Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39322e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          P8Px9rvPzYOFuHSM7LQvly0mfco7uPPfoahPXji8XEk=
Subject key identifier:   28:29:AA:30:F7:4B:17:1C:E2:E6:37:78:60:A0:96:F5:E7:B8:C0:8F
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       56285CFE01843B88CB359B9F19C0CB26A4531640
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:01 +0000
ROA not before:           Tue 24 Feb 2026 20:32:01 +0000
ROA not after:            Tue 23 Feb 2027 20:37:01 +0000
asID:                     263627
IP address blocks:        177.12.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:5c:fe:01:84:3b:88:cb:35:9b:9f:19:c0:cb:26:a4:53:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:01 2026 GMT
            Not After : Feb 23 20:37:01 2027 GMT
        Subject: CN=2829AA30F74B171CE2E6377860A096F5E7B8C08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:82:7c:31:c4:f6:a5:34:c2:a8:6b:0b:34:
                    7c:42:f5:81:30:05:88:b1:e4:c7:0a:0e:61:f0:d2:
                    13:f2:92:e5:9c:4e:ef:96:c4:c2:6e:4c:4d:fd:e6:
                    12:5f:44:3a:92:80:78:20:36:fe:b3:af:4e:5f:69:
                    24:b4:cc:29:51:fe:9c:0b:90:59:cf:d9:71:32:cc:
                    2a:2d:56:e0:60:17:69:44:0e:db:f3:0d:f6:8b:8f:
                    ee:68:4e:ed:4e:e3:20:a9:e0:57:34:1d:2f:e9:ff:
                    fa:c8:4e:73:8b:0d:a9:0c:0d:10:3f:98:56:23:43:
                    6c:a6:6e:8c:37:27:8f:6b:5a:62:d3:7a:b9:7e:f7:
                    3c:ef:a1:ef:7e:be:d7:60:27:28:6b:46:d1:a3:ca:
                    86:d3:3e:5a:79:49:72:1c:d2:33:76:14:03:b8:69:
                    3c:8e:14:9e:73:05:dc:05:df:d0:19:51:96:a8:e0:
                    83:fd:e6:bf:2b:35:4e:e3:4c:9a:b8:37:0f:6a:21:
                    4e:2a:a1:ad:bd:97:e6:41:d4:90:c4:4e:8f:af:1e:
                    ee:39:7e:8c:0e:ed:1d:b5:9f:2a:61:67:9a:c8:48:
                    f0:56:47:ae:69:66:94:04:5d:96:c4:b1:ba:1e:f0:
                    57:a3:78:de:e9:2d:fb:7c:71:6b:fd:f7:29:28:e7:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:AA:30:F7:4B:17:1C:E2:E6:37:78:60:A0:96:F5:E7:B8:C0:8F
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:d6:57:b3:76:20:b3:a5:12:b2:77:7c:fe:e8:8a:7e:4d:49:
         6a:d1:61:db:0b:d3:6d:23:9a:1f:20:ce:fc:52:16:27:93:d1:
         73:b8:ab:17:3f:d1:c8:07:c0:ff:e9:06:94:3b:b9:b3:48:2b:
         55:d6:df:2c:68:10:f1:d8:e5:e9:09:33:d8:f1:6c:d9:2c:87:
         5f:75:83:d3:47:5e:4f:66:ec:dc:63:00:55:ca:a9:f1:cc:1f:
         21:bb:72:83:52:7a:82:1f:c8:f9:33:72:d4:5c:ab:86:c0:7d:
         71:b7:41:81:76:bb:00:a9:a6:29:3e:1c:ea:23:08:5b:7b:19:
         6e:24:0c:a0:36:09:e3:82:0e:f3:dc:cb:56:c3:a2:5d:ed:70:
         44:a4:41:66:06:61:c7:03:8f:3b:9d:f2:02:4e:ae:08:15:a5:
         80:33:9c:fe:30:3a:23:ea:3d:c2:7d:cd:bb:48:15:77:97:4e:
         20:a2:d2:44:5c:a2:28:24:4a:af:64:ff:45:2d:58:ca:d3:a8:
         9c:8f:e0:2e:3f:8e:45:51:91:e5:c5:24:1e:d0:b8:c0:6b:40:
         52:8c:d6:0c:71:43:72:12:46:e3:aa:2f:cd:05:a1:60:2b:81:
         8f:0e:15:2f:7f:87:95:a9:7d:a0:b9:b0:26:95:2c:98:cb:0a:
         c1:1c:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:00:47 2026 by rpki-client