Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          TsykKitwPOAAn6/9bWCNRh1s3ui/A7NQfmCk/PBayes=
Subject key identifier:   F7:E8:90:9B:FB:FE:B6:B8:21:E2:72:AA:C9:DF:B9:48:A5:04:52:63
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       5325A7EFEAF1F8C4A7326206B1AB71E92C01ADB7
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa
Signing time:             Mon 02 Mar 2026 19:39:12 +0000
ROA not before:           Mon 02 Mar 2026 19:34:12 +0000
ROA not after:            Mon 01 Mar 2027 19:39:12 +0000
asID:                     262901
IP address blocks:        177.22.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:25:a7:ef:ea:f1:f8:c4:a7:32:62:06:b1:ab:71:e9:2c:01:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Mar  2 19:34:12 2026 GMT
            Not After : Mar  1 19:39:12 2027 GMT
        Subject: CN=F7E8909BFBFEB6B821E272AAC9DFB948A5045263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:fa:26:40:68:14:bb:2e:50:02:df:d5:b0:
                    a2:16:af:11:a2:80:3b:46:ee:b9:bf:cc:a8:48:3d:
                    b1:0e:1e:92:93:7d:90:c1:c7:bb:5c:f1:06:e1:07:
                    5c:bd:e0:7d:23:77:60:e1:7f:d4:ca:e0:5a:52:72:
                    6b:3f:9e:bd:bb:dc:3b:12:7b:b9:51:b9:12:fe:47:
                    82:2d:98:9a:64:0a:7e:f9:a8:59:41:0b:ad:30:d4:
                    62:ad:0d:a9:2c:70:d8:dc:4e:1f:56:49:c3:72:f8:
                    ad:e3:50:ea:88:e7:e4:6d:5e:69:70:33:f4:78:dc:
                    9d:15:05:db:4f:bd:cf:c9:eb:82:92:f9:8c:ee:57:
                    d8:b1:2d:36:7a:0d:28:5e:b7:b3:0b:d7:62:5f:77:
                    44:88:cc:26:23:ba:bd:ed:0b:1b:cd:d0:f0:56:79:
                    2b:35:61:d3:9c:ba:77:73:8b:4a:48:b9:fc:fc:4e:
                    e2:5c:b8:86:da:1c:72:9c:2d:85:86:30:1e:32:93:
                    35:05:72:44:36:98:e4:eb:35:43:f2:e2:85:1b:f4:
                    77:86:fb:1f:5f:a6:77:37:39:16:ca:20:9b:d8:db:
                    58:89:d4:2d:9d:8a:f2:a5:45:e5:d3:54:8a:bd:00:
                    c0:7d:cd:0c:fa:d2:22:46:00:ed:9f:13:e8:b0:d0:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E8:90:9B:FB:FE:B6:B8:21:E2:72:AA:C9:DF:B9:48:A5:04:52:63
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:9c:a9:8a:ab:66:4b:ee:14:6b:d8:6f:52:d7:00:15:2a:2f:
         53:be:b5:27:ae:29:86:09:14:22:55:11:73:c5:02:a8:55:b2:
         18:a4:46:60:86:1f:39:7a:4e:5a:d9:d2:a0:02:62:a4:09:7e:
         cf:a6:55:41:ac:3b:5c:3a:19:44:9e:0e:5d:8f:94:5a:8a:fc:
         43:f9:f3:0f:01:46:f6:1d:93:8d:b3:77:9f:76:63:05:c6:ae:
         05:99:47:80:f8:59:34:92:f6:16:5a:49:61:a1:fb:91:17:16:
         42:14:81:9c:28:3f:f1:19:6c:96:dd:b9:b7:87:e2:2d:eb:2c:
         c6:d3:c6:55:21:b6:85:2b:b7:a4:9d:2e:e9:bc:f7:55:2b:83:
         e8:79:12:87:3a:ce:34:6b:cd:f5:ec:5b:d8:e0:77:96:d6:fb:
         d4:11:ec:5b:64:ef:bd:09:9a:22:0a:b7:cc:63:87:b4:05:90:
         af:bb:bc:20:fa:57:6d:70:bb:27:f3:eb:51:21:d5:82:3d:97:
         76:cc:e4:61:37:77:e1:cf:20:32:fa:1c:3b:50:5e:8a:67:9e:
         79:05:4c:7d:4f:2c:88:fa:b9:13:37:1d:65:af:2d:60:d8:7e:
         f9:67:1d:8d:bd:c2:66:14:8c:ea:8e:4d:88:2a:7e:8c:3d:c9:
         e3:0b:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:45:02 2026 by rpki-client