Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          YHb3BsjWeruMTWjQ1nTQbfJZHDXoAU9Fpol6VKz/8co=
Subject key identifier:   E8:90:D0:6E:0B:92:20:FD:A7:D3:04:30:26:DD:28:61:0A:D6:E4:EA
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       22EAA91A692DC11FD347083F3979BDFD43999544
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:36 +0000
ROA not before:           Tue 11 Aug 2026 12:20:36 +0000
ROA not after:            Tue 10 Aug 2027 12:25:36 +0000
asID:                     262352
IP address blocks:        177.126.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ea:a9:1a:69:2d:c1:1f:d3:47:08:3f:39:79:bd:fd:43:99:95:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:36 2026 GMT
            Not After : Aug 10 12:25:36 2027 GMT
        Subject: CN=E890D06E0B9220FDA7D3043026DD28610AD6E4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:f9:78:a7:d3:71:2f:28:9d:76:8a:0d:f1:
                    83:df:9d:1d:3d:67:b8:42:25:a1:05:c1:2f:58:d4:
                    5e:0a:a1:97:c3:06:ab:a8:0c:74:42:64:05:bb:bf:
                    f1:01:87:ae:6c:e1:1e:85:6d:dd:33:f8:37:10:ae:
                    08:6f:a6:9b:ba:19:9e:90:f0:47:4e:46:2d:8f:4a:
                    7a:d3:2f:27:69:d6:c4:45:a2:b5:ba:ce:b6:35:fc:
                    f9:d5:26:02:a1:a1:7b:fe:f7:09:e5:3c:b1:05:72:
                    91:c2:83:3a:8a:57:cb:52:af:7f:85:f9:c7:a5:6b:
                    95:31:30:54:39:b9:55:3b:6c:ef:73:4e:5d:27:4b:
                    11:14:1e:41:5e:1e:af:fb:ea:88:bf:57:8b:42:f0:
                    3b:65:0e:f9:fa:4e:8e:18:1d:1b:43:a5:93:aa:f4:
                    7f:1f:05:15:23:b0:6d:a5:01:8a:81:0c:76:ed:33:
                    c1:49:9f:a2:1c:84:c2:6b:32:c3:1c:f2:69:84:a5:
                    6d:68:a1:3e:a5:97:14:4d:89:b1:52:d9:ba:55:82:
                    00:f4:ed:31:d6:dd:8e:8c:98:2b:c0:52:cf:63:68:
                    75:34:17:43:3e:10:06:5c:5d:22:e1:4e:d3:ca:3d:
                    55:99:ef:00:17:82:e0:29:0a:3d:58:9a:23:1f:15:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:D0:6E:0B:92:20:FD:A7:D3:04:30:26:DD:28:61:0A:D6:E4:EA
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:32:be:2a:cd:99:b9:d3:31:b8:05:1b:d9:8a:bf:d2:ac:83:
         71:94:35:da:0d:56:9a:d1:6a:44:c8:21:cb:02:18:74:a8:95:
         c4:d4:3f:a1:dd:9a:74:0c:04:9f:82:7d:af:6b:e7:d0:48:6f:
         b5:03:2c:98:62:fa:e2:6a:73:65:e1:48:8f:7f:7c:79:61:c6:
         a7:0c:8b:f8:35:23:c1:bb:cc:39:7b:7d:6a:e7:87:06:fb:2c:
         14:ff:38:50:e4:23:77:24:f7:c4:00:2f:41:73:ed:91:9c:f7:
         89:9a:69:6e:ff:2d:87:ee:e8:b0:f9:ab:4e:b5:ee:7e:00:a9:
         eb:b2:ca:20:9f:c9:e5:fd:fa:56:2e:e3:a4:34:93:04:6c:f1:
         81:b3:db:6a:5f:f5:8a:2b:02:59:e5:9e:35:77:45:7a:10:d3:
         8b:b6:06:19:57:53:40:7d:0b:c3:b6:9e:17:ab:f6:09:cd:e9:
         f2:de:f4:96:91:21:90:29:e1:8a:fb:e8:44:8e:6e:52:8b:20:
         a7:0b:b2:75:89:79:d8:54:5c:f9:86:c9:68:fc:f2:cf:de:e9:
         39:5e:a2:64:df:6f:00:d3:44:3a:5a:31:d8:bf:6c:05:b2:7f:
         f1:dc:c1:d7:1a:53:5c:a8:82:4c:0c:72:c8:a7:25:62:3f:69:
         3d:0d:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:20:24 2026 by rpki-client