Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32332d3233203d3e20323634313230.roa
File:                     3137372e31322e3132382e302f32332d3233203d3e20323634313230.roa (raw, json)
Hash identifier:          J8cqhhGp0QOxykSsU6gkdm5I4N/rfopsClbKNEvpt9A=
Subject key identifier:   95:A6:ED:42:9E:38:78:A3:63:E7:EB:44:FA:0A:DA:0B:12:62:5E:C3
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       7648ADC57A2F7F50CE3990C1E4417F51AAB9762E
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32332d3233203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:43:01 +0000
ROA not before:           Mon 02 Mar 2026 15:38:01 +0000
ROA not after:            Mon 01 Mar 2027 15:43:01 +0000
asID:                     264120
IP address blocks:        177.12.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:ad:c5:7a:2f:7f:50:ce:39:90:c1:e4:41:7f:51:aa:b9:76:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:38:01 2026 GMT
            Not After : Mar  1 15:43:01 2027 GMT
        Subject: CN=95A6ED429E3878A363E7EB44FA0ADA0B12625EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:9b:8e:9b:bb:58:04:cd:c9:b7:be:ca:f1:
                    2d:f9:ed:48:6d:be:52:a1:c9:4f:d5:13:8c:54:bd:
                    c2:ba:34:38:ac:37:21:ce:22:8b:f9:a3:e4:70:6c:
                    e5:0e:df:9e:9b:0b:04:08:8c:af:ad:e2:47:ca:fc:
                    50:b0:e8:a5:2a:a6:96:80:1f:ad:4f:79:bc:0d:45:
                    58:e8:2a:84:13:45:7e:88:f8:1c:a4:e6:c9:e3:b3:
                    7d:66:24:97:5c:50:60:0d:83:f9:46:c0:62:f7:0a:
                    2a:e7:6f:ba:04:99:dc:d8:59:56:3e:af:31:b7:02:
                    8d:a0:89:97:d1:77:f2:c4:26:5b:b2:fd:b0:6f:db:
                    0e:5b:95:ee:00:f6:0d:09:5b:a9:1d:f6:ab:61:da:
                    b3:48:83:94:e7:0d:36:0b:e8:07:7d:0a:c9:ec:0c:
                    41:75:61:df:20:c1:ec:0a:e5:9b:69:07:c3:fb:bb:
                    fe:d5:64:ca:09:67:6c:f1:11:9a:2f:7d:ee:73:69:
                    5a:6e:c5:45:46:3c:31:59:2a:83:4c:09:96:08:9a:
                    a0:b8:80:43:97:7a:fb:2d:21:d4:b3:df:f0:0b:41:
                    4c:78:14:69:5f:9c:61:ab:8d:0f:84:e4:f3:3c:ac:
                    8b:65:ab:dc:61:b8:eb:02:29:39:53:32:de:a9:b3:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:ED:42:9E:38:78:A3:63:E7:EB:44:FA:0A:DA:0B:12:62:5E:C3
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32332d3233203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:9e:4c:43:50:94:15:d2:04:9f:d3:44:7a:65:66:00:76:
         b9:8f:bb:d5:f7:85:99:6c:42:9c:d9:d1:04:ba:73:e2:2b:8c:
         da:5c:62:a5:bd:d6:57:78:51:8f:7a:e2:e1:41:96:91:ea:ad:
         83:e6:4a:c5:4c:8e:0c:0b:b6:43:df:df:44:c5:50:ea:9d:00:
         fe:d8:51:4f:79:2c:79:a8:30:5a:dc:d2:a5:b3:01:a0:1b:b1:
         c0:0e:fc:13:d2:1e:58:ef:80:6a:f3:3b:b4:05:0d:b9:88:bf:
         8d:68:4b:2a:25:5e:26:17:e5:08:84:72:df:33:be:54:11:dc:
         11:76:32:68:65:9b:f4:0d:69:22:d4:3c:36:cb:c3:fb:cd:73:
         88:57:3c:05:98:b0:21:a5:9e:c2:36:6c:e1:e4:d6:00:a9:86:
         49:43:bb:83:06:12:25:6e:92:ac:3c:1b:8e:cf:a7:63:1f:f2:
         e9:67:d7:5f:01:cf:59:9e:0f:3b:62:26:1c:8c:81:99:c4:d7:
         2e:c9:86:9a:1c:67:5c:1a:00:6e:b1:a3:af:aa:94:57:a2:21:
         0f:3b:09:fe:0c:80:49:c5:e1:47:86:3d:fc:cd:8f:c9:66:69:
         d0:1c:c9:0f:da:dc:14:61:b3:24:52:f9:a8:15:e2:25:02:33:
         f1:64:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:16 2026 by rpki-client