Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32352e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e32352e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          ldFikbKhEbsqjKRB5/TUvLerL8N9zxbwQsG4+cmuir4=
Subject key identifier:   1B:C5:F6:55:08:67:7A:34:72:C3:B2:94:AB:AF:B8:0B:6C:34:2B:3C
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       2B2D93CE85EE54E2A4B54B7BC0AE05A25FE40F27
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32352e302f32342d3234203d3e203533303136.roa
Signing time:             Fri 18 Sep 2026 12:14:31 +0000
ROA not before:           Fri 18 Sep 2026 12:09:31 +0000
ROA not after:            Fri 17 Sep 2027 12:14:31 +0000
asID:                     53016
IP address blocks:        177.74.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2d:93:ce:85:ee:54:e2:a4:b5:4b:7b:c0:ae:05:a2:5f:e4:0f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Sep 18 12:09:31 2026 GMT
            Not After : Sep 17 12:14:31 2027 GMT
        Subject: CN=1BC5F65508677A3472C3B294ABAFB80B6C342B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:6b:61:ff:6f:1c:a5:47:6c:78:4d:7a:79:
                    6c:46:25:45:84:ea:fb:59:53:4d:42:27:eb:15:35:
                    1c:6b:c4:af:e2:68:a1:6d:3c:36:06:4f:9c:dd:49:
                    ce:84:0d:47:a3:48:0e:60:74:13:d1:16:d5:04:80:
                    1e:e7:44:d0:7b:b3:12:fc:09:7c:28:ca:6c:1b:26:
                    d8:63:55:b3:f0:d3:57:d8:73:fd:7d:a5:12:c4:7b:
                    20:ea:7f:4b:9a:bb:34:6e:c9:2f:75:d0:c0:7e:7c:
                    45:33:fc:df:f5:01:b1:4d:95:f8:da:b0:0d:43:e3:
                    49:b6:a3:07:5f:52:4a:b6:19:61:05:ec:ce:59:ae:
                    34:bd:5a:d8:71:6f:39:27:75:95:43:98:a2:70:d2:
                    26:4f:6d:45:3c:9a:1b:87:3f:ed:b2:b7:21:ef:a2:
                    ed:a4:43:14:38:d0:47:a9:87:5e:2d:29:da:33:79:
                    b6:3e:dd:93:c6:78:30:96:48:3d:48:04:3a:25:e3:
                    9e:e3:82:39:41:92:db:30:23:81:26:e9:f6:8e:85:
                    cd:7b:9d:b5:4f:08:91:48:54:c3:02:8c:95:6d:f4:
                    09:9e:2f:87:bb:a5:4d:ef:dd:b8:2c:ea:ec:e3:72:
                    5d:9c:e7:06:66:4a:61:42:68:3a:5e:ca:da:d5:7b:
                    7d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C5:F6:55:08:67:7A:34:72:C3:B2:94:AB:AF:B8:0B:6C:34:2B:3C
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32352e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:db:ed:c4:42:fa:0d:3c:ab:c7:41:7e:09:f0:38:4b:2f:66:
         28:a7:ab:2d:b6:cc:17:0d:d8:15:db:d4:b7:96:01:a2:6a:30:
         c3:26:f6:18:5f:91:65:52:06:bb:40:fb:a7:52:fa:13:eb:bf:
         7b:25:e1:f7:92:38:e3:d9:e4:f5:a0:b0:d6:e7:fb:f8:44:53:
         0a:42:2d:5b:f7:cf:d6:a8:1f:ff:61:16:b0:16:db:04:29:ca:
         46:c5:a1:01:b1:e4:c1:7f:12:51:1b:a7:c0:d9:0b:6c:6c:28:
         25:72:41:9a:92:1f:1c:3b:e2:7b:15:7f:3f:20:f6:b7:11:2a:
         60:28:61:7c:fb:ba:2e:87:32:fd:b3:2d:06:23:fe:d2:17:30:
         4e:55:a2:fc:72:7f:b3:07:98:98:38:29:7e:c1:e1:f7:73:79:
         07:3e:64:3b:3e:6a:76:7b:12:87:25:71:f7:5e:f4:0a:21:09:
         22:d7:21:80:94:7f:a6:8e:12:25:21:0d:fa:07:7b:5e:f4:0e:
         81:e9:e8:29:24:c9:c1:8f:70:f3:a4:7e:24:79:02:7b:56:da:
         de:59:ee:bc:76:49:33:fa:b1:2e:a9:43:52:4b:b6:70:8e:5d:
         a4:42:42:49:23:ba:88:0f:74:99:2b:b6:b4:65:3d:47:65:e3:
         d1:23:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:02:19 2026 by rpki-client