Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39352e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          BAFgWXKd5EU1F9e04Cl9OftX31uVWmIiNALF6ayqLoU=
Subject key identifier:   44:AB:15:9C:83:B0:20:47:68:BC:82:EE:73:5C:64:D7:5C:DF:EC:52
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       59859CC74BB1DA6B5C9E3C2785DA8A461E75C0BF
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:36:59 +0000
ROA not before:           Tue 24 Feb 2026 20:31:59 +0000
ROA not after:            Tue 23 Feb 2027 20:36:59 +0000
asID:                     263627
IP address blocks:        177.12.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:85:9c:c7:4b:b1:da:6b:5c:9e:3c:27:85:da:8a:46:1e:75:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:31:59 2026 GMT
            Not After : Feb 23 20:36:59 2027 GMT
        Subject: CN=44AB159C83B0204768BC82EE735C64D75CDFEC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:a5:69:f3:f7:fc:42:ad:24:d7:71:ae:d7:
                    99:19:25:96:2e:b0:b9:f5:f1:64:59:14:9e:47:8b:
                    4b:54:a7:f4:be:2c:62:a2:87:73:66:1a:03:af:7a:
                    51:10:4d:f9:f8:98:47:73:c8:0e:99:3f:b8:6f:46:
                    69:7f:66:aa:25:83:7c:71:23:ef:a2:6a:b8:38:43:
                    86:5f:17:5d:ae:d9:6e:12:a5:f0:d6:f2:6e:80:71:
                    03:1a:a6:d4:71:5a:b6:d8:3f:8f:90:8c:64:28:1a:
                    36:b9:9e:50:a0:17:af:8f:2a:1e:4f:5f:98:61:48:
                    84:55:96:0c:a8:b7:05:02:0a:40:e5:21:08:59:3d:
                    f2:61:be:36:b9:ba:01:fd:f8:c1:fa:ed:a2:59:33:
                    73:43:24:59:e1:f5:03:be:9d:13:25:f0:2e:6a:1b:
                    4d:7a:61:11:75:f5:6e:4f:f0:37:32:66:f7:53:92:
                    da:16:e0:5e:1c:2c:2e:4c:95:f6:67:75:60:dd:b3:
                    aa:1f:20:fb:3b:1d:bc:79:0f:f5:77:36:bd:1f:35:
                    03:b1:bf:54:7f:15:5c:af:a0:9c:c2:18:6d:d6:53:
                    f7:78:6c:cc:f8:1a:b9:f7:6e:98:25:8b:13:c6:16:
                    eb:8f:2f:d2:6f:22:20:54:d2:6d:35:3f:c8:f3:1a:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:15:9C:83:B0:20:47:68:BC:82:EE:73:5C:64:D7:5C:DF:EC:52
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:82:f8:14:07:f6:4f:e0:9b:f4:78:e9:4b:ee:f5:34:1f:6e:
         64:2b:7e:43:d8:2f:cc:1b:54:86:f3:a1:89:c4:57:fc:a8:39:
         94:03:cb:ed:ca:bf:73:43:41:64:f1:c5:79:71:1b:88:e3:35:
         e1:1d:20:36:87:55:9a:84:f8:7f:18:1b:0d:ee:74:b9:fd:00:
         4e:7b:1d:c9:d2:1b:9e:16:8c:96:b1:a0:a9:d0:b5:32:0f:3b:
         83:9b:64:5b:f2:c8:f2:cb:50:4e:4d:bf:cc:0e:0c:fb:53:f7:
         dd:09:5c:ec:28:45:c0:bc:73:05:0f:4b:4c:d6:56:4a:6d:4d:
         58:c4:f8:85:43:e0:51:24:02:97:9c:b1:e6:60:f9:31:f1:58:
         ac:bc:bb:ab:88:7e:c8:46:bf:07:ee:48:2c:6e:7d:f4:81:46:
         65:6e:ba:a7:25:f2:b1:e4:fc:99:f7:12:f5:6c:48:98:01:af:
         79:30:61:4c:f4:be:75:7f:a8:3f:e3:f3:16:72:9d:69:1c:e3:
         09:46:5c:7b:5f:d7:30:ab:0c:2a:23:60:c5:3a:c1:84:a5:75:
         db:22:71:66:df:20:1e:be:0f:0e:1a:29:00:5b:d1:2b:01:71:
         1a:f8:65:d9:3f:e9:0f:d5:4c:f3:01:cc:0a:2d:e3:06:b4:e6:
         0d:39:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:01:14 2026 by rpki-client