:23:e5:84:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:97:D3:C8:F4:09:E9:9C:23:51:E7:49:5D:C1:1E:70:95:DA:27:D6
            X509v3 Authority Key Identifier:
                keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:4a:91:24:1f:23:c4:32:81:82:9a:e1:b5:15:bb:20:aa:
         3c:5c:1f:23:c6:b8:e2:e0:44:c7:f4:26:d4:20:bb:cf:2b:50:
         01:32:4d:cd:50:d1:ce:9a:f2:4e:fd:ab:13:18:39:00:8e:69:
         93:e3:74:7d:99:fd:e0:e6:2e:01:d5:b0:5e:6f:cf:14:c4:ba:
         aa:1a:14:74:a8:ea:df:ed:d1:8c:d3:86:00:a7:02:17:9e:57:
         40:69:b3:63:b4:01:10:4f:e5:e2:42:83:85:7d:6d:cd:38:8f:
         e4:8c:b3:6b:d0:9c:25:a7:6c:d1:9d:86:f3:24:bf:f0:40:fe:
         47:90:11:8d:d6:a5:c3:57:cb:03:06:32:62:53:21:05:cc:25:
         99:c6:83:dc:9f:5e:79:f9:e0:b9:67:a4:00:2f:28:5b:a8:07:
         c1:66:d7:cb:85:c5:b1:70:47:fe:cf:c0:2b:5e:34:c4:40:be:
         64:6a:28:80:f7:e3:61:c8:2a:98:b0:79:99:5f:3f:70:12:70:
         2b:d9:86:a9:b4:26:04:9e:85:61:c8:0e:11:c2:57:3f:38:35:
         13:49:97:89:6d:10:37:a4:81:81:95:71:90:f3:d2:d6:36:af:
         b8:26:2b:e3:d2:2a:a7:37:cd:75:8c:57:50:aa:a4:90:f4:6a:
         5a:a5:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:30 2026 by rpki-client