Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          AwpXRkbcLJxLZRJHkH6dWJBIXdN/pV1aUerAZlTznh8=
Subject key identifier:   02:CF:72:2F:9F:DC:A0:50:09:F6:63:C0:78:35:3A:1C:AA:2E:84:23
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       024E50AADE3B64A3A4453A3D578E0AC5BA3C3EDA
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:37 +0000
ROA not before:           Tue 11 Aug 2026 12:20:37 +0000
ROA not after:            Tue 10 Aug 2027 12:25:37 +0000
asID:                     262352
IP address blocks:        177.126.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 15:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4e:50:aa:de:3b:64:a3:a4:45:3a:3d:57:8e:0a:c5:ba:3c:3e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:37 2026 GMT
            Not After : Aug 10 12:25:37 2027 GMT
        Subject: CN=02CF722F9FDCA05009F663C078353A1CAA2E8423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:0b:63:ec:1d:10:1b:3f:b0:ca:18:05:b9:
                    52:59:9c:3d:bd:3b:fa:96:ac:d7:2e:a8:a6:49:b4:
                    e1:6b:7c:d3:16:8c:83:e8:cc:42:86:8e:67:a7:25:
                    e6:d6:b4:83:3e:71:90:77:71:51:18:af:ba:5a:45:
                    bb:cf:31:9a:d5:c5:7d:8d:a3:8e:ee:4a:71:ee:28:
                    20:f8:26:9a:3f:ad:7f:8e:d7:05:f0:29:8c:51:a3:
                    1e:43:3f:f4:e0:ea:af:1d:c8:6d:9d:2d:02:61:98:
                    c0:5b:c2:e5:51:59:dd:73:e4:4e:80:75:9b:45:64:
                    57:8d:15:be:28:36:24:7c:06:e1:44:7f:1e:12:09:
                    8a:ca:47:0e:a9:d6:13:de:95:5a:7b:fd:d3:e3:3e:
                    01:19:a3:3e:ef:44:48:fe:ec:2b:8e:2a:4c:77:6b:
                    2e:5b:13:78:a8:da:53:49:31:44:8f:53:5d:28:a0:
                    e2:2f:62:56:35:3e:82:16:0f:22:ea:96:00:8b:e7:
                    1f:7c:1e:2f:9d:09:31:47:be:70:3d:67:35:85:dd:
                    e5:cc:36:ad:0e:65:c7:2c:19:10:88:05:15:a3:7c:
                    6f:b1:22:a2:4d:cc:bf:07:aa:cf:ea:7d:03:48:4e:
                    69:9d:25:76:ed:77:20:90:43:82:36:3d:b7:ea:35:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:72:2F:9F:DC:A0:50:09:F6:63:C0:78:35:3A:1C:AA:2E:84:23
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:4e:d9:46:37:b2:fc:ba:21:4d:7d:bb:67:cc:fa:e0:4a:
         35:b0:41:a7:4f:7b:72:2c:96:70:3d:07:65:7f:82:38:46:67:
         4f:fc:d0:46:12:d7:21:b2:77:a9:84:d2:46:e2:c1:48:c6:3b:
         e2:53:0e:26:52:49:71:2f:d2:1b:09:ed:29:93:6b:04:f5:f8:
         86:42:01:78:d2:9c:78:21:3f:b4:c7:ba:ed:ad:08:32:58:c6:
         e6:8d:ec:74:3e:6d:78:a2:05:7c:79:59:88:19:c5:01:8a:44:
         fa:39:38:82:37:1a:55:92:94:06:15:f2:03:49:92:ed:63:91:
         d0:5c:5e:43:03:8e:a1:7a:00:75:7b:e7:28:d8:a9:5e:c7:32:
         c0:b0:a1:64:50:12:c5:91:31:a6:84:76:a0:2c:ce:7e:93:f6:
         f3:9f:49:94:6a:04:b2:f9:4b:7b:cc:99:c1:5c:77:17:a3:82:
         35:7a:3e:51:0f:8a:9d:18:90:e6:a0:5f:46:05:93:14:7e:c1:
         ec:ad:0d:d5:d0:74:b6:53:72:e9:47:c5:68:80:5c:0d:b1:46:
         9b:7b:1d:a3:8b:e1:65:12:ee:fc:45:61:fc:65:ee:c2:b9:2a:
         b1:42:07:00:be:4c:71:18:1e:ba:bf:98:c2:5b:0e:c9:09:03:
         66:ee:a1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:33:19 2026 by rpki-client