Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3234203d3e203532393935.roa
File:                     3137372e39332e3234382e302f32312d3234203d3e203532393935.roa (raw, json)
Hash identifier:          3Dbo8IdlSAZbBz1FLbD4SsID8MVKJvZahr4+UEIUpHI=
Subject key identifier:   7E:09:15:9B:C1:01:E2:71:EF:C4:0C:42:B1:98:0B:F9:07:D8:3F:06
Certificate issuer:       /CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Certificate serial:       3BC006207B288A81F385FD2E8C976DDE0A2CC4B7
Authority key identifier: 1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3234203d3e203532393935.roa
Signing time:             Tue 07 Apr 2026 14:05:29 +0000
ROA not before:           Tue 07 Apr 2026 14:00:28 +0000
ROA not after:            Tue 06 Apr 2027 14:05:28 +0000
asID:                     52995
IP address blocks:        177.93.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
                          rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 22:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:06:20:7b:28:8a:81:f3:85:fd:2e:8c:97:6d:de:0a:2c:c4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
        Validity
            Not Before: Apr  7 14:00:28 2026 GMT
            Not After : Apr  6 14:05:28 2027 GMT
        Subject: CN=7E09159BC101E271EFC40C42B1980BF907D83F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:b2:3f:17:5f:72:53:60:98:93:5d:ba:8f:
                    76:4b:37:ba:31:10:87:dd:d1:84:32:18:4b:e2:e5:
                    56:46:f2:f6:0e:34:dd:12:02:67:05:c1:57:3f:83:
                    4d:37:be:e8:f9:85:c4:e3:1b:86:7e:5c:f5:b8:e5:
                    5b:1b:0d:4a:2e:64:0e:20:8f:40:6c:1c:d6:bc:45:
                    a8:85:63:f4:d8:00:98:3f:1e:5e:69:99:2d:e6:67:
                    61:a3:ac:bf:f9:a9:82:91:2c:e2:5d:7e:ef:43:8c:
                    bf:04:1d:8b:6e:71:79:bd:ac:19:35:ce:3c:b5:bc:
                    91:3c:a4:24:5b:80:25:8d:c2:6f:90:cc:db:a1:47:
                    3d:a6:aa:e2:6d:5f:8b:e6:14:eb:34:4f:07:01:a7:
                    0e:a2:cd:a9:a3:b2:d0:73:7c:46:db:29:c4:6e:72:
                    d0:fe:e1:5b:1e:47:a4:54:db:41:92:a7:c6:a8:fd:
                    33:7e:12:db:e9:33:f1:0e:86:9a:ad:2c:a4:a3:1d:
                    84:ab:4d:77:7a:89:a1:61:7f:87:48:f0:4e:ca:43:
                    9f:eb:9e:65:63:8a:8f:be:86:e7:c0:1e:13:6e:5a:
                    e0:34:1d:ea:11:a1:d2:50:5a:99:04:7e:27:5b:ab:
                    2d:28:85:b0:1e:2f:29:d9:e6:5b:77:07:77:f3:16:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:15:9B:C1:01:E2:71:EF:C4:0C:42:B1:98:0B:F9:07:D8:3F:06
            X509v3 Authority Key Identifier:
                keyid:1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3234203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:31:55:7e:20:5a:a9:df:ce:c2:6f:b2:7a:d2:d6:67:5f:f4:
         60:fb:de:c5:41:cd:8f:42:72:7a:3b:2d:08:79:95:bb:0f:1b:
         9a:4e:4d:8d:0c:86:76:39:d9:88:ac:16:7e:22:0f:55:fe:1b:
         1b:27:74:d5:55:b2:70:6c:fe:82:91:4b:a9:ac:7d:ab:d5:78:
         78:f3:89:f5:e0:6a:04:38:6a:86:30:15:8a:f5:eb:93:98:5e:
         fe:33:34:dd:7f:31:cc:26:bc:86:b4:90:fc:80:c9:c1:23:39:
         41:85:5d:4b:5a:22:47:bc:3d:f0:8c:8e:66:38:9b:d4:34:d9:
         95:31:60:65:79:48:e6:76:99:3c:10:6c:4b:6d:38:cc:3c:af:
         88:e0:3b:0f:9c:f8:1f:85:91:86:18:a2:d1:fb:e9:7e:9d:65:
         7e:31:9b:31:14:47:d9:22:ec:89:08:53:41:1a:65:eb:12:8e:
         5d:dc:78:44:6c:b1:cf:46:ae:4a:fb:82:2c:b4:44:8e:1e:19:
         2d:80:95:c0:6c:36:d6:db:52:e3:80:7e:60:59:21:e7:a6:6b:
         4d:5c:39:25:f0:ac:cb:05:89:63:f4:d2:06:ab:c8:e5:16:9a:
         ba:f1:4d:b7:f3:ce:33:70:b0:07:f1:6f:a6:cf:35:2a:ab:ea:
         43:f2:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 23:23:45 2026 by rpki-client