Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
File:                     3137372e38352e37362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          x/WzKNmEJE8oMtGIdO8j22KNEFl4JRt3YPz6CWS52iQ=
Subject key identifier:   42:11:07:B9:14:A8:84:8D:A2:01:16:92:14:F9:5D:1B:73:FF:E0:43
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       7A19E1C04F54C12C8536B620E3CA4178E6BE8ACE
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:42 +0000
ROA not before:           Mon 13 Apr 2026 15:39:42 +0000
ROA not after:            Mon 12 Apr 2027 15:44:42 +0000
asID:                     262296
IP address blocks:        177.85.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:19:e1:c0:4f:54:c1:2c:85:36:b6:20:e3:ca:41:78:e6:be:8a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:42 2026 GMT
            Not After : Apr 12 15:44:42 2027 GMT
        Subject: CN=421107B914A8848DA201169214F95D1B73FFE043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:61:66:f8:43:96:28:85:87:4d:cc:1a:9a:
                    7d:0f:fe:88:fc:6e:b1:c0:c7:18:55:80:1f:80:11:
                    19:c1:0f:c9:cc:50:c5:88:d9:69:17:53:be:fc:4a:
                    6d:c8:38:1a:57:d9:3d:75:e6:dd:90:ac:5a:ae:fb:
                    84:de:a9:3d:66:a9:73:c1:1f:47:cd:c9:ed:e9:58:
                    a6:73:ee:7a:e9:d8:f6:b5:47:39:55:77:ab:51:d0:
                    4e:c1:94:e9:6a:fc:40:98:cf:55:2e:0d:8f:36:35:
                    eb:32:16:2a:d9:4d:32:36:da:80:2c:34:00:6e:81:
                    05:46:94:23:3b:c7:6b:ee:26:db:8b:12:9b:32:65:
                    c6:a3:2d:91:76:b4:4d:fb:82:9e:c8:0e:86:e6:69:
                    8b:97:7c:1b:f4:78:b1:36:50:27:c9:e8:00:71:7c:
                    f5:82:42:ec:4f:a4:b2:c0:8f:5b:40:75:0b:7e:73:
                    c2:83:0a:d8:17:d4:fb:a1:e9:a2:38:8e:26:80:ad:
                    36:c2:be:3e:62:f1:21:c9:ae:a7:4a:f7:c9:f4:8c:
                    2b:4a:a1:d8:c6:e3:43:5d:0c:be:91:ca:78:5e:fd:
                    96:9d:6c:0c:6d:00:b8:3b:f6:02:e1:19:e6:95:da:
                    d8:6c:5f:4d:82:df:3a:d9:a8:05:73:9a:3a:87:87:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:07:B9:14:A8:84:8D:A2:01:16:92:14:F9:5D:1B:73:FF:E0:43
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:f0:8b:1d:2e:9f:48:cc:b9:0f:f6:59:2f:7d:ae:35:57:
         d5:7f:07:e4:35:41:7e:5d:fb:37:8a:45:38:33:9c:23:67:e9:
         7f:99:8d:46:68:2f:7e:fe:12:a3:ae:ee:93:47:8a:cf:1e:02:
         ce:bf:0b:49:2d:01:d1:a2:40:2a:13:59:15:45:6e:5f:e8:ea:
         19:70:f7:7b:15:b1:82:8c:d0:ba:f2:60:28:eb:9f:a6:d7:bb:
         97:14:83:d8:fd:96:9c:5e:fb:3e:5b:c7:07:db:90:ff:46:51:
         61:fd:3b:4e:fe:32:db:8b:05:7a:e1:8b:56:db:44:b8:82:18:
         c6:8f:94:15:98:2c:6b:12:4c:28:06:44:71:ed:c2:4d:13:0e:
         9b:95:50:95:07:6b:ba:9e:2a:b6:12:70:d4:6f:ac:5b:a0:3f:
         34:9e:30:98:89:5f:72:a6:49:15:5a:b6:ab:f7:b3:4c:66:e9:
         77:0e:93:aa:d2:8b:c0:e2:1a:6c:e2:f1:2c:77:e5:40:cb:7e:
         7c:28:55:5a:e0:f9:63:01:62:a8:43:f7:f1:94:44:fd:e5:3e:
         ea:7c:2a:fa:87:a2:6d:a2:ff:2e:bc:7a:1e:8e:16:5d:ee:83:
         94:0d:d4:d1:a4:71:21:5e:8f:19:1f:d7:a4:bc:52:00:9e:6a:
         1b:71:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:08 2026 by rpki-client