Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
File:                     3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa (raw, json)
Hash identifier:          18ToYm7lI0PuZsM/tGt1DU5LzItBKJyi+RPdr5Rnad8=
Subject key identifier:   38:B8:83:96:7D:A1:01:BA:DE:BB:F4:AF:1F:D5:DB:DE:80:C5:C3:E0
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       5DEBED1455D13EE97C365BB4273532C43FD4EF06
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
Signing time:             Fri 17 Apr 2026 21:55:47 +0000
ROA not before:           Fri 17 Apr 2026 21:50:47 +0000
ROA not after:            Fri 16 Apr 2027 21:55:47 +0000
asID:                     262459
IP address blocks:        177.22.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:eb:ed:14:55:d1:3e:e9:7c:36:5b:b4:27:35:32:c4:3f:d4:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr 17 21:50:47 2026 GMT
            Not After : Apr 16 21:55:47 2027 GMT
        Subject: CN=38B883967DA101BADEBBF4AF1FD5DBDE80C5C3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:21:91:b0:ca:85:d8:1e:b6:3f:80:0e:4b:
                    df:d8:21:7f:74:18:75:36:57:b4:9a:c4:af:fd:75:
                    9e:56:a5:92:26:17:e6:f7:90:20:71:6e:ff:be:71:
                    d9:ce:64:d8:12:1d:0e:ff:eb:36:94:bc:12:00:d5:
                    59:40:df:a6:55:4b:ef:f1:09:af:92:02:8e:c8:cf:
                    21:7c:8f:f7:56:ca:3f:94:f2:d2:32:79:7d:ee:60:
                    77:ae:3a:e1:9a:97:ff:61:ee:b3:f1:83:02:3e:28:
                    0d:97:a2:b7:58:2c:c5:92:ea:7c:c8:3e:00:35:3a:
                    4f:0e:25:10:3f:f0:1e:a3:2d:1a:11:fd:e0:e4:c0:
                    86:9e:cc:8a:f0:0b:3c:fe:da:05:1b:dc:bd:fd:2b:
                    34:9c:6e:8d:fc:a4:4e:40:90:d7:5c:29:eb:5b:33:
                    ec:2b:f3:9a:c7:61:1d:8b:cc:3b:3c:b9:55:5b:32:
                    56:21:d4:e5:67:f2:c4:9c:9a:4a:19:3f:09:65:ae:
                    ec:84:f9:45:5b:2a:04:92:6e:e5:bb:dc:a4:7c:be:
                    99:bb:e0:bf:ef:60:91:14:ce:91:95:ae:60:e6:8c:
                    ca:32:c2:c6:53:57:00:d6:55:68:0a:9e:39:20:e9:
                    5f:69:29:55:97:0c:13:31:b6:32:0e:b6:26:05:f7:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:83:96:7D:A1:01:BA:DE:BB:F4:AF:1F:D5:DB:DE:80:C5:C3:E0
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:fd:8c:a4:a6:d1:eb:1e:2e:cb:8b:d9:fc:52:25:8b:d0:
         8f:fb:20:a6:69:57:4b:3b:8d:83:f5:ba:37:d3:8e:84:48:cb:
         5f:48:b4:b5:2a:02:d6:4b:a2:7d:ca:fe:38:26:f8:8c:3a:39:
         16:91:c7:cf:fc:7a:d4:15:29:41:b2:21:91:5f:ab:a4:cf:5c:
         f6:79:bb:3d:9d:39:ac:50:ff:ae:65:82:77:dd:54:1d:85:94:
         59:60:0f:52:6d:d5:a5:77:41:24:6c:23:57:ff:18:37:1c:a0:
         a0:40:bc:fa:69:34:6c:7d:0a:fe:b8:65:75:cb:da:b5:e1:e5:
         5c:5f:0d:24:8f:80:1a:75:4e:93:79:5e:a2:fe:15:b5:c3:a8:
         59:c7:f3:40:42:59:d3:b5:45:4c:03:ad:c8:92:fe:78:4b:ca:
         de:de:e2:17:a3:7b:13:4e:f7:9c:7a:82:ac:fd:3d:00:91:26:
         94:3e:04:23:1e:c9:21:06:31:14:71:e5:3b:f8:e0:32:9f:f6:
         00:a0:2c:01:a6:f4:d4:79:36:d1:1f:6f:7a:d4:69:21:a2:13:
         43:04:23:b9:ed:36:cb:b7:17:95:c7:db:16:58:db:ed:b8:52:
         11:f8:19:25:7b:90:18:c5:ea:79:7a:62:49:96:f4:95:c9:eb:
         64:21:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:48:19 2026 by rpki-client