Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32332d3233203d3e20323634313230.roa
File:                     3137372e31322e3133302e302f32332d3233203d3e20323634313230.roa (raw, json)
Hash identifier:          ba+xPggFy7h4+6yP2jhCLyniQ3nDKn3KwNFJBqs4e7w=
Subject key identifier:   56:F0:03:04:0C:5B:B7:49:F3:E4:AE:4F:A6:94:81:27:71:D2:2D:30
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       0A62AEB80BD06A67F3923DA0AC94A8C5CC56B5C5
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32332d3233203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:44:28 +0000
ROA not before:           Mon 02 Mar 2026 15:39:28 +0000
ROA not after:            Mon 01 Mar 2027 15:44:28 +0000
asID:                     264120
IP address blocks:        177.12.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:62:ae:b8:0b:d0:6a:67:f3:92:3d:a0:ac:94:a8:c5:cc:56:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:39:28 2026 GMT
            Not After : Mar  1 15:44:28 2027 GMT
        Subject: CN=56F003040C5BB749F3E4AE4FA694812771D22D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:41:e2:7b:b4:57:13:a1:1d:b0:72:21:f4:
                    88:fd:3d:97:ad:b9:07:0a:08:07:dd:d5:04:93:c7:
                    19:8b:fc:0c:04:96:62:2b:b2:b2:ed:72:c4:a3:32:
                    43:22:92:6d:15:33:ae:b0:21:9e:a2:b7:16:64:fd:
                    9f:bd:06:9a:34:a2:7d:db:f8:68:49:c5:c9:8e:18:
                    bd:64:14:d8:0a:25:35:fd:d0:45:5d:c1:e5:73:34:
                    d7:a8:27:86:67:f2:6f:c0:a3:34:c3:ed:bf:9c:ee:
                    27:7e:a3:0a:53:11:55:06:b1:02:d6:f6:b6:b8:70:
                    25:5e:e1:94:87:03:39:5f:c5:e1:db:64:42:fb:b0:
                    f4:08:a4:11:55:f5:85:f7:54:8a:e4:9c:33:e9:8b:
                    33:dc:47:1b:6d:f5:b8:54:c0:a6:92:cf:8d:d4:a2:
                    8b:06:7b:e7:3f:4a:82:12:36:cc:89:1d:4c:69:1f:
                    0a:3b:da:a4:9b:d9:13:7f:76:9c:94:da:aa:04:d9:
                    da:91:29:af:b3:9a:51:86:d8:5e:3f:83:f3:63:a8:
                    85:fe:58:18:b4:5e:e7:a3:95:92:2e:f8:fe:ec:24:
                    21:62:0f:f1:15:18:2f:fa:52:43:99:5e:82:f6:fd:
                    a0:81:2e:bc:55:ec:c9:c0:cf:71:7a:eb:6e:00:63:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:03:04:0C:5B:B7:49:F3:E4:AE:4F:A6:94:81:27:71:D2:2D:30
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32332d3233203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:00:ab:5e:42:b4:4f:2a:67:aa:b4:61:65:e8:82:57:11:b8:
         36:c0:32:b7:e9:4b:3e:da:df:4b:c6:a3:c9:78:0a:ea:60:d9:
         a3:4f:a0:b5:1d:9b:11:6f:3e:61:92:b0:f9:4b:32:b3:e0:f9:
         06:74:13:7b:54:36:16:cd:08:f6:91:7b:b5:a8:a8:ea:9f:e3:
         75:ea:d6:b7:68:f1:a5:5d:b3:88:d8:ad:39:5e:de:85:db:3e:
         ad:97:c5:1d:aa:ea:d1:e4:fa:65:17:78:5d:b9:95:f7:ce:4d:
         85:21:55:28:69:91:82:b3:10:e1:d4:f4:8c:7a:45:7b:5f:e8:
         d0:ee:1b:76:11:0d:15:68:8a:2e:20:9f:be:42:b7:7a:e5:4d:
         3d:fa:ca:d9:f1:f7:de:78:a7:2c:0d:1f:19:aa:16:0e:20:7f:
         85:a3:69:a2:57:80:f8:cc:a8:41:99:ad:b8:8d:bb:d1:64:d9:
         92:c6:b7:d3:6c:16:18:41:e0:5e:2b:a0:ec:b7:e9:cb:3d:8c:
         df:33:1f:4c:06:8f:81:5b:76:f6:54:f6:d4:a0:10:a8:fe:3f:
         1d:52:6f:6c:aa:9b:7a:70:e3:e1:c7:82:63:d6:f6:e5:05:1a:
         ca:15:12:41:62:16:85:e7:88:f8:b1:15:bc:57:08:6c:60:79:
         26:00:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:15 2026 by rpki-client