Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135322e302f32342d3234203d3e20323731343934.roa
File:                     3138372e36332e3135322e302f32342d3234203d3e20323731343934.roa (raw, json)
Hash identifier:          7MG8HGIr9I4jGlIik3AzI/kbORNwYFF9kPrpCqZTOQQ=
Subject key identifier:   A3:14:7C:CF:09:52:A7:66:7B:A6:2E:35:A0:5D:D4:58:4C:F9:DD:DA
Certificate issuer:       /CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
Certificate serial:       7953852EDE055F4355FB706886A33902FCA69C8B
Authority key identifier: AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135322e302f32342d3234203d3e20323731343934.roa
Signing time:             Fri 24 Jul 2026 14:06:46 +0000
ROA not before:           Fri 24 Jul 2026 14:01:46 +0000
ROA not after:            Fri 23 Jul 2027 14:06:46 +0000
asID:                     271494
IP address blocks:        187.63.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl
                          rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 08:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:53:85:2e:de:05:5f:43:55:fb:70:68:86:a3:39:02:fc:a6:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
        Validity
            Not Before: Jul 24 14:01:46 2026 GMT
            Not After : Jul 23 14:06:46 2027 GMT
        Subject: CN=A3147CCF0952A7667BA62E35A05DD4584CF9DDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:9c:8f:0c:11:e6:3e:cf:9e:cd:75:7f:8f:
                    13:63:f5:90:90:88:a5:4c:5d:bd:b4:80:fc:6b:9e:
                    84:05:a1:9f:f6:76:c8:66:4a:ee:74:56:a0:b4:81:
                    d1:5e:a1:20:b5:ed:9c:26:c6:c8:d7:00:67:86:11:
                    1f:2f:6f:6f:fa:f2:a0:b9:8c:b1:b5:1b:8c:72:b2:
                    f0:5b:24:ec:a2:91:cf:42:c3:bf:7c:09:81:d7:a7:
                    5d:09:2c:1d:75:0b:dc:a1:6c:80:f3:f0:76:f5:b2:
                    19:7f:5a:37:9d:20:fb:29:55:77:aa:5e:8a:35:59:
                    62:3d:2e:da:ab:83:5b:86:6a:ff:25:df:cc:ba:07:
                    82:9b:39:f0:e4:11:86:86:e4:9c:5e:f3:5d:71:24:
                    17:e0:c6:cc:be:47:0b:e0:63:73:a8:27:56:32:01:
                    6f:3d:83:d4:7c:f1:97:12:d2:dd:d8:8a:b2:4c:b7:
                    3d:74:aa:cb:ec:8d:62:76:80:77:1c:59:9f:0a:81:
                    ab:a6:7b:87:2b:14:51:f1:2f:93:d7:f8:a2:d1:5b:
                    dd:13:aa:4f:09:68:df:5a:a3:ce:d5:56:57:76:64:
                    fc:71:40:97:5a:e5:ec:0a:cb:5f:9e:9f:ac:43:96:
                    d8:64:e8:91:2f:6e:0b:28:2e:40:62:87:57:b2:3c:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:14:7C:CF:09:52:A7:66:7B:A6:2E:35:A0:5D:D4:58:4C:F9:DD:DA
            X509v3 Authority Key Identifier:
                keyid:AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135322e302f32342d3234203d3e20323731343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:37:50:f5:3c:5d:56:33:7f:79:14:16:7c:3b:b4:38:57:
         e7:3d:7f:f2:02:68:b4:70:f7:6f:e9:55:ff:14:c3:06:46:9b:
         20:2b:8b:e4:a1:68:56:c7:c1:93:a0:29:5d:12:b0:83:74:46:
         d0:ac:c4:39:da:95:f6:e1:ac:8c:bd:b1:05:1d:b7:70:8c:c5:
         27:fa:a5:a2:69:71:ed:29:f6:67:6d:55:4f:a2:61:80:5b:0f:
         36:0f:d9:33:8d:95:b0:82:71:eb:eb:76:a1:48:5c:04:29:af:
         2f:3a:91:3b:91:dc:4b:93:3f:ba:88:a8:e0:0d:c4:21:5f:69:
         63:ab:92:c7:e8:75:ee:e1:2e:46:66:03:71:5d:2d:7b:03:61:
         bd:2f:88:ea:3c:c4:4d:68:39:1a:85:95:31:d4:b5:56:74:d0:
         ba:8c:29:46:63:50:a7:3f:41:7a:8e:55:78:9f:90:7e:c6:21:
         ef:7b:e2:0f:e0:2d:27:a0:8e:cf:39:36:a6:f1:b7:94:ba:b6:
         4b:3c:06:31:cc:fc:c1:e9:52:5e:6e:a6:fc:9e:a2:96:41:da:
         fd:67:24:1d:64:6b:3f:a5:a8:24:b5:cd:eb:c5:aa:5d:2c:fd:
         1d:d8:9f:df:7a:dc:41:d6:a0:89:97:fe:51:14:56:d4:1e:4d:
         bc:33:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:33 2026 by rpki-client