Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32342d3234203d3e20323634313230.roa
File:                     3137372e31322e3133302e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          tX13uuuN1RYzsfFhnme/BkSHLBdRxXhjBuyoj3zTLQA=
Subject key identifier:   5C:19:1F:BD:15:B8:FA:32:87:DC:D1:30:01:3F:6C:0D:14:10:27:C5
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       62AA78BC26D1AFF91DC1E4C999CFBA5034811BA9
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:43:59 +0000
ROA not before:           Mon 02 Mar 2026 15:38:59 +0000
ROA not after:            Mon 01 Mar 2027 15:43:59 +0000
asID:                     264120
IP address blocks:        177.12.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:aa:78:bc:26:d1:af:f9:1d:c1:e4:c9:99:cf:ba:50:34:81:1b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:38:59 2026 GMT
            Not After : Mar  1 15:43:59 2027 GMT
        Subject: CN=5C191FBD15B8FA3287DCD130013F6C0D141027C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:44:e9:ca:14:28:6c:66:69:a4:10:04:0c:
                    fb:7f:e8:24:a7:38:10:47:e9:78:f8:55:2c:5c:24:
                    9c:b0:0a:da:06:4e:82:8a:14:4f:6b:87:f3:3b:ca:
                    8c:7c:54:ee:3e:b7:c4:eb:3e:ed:c0:91:07:5d:f2:
                    de:51:0d:06:72:3d:9f:24:ae:68:62:09:93:00:9f:
                    17:f4:f4:c2:a3:d5:42:eb:43:68:63:01:09:5d:62:
                    c8:59:3d:9e:0e:97:d5:2f:d8:22:c5:73:c5:a8:cd:
                    a2:19:33:17:cf:ab:38:b7:c9:de:bb:ec:ee:70:3e:
                    05:9e:31:e3:f8:07:c9:62:22:91:9b:7b:dc:59:4a:
                    96:ca:40:6f:74:09:65:f0:5f:7f:a7:91:aa:59:43:
                    8a:b2:76:84:47:53:ba:28:30:f7:9c:34:ff:34:ce:
                    07:a1:62:4c:dd:1e:ee:45:51:e4:aa:12:d5:0d:78:
                    61:16:8e:f1:50:04:7f:c9:d1:b5:40:15:a0:fa:5d:
                    da:58:cf:a6:f1:59:de:0e:2e:c8:58:2f:5e:b4:fb:
                    ba:b0:39:d3:87:b0:4a:67:5a:36:2f:7f:fa:1d:30:
                    29:1c:2d:15:49:29:24:c2:39:b7:4c:ad:ab:3d:e3:
                    6a:1a:ef:0d:c9:7d:22:c5:7f:fb:f0:ce:aa:7a:76:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:19:1F:BD:15:B8:FA:32:87:DC:D1:30:01:3F:6C:0D:14:10:27:C5
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3137372e31322e3133302e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:1d:68:99:e0:81:ce:0a:d4:7b:a8:28:ec:30:b8:cf:89:
         08:11:08:80:08:4b:17:60:5a:65:13:57:d1:67:d8:dc:8f:c8:
         6a:7b:d2:5f:9f:f3:c2:b4:82:86:dd:70:e4:9d:52:6f:d5:b4:
         f6:1c:40:55:4b:6d:9c:81:ef:83:4a:5d:45:9c:61:4c:84:65:
         de:fb:81:6f:dc:17:51:bc:57:c6:a1:e4:9e:11:87:37:4e:33:
         a7:90:9b:89:5f:3f:08:9c:cb:0a:fe:f9:3e:ae:ab:a4:1c:3b:
         f2:a7:08:8a:c5:ca:61:54:3c:d9:20:62:d7:c5:c3:ea:f5:b0:
         f3:cc:cd:70:5c:be:8f:0e:ba:ac:1c:af:f1:33:0f:95:dd:ad:
         6b:d2:c7:70:a8:2d:65:38:7f:35:f6:4a:14:6d:4f:40:3c:1f:
         c8:2c:cc:bf:67:0a:13:59:ce:e1:98:21:5e:95:fe:16:c3:45:
         e5:56:da:38:50:4a:33:c6:1d:4e:f4:7f:25:b6:06:6d:4b:76:
         ee:cb:9f:9e:1d:bf:e2:7f:15:d9:4e:ae:06:b1:41:a4:b2:16:
         e1:41:73:31:6a:54:44:19:fc:fc:9c:cc:fa:ac:5b:75:4e:24:
         26:28:e5:58:70:29:54:37:72:0e:8b:77:89:94:ab:11:60:d0:
         df:2a:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:03 2026 by rpki-client