Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32342d3234203d3e20323634313230.roa
File:                     3137372e31322e3132382e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          qtOuqvcoEMSpoGeuOe1Ul2RIJAelMS9lVhtn03quOWE=
Subject key identifier:   A6:EF:A0:FD:85:26:DB:9D:18:71:BB:94:45:64:8E:34:63:AE:46:FB
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       4A6AADA61527A776BEB542F7AAE253CE71591E58
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:43:17 +0000
ROA not before:           Mon 02 Mar 2026 15:38:17 +0000
ROA not after:            Mon 01 Mar 2027 15:43:17 +0000
asID:                     264120
IP address blocks:        177.12.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:ad:a6:15:27:a7:76:be:b5:42:f7:aa:e2:53:ce:71:59:1e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:38:17 2026 GMT
            Not After : Mar  1 15:43:17 2027 GMT
        Subject: CN=A6EFA0FD8526DB9D1871BB9445648E3463AE46FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:5c:6d:76:e2:42:81:40:c7:e6:dd:83:9b:
                    02:21:5e:1e:a1:59:94:c2:59:42:6a:2c:72:65:01:
                    ec:25:24:18:38:d4:9c:f8:ec:79:18:28:aa:2b:3e:
                    57:97:29:5b:6d:1e:2a:32:bc:32:31:50:84:b7:fa:
                    a2:0b:02:38:fd:40:7f:fc:29:ab:7b:64:9d:c1:90:
                    6a:b3:33:2d:70:f7:e7:78:76:86:23:cd:f8:ed:49:
                    ee:f5:72:2b:38:6a:ef:d6:19:a6:eb:99:51:27:36:
                    2c:fd:ab:b7:2e:62:1c:81:d5:9d:82:e3:a8:07:ac:
                    e0:7d:40:7e:72:88:53:6a:7a:ab:b9:19:f0:85:74:
                    b7:2d:f7:da:47:a3:c6:10:1c:fc:b4:d8:e3:7d:1c:
                    4b:92:19:53:ea:9f:14:bc:56:9d:c1:bc:01:1b:78:
                    28:82:36:e5:6d:20:ce:4e:2c:59:96:0f:1e:0a:4d:
                    53:02:d0:c5:58:b2:1c:f4:b8:9d:b0:ad:d7:6d:be:
                    ca:59:3a:d3:55:8d:1d:a9:71:7a:16:96:ac:23:3e:
                    32:eb:a3:38:ce:dd:11:34:12:f2:3f:c3:e0:31:a3:
                    ff:d1:e1:7b:f3:ea:8f:10:a7:5b:b7:35:ab:60:0e:
                    5f:e8:cc:4e:dd:8a:0e:03:63:af:a9:76:df:25:27:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:A0:FD:85:26:DB:9D:18:71:BB:94:45:64:8E:34:63:AE:46:FB
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3132382e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:f0:8a:82:49:54:e5:01:07:9d:8c:5d:9b:1c:03:ae:57:
         7a:c8:15:85:43:38:60:0e:b1:15:7f:b1:87:b9:9c:b0:88:26:
         0b:56:8b:4e:29:7e:dd:2a:56:76:bc:23:0f:5f:31:36:a9:de:
         71:ad:d6:72:a4:52:ec:14:bc:2b:66:bf:4b:70:9e:da:39:ab:
         e8:94:76:78:82:db:28:1a:6a:a4:06:f7:48:61:e2:eb:cd:4f:
         3f:36:d5:2a:96:e9:43:0e:13:84:29:ad:1a:ca:fd:b3:79:04:
         ff:be:98:62:a9:94:fa:0d:1d:34:80:b9:6e:8b:c4:01:fb:e9:
         71:aa:77:8a:ff:71:b5:52:aa:53:1c:42:78:6d:71:8a:ea:af:
         f7:94:30:f3:2a:9b:c0:d1:4a:3c:b8:c2:3d:b0:cc:f6:d1:a4:
         fc:c2:ca:2c:2e:f9:36:c2:a3:68:88:53:82:3d:77:65:f0:65:
         37:d8:b3:ec:5e:73:c9:16:6c:38:41:62:1b:ec:ea:ed:aa:4d:
         06:18:b3:0e:0e:9d:2f:e2:97:e3:c2:f5:35:a8:a4:00:61:90:
         69:6a:85:26:19:64:ee:5a:93:d7:4c:3c:21:56:88:dd:98:d0:
         8c:90:b4:3f:2e:35:bc:bd:58:44:4d:cd:91:ba:c8:a5:a8:b3:
         fe:a3:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:07 2026 by rpki-client