Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          b/Bf2NO8D4AkJE2LPK8CNQSNaAzd/AQ+yV2xmWDJYPU=
Subject key identifier:   83:4D:9E:5A:0E:87:1A:3D:67:78:1C:13:B6:1C:25:9E:C9:1F:BE:52
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       57C495E3C789828A3F9018E615250C7692F98426
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:39 +0000
ROA not before:           Mon 13 Apr 2026 15:39:39 +0000
ROA not after:            Mon 12 Apr 2027 15:44:39 +0000
asID:                     262296
IP address blocks:        177.11.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c4:95:e3:c7:89:82:8a:3f:90:18:e6:15:25:0c:76:92:f9:84:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:39 2026 GMT
            Not After : Apr 12 15:44:39 2027 GMT
        Subject: CN=834D9E5A0E871A3D67781C13B61C259EC91FBE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:41:51:67:fb:02:6b:b5:3b:82:62:c5:20:
                    75:21:ff:c1:b0:3c:86:0b:e9:b1:31:2d:8f:f1:50:
                    99:b1:ee:dc:63:d1:1d:19:fe:d9:52:cb:3e:0a:ce:
                    13:53:08:19:29:d3:41:9d:cf:66:f0:c9:d0:1f:c0:
                    3c:eb:95:d8:43:65:24:c0:9d:fa:25:23:59:92:8c:
                    e5:c0:14:51:c8:8f:bf:1e:79:28:df:ad:64:a2:16:
                    29:85:06:d7:c6:21:30:2d:20:1f:9a:42:3b:67:42:
                    fa:7e:61:7a:02:41:3a:8c:ec:bc:8c:2b:69:77:88:
                    41:b6:c1:75:9e:ad:9f:cc:d0:4e:0e:c7:45:cc:e4:
                    cf:dd:06:d7:62:64:a2:8b:28:a3:e9:d9:d0:d0:9f:
                    5f:e9:00:52:a9:7a:c4:b4:77:de:81:a5:49:3a:bf:
                    1c:e5:1f:4b:a8:89:5a:17:4b:96:46:f2:b3:93:fc:
                    bf:43:a9:23:f7:48:5b:5d:7a:6e:bf:67:35:a2:35:
                    21:28:0a:fa:3b:9a:a4:6e:e3:2e:00:34:df:03:bf:
                    de:bf:0f:b2:ea:74:c8:1b:e4:68:b7:2e:e7:09:e3:
                    01:55:45:75:ff:6a:d2:8a:62:ce:73:c7:9a:fa:36:
                    d4:e9:c0:1a:fc:ea:a5:36:33:04:d9:06:56:cf:29:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:9E:5A:0E:87:1A:3D:67:78:1C:13:B6:1C:25:9E:C9:1F:BE:52
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:e7:e3:53:04:4d:13:e6:ac:f8:06:08:f8:49:8c:3e:48:
         dd:0e:08:75:bd:d8:16:c0:02:59:d4:ec:dd:83:aa:48:d8:73:
         3d:78:0f:a0:09:45:fe:ec:3a:8f:54:4f:1a:75:76:c4:5e:0e:
         ee:d8:59:86:a3:84:a0:64:6f:0e:19:72:d5:11:5d:b9:03:e6:
         e0:28:68:46:18:b5:04:5c:d9:67:62:5c:ac:8d:fd:57:72:4e:
         11:64:35:2c:93:f4:75:a4:69:68:6e:ec:3d:e9:e2:a8:37:20:
         d2:41:db:3e:9c:f3:9a:78:35:97:c6:a9:a8:c6:f8:a8:08:8e:
         a5:e3:20:7e:54:23:2f:48:d3:3b:b8:cc:65:70:dc:04:4b:fc:
         05:35:84:43:3b:bb:64:bf:c6:79:f8:f0:01:d0:b9:a5:96:fd:
         31:f3:53:30:2f:43:97:9a:e2:dd:0d:53:39:00:8a:af:37:b0:
         3f:d7:91:53:ac:1e:7d:c5:b3:b1:ff:70:50:c1:d6:48:2a:89:
         db:7a:17:5f:ec:51:24:6d:4d:bb:5d:d7:c0:b6:85:1a:e8:b9:
         95:e7:79:d5:ca:88:83:03:d1:fe:43:89:8b:fb:52:9a:86:52:
         a4:21:8c:d5:f6:11:04:cc:1c:59:a9:7c:d2:e8:74:5e:ec:18:
         e8:58:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:00 2026 by rpki-client