Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          Ei3FL54YG4ahzuEXH+r3WANVW7876lo2m9bXF478G24=
Subject key identifier:   F0:80:05:60:D5:9B:C9:A5:AF:8A:FE:6A:CE:1C:72:5A:1A:BC:F2:F8
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       7F1806E3F8852D84955F4DB3FC41BC9BCC223DBE
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:24 +0000
ROA not before:           Wed 10 Jun 2026 14:22:24 +0000
ROA not after:            Wed 09 Jun 2027 14:27:24 +0000
asID:                     262444
IP address blocks:        177.128.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:18:06:e3:f8:85:2d:84:95:5f:4d:b3:fc:41:bc:9b:cc:22:3d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:24 2026 GMT
            Not After : Jun  9 14:27:24 2027 GMT
        Subject: CN=F0800560D59BC9A5AF8AFE6ACE1C725A1ABCF2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:a7:a8:98:4b:ba:24:c8:52:dd:7e:37:d4:
                    6f:92:23:d3:52:09:81:be:74:bb:29:4a:8c:92:17:
                    92:11:e2:87:39:5c:ad:08:aa:6f:5f:e8:59:ee:8d:
                    27:ea:87:8f:0b:0c:fd:30:da:d3:00:7f:e9:17:97:
                    8e:25:0d:6d:dc:72:76:73:98:14:67:87:82:3f:f7:
                    0d:4e:2a:bd:51:2d:10:f4:90:f3:5e:49:6f:d7:81:
                    91:e0:1a:31:76:24:c7:71:39:0d:1a:e5:cf:ed:5e:
                    30:42:f7:01:63:e6:c8:ff:b1:49:29:f6:cc:95:e4:
                    59:b0:07:bc:a0:d4:aa:1f:43:c1:60:bc:d5:b7:c8:
                    50:af:ec:b5:c9:fd:89:58:a8:df:7b:e4:69:52:1a:
                    af:2e:2a:ed:d5:b8:19:d2:12:82:e8:2b:24:83:44:
                    eb:3c:09:99:f4:cd:90:ef:d1:6f:f9:65:db:24:16:
                    1e:70:f5:61:e5:95:06:01:96:bb:e8:dd:b5:3f:7a:
                    3c:b4:f7:15:ce:ee:9d:3d:39:2f:c5:c6:19:30:ab:
                    65:cb:71:71:28:41:61:eb:1e:66:f2:7b:02:a9:b0:
                    f7:e2:1b:6c:81:c9:ac:58:e1:ee:f8:cc:ae:46:02:
                    08:e8:3b:57:96:7b:23:7f:e8:6c:e3:4c:a5:94:f5:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:80:05:60:D5:9B:C9:A5:AF:8A:FE:6A:CE:1C:72:5A:1A:BC:F2:F8
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:08:5e:c7:af:0b:65:b8:9d:cb:2b:a9:54:fd:44:2e:ec:
         07:a9:3d:fc:47:05:fc:d1:14:0f:43:94:37:0e:bf:f8:ae:78:
         d0:cd:75:20:ff:06:31:62:8b:ff:e9:1d:05:2a:18:6b:bd:04:
         f5:03:18:a5:2f:2f:03:ae:5b:86:1a:fc:74:6a:c1:d6:de:62:
         da:24:74:e9:ec:b3:6f:c7:08:ed:41:5f:38:55:5d:c5:40:cf:
         0a:9a:44:17:24:2b:aa:19:61:59:70:6f:5d:21:81:f0:75:fa:
         a5:23:34:19:58:f3:00:87:1e:a8:91:42:69:08:c3:6a:d2:47:
         f7:66:21:c0:5f:59:8d:ff:94:5f:9e:5f:d5:ac:44:a8:2b:62:
         7f:9b:69:04:5a:84:03:6f:08:2c:c0:a7:34:1c:8a:00:32:f6:
         79:0b:b4:70:eb:70:1a:0b:61:5d:98:e9:6a:d0:14:6c:6d:92:
         25:8d:27:d9:f9:40:0f:08:77:e5:3a:61:33:f4:05:81:c8:1a:
         cb:38:26:5d:c3:a3:80:1a:96:e6:6f:8a:6e:4c:67:08:0a:87:
         89:5b:de:46:69:b9:92:31:b7:dc:68:2b:d4:b3:71:85:1e:9e:
         ce:00:57:86:d5:a5:0f:39:95:33:6c:c0:1f:45:31:58:62:b0:
         d3:30:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:43:16 2026 by rpki-client