Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa
File:                     3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=
Subject key identifier:   45:45:39:89:B3:85:76:37:A0:E1:8F:02:28:64:83:89:42:4F:0E:41
Certificate issuer:       /CN=7958C661EB8D493DABCAD14C921B052049BB4E87
Certificate serial:       559ABE6AD14D0A8D8B77F83EB87A62A6F7EE77D8
Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa
Signing time:             Fri 20 Mar 2026 13:25:31 +0000
ROA not before:           Fri 20 Mar 2026 13:20:31 +0000
ROA not after:            Fri 19 Mar 2027 13:25:31 +0000
asID:                     263450
IP address blocks:        177.91.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl
                          rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9a:be:6a:d1:4d:0a:8d:8b:77:f8:3e:b8:7a:62:a6:f7:ee:77:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87
        Validity
            Not Before: Mar 20 13:20:31 2026 GMT
            Not After : Mar 19 13:25:31 2027 GMT
        Subject: CN=45453989B3857637A0E18F0228648389424F0E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:6c:1b:a5:64:62:a4:53:9f:bb:4a:fa:c0:
                    f7:bf:1d:dc:92:0b:3e:4b:8e:c2:64:bf:65:35:2d:
                    4a:c4:23:54:13:79:1a:9a:0b:ad:d6:6f:0f:1f:df:
                    f4:0f:db:0d:d8:8e:5f:36:d6:42:aa:d8:6e:20:2c:
                    06:92:9f:92:ad:ce:fd:30:cc:e5:b3:70:06:24:38:
                    df:92:64:5a:78:71:67:bc:46:20:8b:f2:ad:60:fc:
                    c2:35:81:c8:5c:c8:b8:e1:07:73:8d:f2:e7:93:e4:
                    03:c0:cd:d3:33:19:df:66:67:8b:e9:bf:14:cb:19:
                    98:68:8c:c0:93:ae:76:ba:23:4f:af:1b:02:1e:71:
                    e3:3a:05:d6:3f:3e:ad:86:57:c8:fb:6e:5d:3e:a7:
                    98:56:37:a6:95:e3:ba:5b:f7:ea:43:73:3f:f9:41:
                    9d:4b:39:d3:07:7a:7f:bc:67:b3:7d:a4:bb:82:1d:
                    ac:a6:29:c8:95:93:c9:23:3d:e9:d0:78:57:93:fc:
                    dd:a7:bd:c8:bd:ab:8a:f4:16:71:13:03:dc:60:76:
                    b0:5a:8a:40:6a:be:de:96:d6:80:cb:7e:16:81:72:
                    1b:a9:89:8c:d3:10:6c:d0:3e:79:02:39:ab:5e:e4:
                    a9:fe:fa:a5:92:05:b7:3f:b4:fd:c7:df:e9:af:a9:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:39:89:B3:85:76:37:A0:E1:8F:02:28:64:83:89:42:4F:0E:41
            X509v3 Authority Key Identifier:
                keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:f9:a1:57:85:3a:70:5d:59:f1:a2:5d:8e:24:f9:d0:46:fe:
         a4:c0:65:22:5c:09:01:37:b8:65:98:b4:7d:81:3e:bf:a9:b8:
         08:31:fd:f8:8d:8f:92:5f:63:9a:97:43:1c:7d:97:c2:b8:20:
         c2:66:a4:40:f1:06:30:bb:2f:a4:4f:91:68:e1:b4:af:b3:a7:
         20:f9:8f:fc:2a:0e:fb:ca:4e:10:a8:50:15:0d:ee:6d:52:e3:
         06:50:f7:09:84:aa:c6:26:68:5b:95:37:63:e1:d3:6c:6e:c6:
         1e:d7:4f:64:f4:2f:a2:ff:9d:c3:5c:0e:85:b3:ef:fd:27:74:
         c5:5b:25:fa:5c:98:8a:84:18:94:52:6c:67:60:54:e5:64:45:
         53:1b:9c:61:7c:78:7e:67:80:38:eb:d5:04:ca:4d:0f:d1:31:
         55:37:da:da:06:58:64:a1:f4:0f:49:09:53:c0:bf:7d:2f:b7:
         99:2b:46:59:fc:5f:a6:4a:96:41:7d:61:56:e2:e7:e3:19:d2:
         30:03:33:9d:1e:d5:8e:30:2e:5f:09:0d:de:9d:97:dd:01:18:
         4c:b1:33:5c:ee:4c:6c:6d:42:91:1c:6b:b8:df:ec:ba:a9:38:
         f3:33:7e:a2:ac:f8:4e:91:1e:57:06:98:52:00:1c:74:6c:ce:
         6b:c2:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:23:48 2026 by rpki-client