Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa
File:                     3137372e39312e34302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          fzLwNQ/NWXFo2yUm68srEmm34+ka//p/l9DTQUhdTkI=
Subject key identifier:   F1:5C:A0:92:29:94:EE:2F:7F:3A:E0:FE:47:C2:33:A8:6B:C8:BC:99
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       0EFB3651D2232A0DDA1F70732B7416A5F63055CA
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa
Signing time:             Tue 24 Feb 2026 21:28:02 +0000
ROA not before:           Tue 24 Feb 2026 21:23:02 +0000
ROA not after:            Tue 23 Feb 2027 21:28:02 +0000
asID:                     52573
IP address blocks:        177.91.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fb:36:51:d2:23:2a:0d:da:1f:70:73:2b:74:16:a5:f6:30:55:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Feb 24 21:23:02 2026 GMT
            Not After : Feb 23 21:28:02 2027 GMT
        Subject: CN=F15CA0922994EE2F7F3AE0FE47C233A86BC8BC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:96:d2:e2:f5:57:27:c1:a6:6e:26:9a:61:
                    79:8f:10:dd:f1:52:60:a7:77:99:29:1c:70:5f:8b:
                    1f:e9:5e:2a:ed:38:18:a6:a9:73:2e:4e:b6:64:60:
                    a3:fc:c5:0f:0f:5a:f9:75:17:1d:a9:fb:00:62:5a:
                    18:b7:df:18:69:9a:6f:fe:2b:82:76:84:5c:30:d1:
                    ed:2d:cb:58:db:df:f6:19:c1:33:0f:ea:8b:b5:33:
                    fc:10:1f:77:b3:9a:bd:38:5d:e4:93:52:8d:89:c8:
                    ca:15:17:d9:dc:42:ca:95:60:49:52:f7:4b:f0:27:
                    7d:3b:24:dc:ee:69:f2:7a:2a:e8:ae:8b:d3:7a:89:
                    bf:4b:8d:d0:07:c7:1a:74:c2:62:1f:a9:1a:1c:18:
                    9d:a5:5b:85:f3:04:42:fa:4c:af:8d:f8:f3:17:4f:
                    f6:2b:ab:cd:14:4d:75:d5:43:c6:72:cd:84:c9:ab:
                    a2:d5:d7:9b:00:de:ae:66:54:a6:88:c3:c7:30:d1:
                    79:19:ce:20:f4:28:78:5d:4b:fc:9b:ca:14:6e:d1:
                    20:ff:b9:66:45:7a:06:3e:94:5f:82:ba:b4:68:b7:
                    e2:93:a1:a8:0d:ba:72:e3:8a:f4:85:13:e5:7c:04:
                    47:34:9e:44:af:96:c0:3b:47:62:d0:db:94:11:af:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:A0:92:29:94:EE:2F:7F:3A:E0:FE:47:C2:33:A8:6B:C8:BC:99
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:78:97:59:12:55:64:28:99:fc:c0:e7:fb:3e:f4:8e:6d:03:
         58:4f:ff:6d:53:49:50:34:04:c5:31:ca:ff:05:b5:3f:7c:17:
         86:bf:be:9c:2e:98:2d:f7:f5:b6:b9:63:23:8f:96:9d:3a:dd:
         8a:e0:9a:1a:c6:fc:da:94:1d:85:b9:73:9c:50:15:cf:3b:b9:
         ff:01:56:d3:6f:c5:df:a0:ed:a9:31:b6:9b:5c:bb:4a:a3:f3:
         69:93:a5:ce:30:f0:d3:11:e0:43:00:eb:45:0d:ba:97:dc:81:
         37:5f:ad:37:49:dc:75:18:7c:0c:10:29:06:5c:52:0f:95:76:
         22:16:7d:49:22:06:b1:ef:fb:a1:a3:56:7c:05:1a:de:a6:0d:
         9a:3c:7e:83:96:24:53:74:66:ad:a1:c1:3b:80:ef:c3:51:7f:
         df:99:d8:90:cf:d3:1e:ee:8e:bd:64:c5:17:ca:7d:b7:dc:48:
         b2:91:86:eb:44:c8:8c:1b:46:20:e1:5a:8f:ab:23:9b:ce:a1:
         df:33:23:e6:16:1d:94:5f:9e:c0:92:62:48:5f:77:db:46:5c:
         16:94:a7:8b:92:95:7b:f5:bb:1e:d8:d0:29:1b:81:de:a5:da:
         97:b4:ff:6b:b9:78:3d:63:05:92:5a:a4:da:19:80:45:74:bb:
         1c:7b:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:05 2026 by rpki-client