Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135332e302f32342d3234203d3e20323731343934.roa
File:                     3138372e36332e3135332e302f32342d3234203d3e20323731343934.roa (raw, json)
Hash identifier:          V8SRsYL6sEWqS9ozkmGhEbwsNvLkvt6Rpfm2LcGusVY=
Subject key identifier:   B6:75:49:F2:DA:9F:33:8E:24:E6:3D:4A:91:AB:27:2D:88:CD:6A:FE
Certificate issuer:       /CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
Certificate serial:       120D83448AC4FCD440279F0E07742E0EA27E2BAE
Authority key identifier: AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135332e302f32342d3234203d3e20323731343934.roa
Signing time:             Fri 24 Jul 2026 14:06:45 +0000
ROA not before:           Fri 24 Jul 2026 14:01:45 +0000
ROA not after:            Fri 23 Jul 2027 14:06:45 +0000
asID:                     271494
IP address blocks:        187.63.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl
                          rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 08:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0d:83:44:8a:c4:fc:d4:40:27:9f:0e:07:74:2e:0e:a2:7e:2b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
        Validity
            Not Before: Jul 24 14:01:45 2026 GMT
            Not After : Jul 23 14:06:45 2027 GMT
        Subject: CN=B67549F2DA9F338E24E63D4A91AB272D88CD6AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:0a:1a:0e:85:00:29:51:d6:17:5b:60:a8:
                    63:09:f7:22:cf:eb:1f:2b:c9:0b:67:37:a3:73:f9:
                    e1:1b:a2:73:cf:5a:f0:f7:ed:b0:3d:35:c2:3c:bf:
                    81:08:20:c3:a7:55:06:fe:fb:3e:7f:62:8b:e4:00:
                    85:b6:df:f4:c8:79:06:28:0c:72:27:3e:3e:0d:7b:
                    45:85:29:97:c5:45:2d:28:46:fd:37:d9:22:12:49:
                    d9:2f:3e:ed:e8:24:08:c1:4a:2a:f9:0e:81:79:ac:
                    31:33:1c:b1:96:01:e2:60:83:7b:9d:c4:b0:db:49:
                    e5:66:a1:07:c3:e3:0e:13:04:86:31:34:54:35:a0:
                    fb:9e:7c:d7:16:db:9d:c6:53:4a:bb:42:b6:c2:d1:
                    d3:ce:ae:cd:a3:57:18:d3:c4:00:a5:44:24:f6:32:
                    09:5d:9a:a2:f3:c8:78:ac:be:af:f8:c5:ca:f3:c8:
                    ce:56:df:16:1e:dc:25:2e:b5:25:0d:31:c8:a4:83:
                    cf:d9:8a:53:7b:93:c6:43:a6:a3:df:10:c5:b5:35:
                    03:7c:22:59:d9:f7:08:f2:c9:05:8a:4c:c0:7e:c8:
                    26:0f:34:17:0b:72:a6:c3:bf:c6:95:bb:0e:80:a7:
                    4f:26:69:02:9a:d0:0d:ab:2a:86:c9:4c:38:45:2f:
                    68:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:49:F2:DA:9F:33:8E:24:E6:3D:4A:91:AB:27:2D:88:CD:6A:FE
            X509v3 Authority Key Identifier:
                keyid:AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/3138372e36332e3135332e302f32342d3234203d3e20323731343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:bb:b3:18:d7:31:12:73:67:4b:36:37:2e:50:3f:51:e1:
         1a:b8:8c:60:0b:6b:e6:a5:47:bd:fa:84:b4:6c:94:c4:1b:f9:
         77:93:5a:d5:9e:6c:a7:a8:cb:c4:2d:98:71:ed:54:e6:2a:f1:
         28:66:34:49:c6:cb:87:02:ac:57:a3:82:93:65:a0:8c:27:8c:
         a0:dc:f0:97:09:37:19:0d:53:5a:5e:f3:bd:d8:59:19:8f:94:
         7c:45:a5:be:3d:3e:0f:16:a4:99:0a:46:88:38:bd:54:10:73:
         dc:9d:15:ba:bc:fb:35:7d:1c:c4:d1:31:23:f8:9e:47:e2:4c:
         b9:de:bc:25:1c:21:5c:9e:c2:94:16:b5:51:b2:e8:92:d6:39:
         65:fe:fb:a5:16:a2:d1:73:23:41:5d:83:d9:37:0d:69:ab:c5:
         1b:23:8e:4c:57:b5:cd:35:df:79:65:f8:ea:0e:bd:a8:3d:a9:
         01:ad:e5:11:1d:82:d2:d2:64:a6:18:85:cf:0c:a9:b0:de:52:
         a4:ef:d4:3f:92:3c:f5:87:3c:e6:d9:a7:f7:4e:76:6a:20:79:
         01:2e:ac:01:7b:bc:fa:98:9d:07:cc:31:9e:ff:38:cf:c6:f3:
         40:36:08:59:92:6f:0b:42:22:b7:03:e6:9a:f1:73:86:26:d1:
         86:8e:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:57 2026 by rpki-client