Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39362e302f32342d3332203d3e20323731363135.roa
File:                     3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (raw, json)
Hash identifier:          Gza3hQzfaff9XDeJTTzK24+u3mgvFLQMjyHuVGvUZQ4=
Subject key identifier:   38:BA:B9:2A:A1:98:C6:93:5F:84:0E:8E:53:99:F8:05:0F:D0:84:06
Certificate issuer:       /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial:       02E6FE5850189105F942CC66AA19A731AD796225
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39362e302f32342d3332203d3e20323731363135.roa
Signing time:             Wed 27 May 2026 01:56:35 +0000
ROA not before:           Wed 27 May 2026 01:51:35 +0000
ROA not after:            Wed 26 May 2027 01:56:35 +0000
asID:                     271615
IP address blocks:        177.39.96.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
                          rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e6:fe:58:50:18:91:05:f9:42:cc:66:aa:19:a7:31:ad:79:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
        Validity
            Not Before: May 27 01:51:35 2026 GMT
            Not After : May 26 01:56:35 2027 GMT
        Subject: CN=38BAB92AA198C6935F840E8E5399F8050FD08406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:8e:57:12:93:0f:91:03:4d:30:a3:34:26:
                    30:c1:28:08:ef:f9:56:42:ea:4a:a3:d6:1e:0d:ce:
                    21:db:1d:d0:85:53:05:01:2d:d9:e4:b4:08:3b:5b:
                    53:f8:ce:81:2a:1d:3b:97:8a:03:93:6f:52:2a:74:
                    9d:9b:34:bf:ef:06:25:5f:c3:cb:f3:e9:9a:10:9a:
                    d1:13:d6:f8:39:29:ea:de:71:f4:f3:0b:8a:d7:65:
                    5d:63:de:9e:7e:d1:4b:ea:66:33:90:ab:d6:02:db:
                    06:b3:a2:af:98:3a:03:88:72:0b:88:1f:7e:42:80:
                    d4:94:d9:8c:a6:3e:30:f2:86:f1:15:38:fb:a1:65:
                    9d:e8:c0:f2:f9:d2:24:fe:95:3d:4e:00:4c:3c:ae:
                    28:14:1e:37:94:65:b0:85:18:55:2d:2f:f3:e4:65:
                    d8:f5:a5:40:a9:af:b9:c4:df:33:6e:32:75:ab:e2:
                    8b:34:64:56:3f:51:0d:94:d2:44:a7:90:ed:36:60:
                    21:11:3e:c0:82:7c:ba:91:02:e2:2f:e2:27:d5:0f:
                    93:fa:7c:6c:0d:0e:25:54:85:31:33:65:42:8d:37:
                    35:d4:32:65:34:05:34:69:f0:df:ef:22:24:eb:6a:
                    76:32:12:cd:78:b3:be:81:6e:fa:93:15:54:2d:b1:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BA:B9:2A:A1:98:C6:93:5F:84:0E:8E:53:99:F8:05:0F:D0:84:06
            X509v3 Authority Key Identifier:
                keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39362e302f32342d3332203d3e20323731363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:aa:fd:dc:9b:25:cf:34:4d:91:34:1a:83:a2:11:fe:90:
         cf:e9:40:55:d4:5a:08:c1:5b:5e:9e:bf:05:49:26:83:75:9b:
         bc:59:6e:23:27:5d:8b:61:e0:b9:d5:5c:6f:93:e1:78:7f:84:
         e9:8e:a4:c0:be:79:79:ad:d3:a6:72:2c:52:a8:8e:24:79:be:
         77:a1:72:66:19:6c:e0:cc:07:a5:59:55:7c:2c:8f:45:d1:58:
         1c:a4:f8:8f:42:3c:e0:b9:65:2d:6c:64:57:d7:f2:0d:53:ef:
         ea:30:2f:f8:e0:2f:06:19:62:6f:c8:83:4d:4b:a4:6b:19:0d:
         49:9c:ed:db:3d:4e:e2:40:bb:1d:0a:98:96:b6:ad:9d:3e:5a:
         93:1f:28:1c:04:06:19:5a:06:4d:d3:01:59:8c:2c:a6:0f:21:
         af:6c:15:ae:bd:8b:c0:29:84:0c:bf:cd:b8:e6:83:0e:58:e0:
         13:95:86:1d:56:dc:d3:b7:8c:8a:d8:89:03:43:ca:ed:5c:fe:
         b0:4c:1d:5b:47:2d:9f:01:e9:be:db:ad:8a:90:be:7e:a0:72:
         ed:14:ef:67:6c:3f:b5:fb:0b:9a:6e:ff:ef:a1:17:0f:41:e7:
         90:bb:00:6b:bf:42:ee:b2:d5:ba:68:60:e8:18:d6:44:16:77:
         83:13:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:44:32 2026 by rpki-client