Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e31332e302f32342d3234203d3e20323730363331.roa
File:                     3137372e3133362e31332e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          lfBkLA3R84XeVpjRRFIWDBNtNxaPfjmwaehqI7LRyl4=
Subject key identifier:   93:FF:D7:49:62:4B:59:D0:C1:3A:EB:28:5F:5D:E4:7B:2D:C6:71:82
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       48AF536F522B9EB38D82DBE8D913898A724AD4D5
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e31332e302f32342d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:40 +0000
ROA not before:           Thu 27 Aug 2026 02:16:40 +0000
ROA not after:            Thu 26 Aug 2027 02:21:40 +0000
asID:                     270631
IP address blocks:        177.136.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:af:53:6f:52:2b:9e:b3:8d:82:db:e8:d9:13:89:8a:72:4a:d4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:40 2026 GMT
            Not After : Aug 26 02:21:40 2027 GMT
        Subject: CN=93FFD749624B59D0C13AEB285F5DE47B2DC67182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:9c:59:86:b0:db:17:91:40:09:e9:12:6f:
                    e9:0e:53:41:7a:07:83:e9:5e:c2:72:b3:e7:60:3e:
                    5c:99:d4:8e:dd:e6:5e:41:66:77:15:6c:59:9c:14:
                    28:68:6b:7d:3b:b4:f0:8a:40:bb:89:57:61:5d:26:
                    56:aa:4d:40:1b:25:a4:77:19:12:0c:23:27:08:9d:
                    1d:cb:14:aa:17:99:cb:5d:91:84:88:80:d6:17:c4:
                    53:f1:dd:76:fc:62:35:04:97:7a:97:06:53:ba:f9:
                    95:2d:32:58:82:81:c2:0d:f5:c7:76:4b:e0:4a:f5:
                    1c:b5:2e:eb:3e:4a:ad:c8:6d:86:9b:d8:9c:00:1f:
                    9e:02:7f:a5:58:6c:dc:64:7d:7c:e5:d6:1c:a6:df:
                    3d:52:37:fb:33:21:64:39:39:d3:5f:1f:d8:38:70:
                    62:ea:16:30:7f:66:55:5d:55:03:87:cc:e2:31:25:
                    bc:7c:38:0f:22:6c:6b:d1:c1:5d:55:b9:64:90:fd:
                    f7:e9:63:4d:b7:44:c0:ea:23:63:4b:e2:90:ec:3e:
                    b1:4a:8f:da:23:8b:06:58:fa:69:94:0e:97:c2:ce:
                    1e:9e:7b:75:9b:90:df:c7:f2:eb:01:04:e1:cc:9b:
                    af:b1:e4:3b:1e:67:c1:8d:e7:0a:d1:62:09:af:6d:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:D7:49:62:4B:59:D0:C1:3A:EB:28:5F:5D:E4:7B:2D:C6:71:82
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3137372e3133362e31332e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:69:5b:fe:ba:f8:d7:47:1f:33:0d:2d:8f:eb:60:bb:85:
         68:04:3f:91:15:40:44:c8:7b:11:28:be:ce:d5:18:f8:55:6c:
         22:93:b4:ef:b3:5f:28:59:ee:b5:b0:27:47:7f:d2:69:21:55:
         78:6a:05:23:44:d1:74:61:e9:ce:1f:19:b8:e6:10:6c:4a:c2:
         be:ef:41:96:11:67:0d:a1:2e:93:25:3e:5e:d1:4e:39:81:50:
         de:66:68:17:93:e9:6a:66:38:7c:46:54:2c:d5:8d:8e:dd:44:
         a2:02:ed:4b:65:5a:b8:da:49:9b:e1:fa:56:15:d6:61:21:21:
         f9:d7:b1:31:84:b4:5e:95:23:db:d3:2e:c9:3d:24:ef:eb:15:
         6e:ad:82:b4:aa:d1:01:9f:45:5a:6d:26:da:49:31:42:56:aa:
         4d:f6:ab:5d:64:3c:04:b8:e2:a9:db:03:ea:9e:a2:4b:58:54:
         43:4d:84:75:a5:fe:cf:6f:7c:de:d2:65:d9:25:71:1b:6b:49:
         dc:67:7e:7d:0d:09:bf:72:14:f1:d1:8b:7e:b6:6f:a7:28:2a:
         bb:e0:48:b2:30:e1:c9:4a:ea:58:b4:4b:7e:e4:ec:d5:00:b4:
         fc:e5:02:05:52:29:b5:bf:bf:02:02:69:da:47:44:06:d3:43:
         84:62:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:57:05 2026 by rpki-client