Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          cKI6JamDJiB9XOoBEuwGyOwtxluMxA8DW3XR9o32hOQ=
Subject key identifier:   0B:34:FD:C3:B5:43:BF:CC:76:19:EF:F9:39:C4:B4:C0:B3:8B:84:E2
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       47DFD4FC58B147B0A2C57485B87369456C8AE72F
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 18 Mar 2026 12:02:22 +0000
ROA not before:           Wed 18 Mar 2026 11:57:22 +0000
ROA not after:            Wed 17 Mar 2027 12:02:22 +0000
asID:                     262765
IP address blocks:        138.121.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:d4:fc:58:b1:47:b0:a2:c5:74:85:b8:73:69:45:6c:8a:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Mar 18 11:57:22 2026 GMT
            Not After : Mar 17 12:02:22 2027 GMT
        Subject: CN=0B34FDC3B543BFCC7619EFF939C4B4C0B38B84E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:8f:60:e4:91:3f:e9:1f:f5:79:9c:1a:96:
                    dd:d3:d6:3d:eb:04:67:c2:62:87:91:91:56:fd:c5:
                    45:7a:60:32:d3:32:d1:71:22:78:8a:14:f7:ab:88:
                    72:f1:84:00:12:ec:93:07:61:96:bc:09:b3:97:33:
                    a0:03:98:93:8d:ee:12:a0:e1:7c:88:11:24:a8:81:
                    9e:86:2d:f1:3c:63:77:8d:7e:4f:58:62:1b:e9:c7:
                    cf:1b:e6:fb:46:54:e0:33:13:fc:e6:36:2b:6a:1b:
                    98:79:b1:ef:ff:04:82:99:07:23:14:7c:fd:84:c5:
                    33:01:e7:93:2e:5f:96:08:fc:53:68:b4:20:c2:c7:
                    a8:b5:80:18:ec:1c:15:b9:db:71:0e:df:c8:4f:83:
                    18:a1:e9:20:26:50:56:ba:57:74:ea:34:df:70:ff:
                    7b:ad:82:2d:97:14:ab:61:83:33:c8:1f:56:30:e5:
                    e4:22:6f:fb:44:e3:64:3d:74:97:3a:22:25:0d:c6:
                    ef:23:32:4f:54:c9:c7:1e:5d:96:1a:83:27:7a:b9:
                    2b:fd:4f:10:e7:8c:18:0d:e4:af:ef:de:b8:f3:08:
                    38:3d:83:ef:1f:d3:79:b3:25:e0:30:52:9d:d4:7b:
                    36:dd:d6:d7:7a:d0:51:4d:25:e4:8d:13:72:1e:65:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:FD:C3:B5:43:BF:CC:76:19:EF:F9:39:C4:B4:C0:B3:8B:84:E2
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235342e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:26:d9:93:e7:4d:30:ac:d1:83:54:e4:df:a9:66:85:c3:
         35:30:18:3f:a4:91:b2:a2:71:64:f3:16:e2:63:d5:76:b4:05:
         25:2a:6f:19:90:1f:c9:cc:0a:8e:73:ee:ce:08:77:14:48:80:
         a2:e2:9a:bb:73:45:87:3c:b4:40:82:64:4d:db:fb:cd:3c:1c:
         03:07:86:eb:53:20:22:d8:5f:25:6d:b1:7c:29:71:29:02:42:
         d0:a9:7b:54:23:d1:c8:7d:a4:bf:59:5e:7f:cc:c2:59:65:0c:
         c7:f3:0c:21:92:3e:f8:06:80:a1:dc:34:96:c2:a4:fd:0e:82:
         b0:04:9a:04:fa:81:43:41:6d:a7:ba:ae:69:4c:66:61:11:f9:
         91:5e:d4:d8:2c:52:35:3d:2f:d3:0e:c6:6c:84:66:92:52:9a:
         23:ad:7c:5b:0f:e3:0f:96:69:ba:45:31:36:23:40:85:93:11:
         2c:3f:b7:45:03:5a:0b:45:29:9a:6a:98:3a:c9:3d:60:11:64:
         a0:4f:6d:2e:1b:39:00:bc:a4:8b:b9:b2:2f:4a:82:21:c2:20:
         78:f6:cf:12:c7:61:24:dd:97:61:0b:fc:1f:df:05:ee:df:48:
         44:4b:3a:c1:f6:1a:3f:6c:0f:e2:43:7d:92:98:b7:2c:6c:af:
         f5:e7:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:28:05 2026 by rpki-client