Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa
File:                     3137372e38362e3138362e302f32342d3234203d3e203532353735.roa (raw, json)
Hash identifier:          3LqKz5qn31CzrR06Fqr1LpQFp8iufyueAtU1AVjkAqM=
Subject key identifier:   D9:03:80:8F:B5:D4:4A:2B:D5:40:A4:A9:85:3F:4F:38:9E:CD:1E:5B
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       5677F5842C88B585AB89A91C0E852B6EDCEF426B
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:16 +0000
ROA not before:           Tue 14 Apr 2026 16:28:16 +0000
ROA not after:            Tue 13 Apr 2027 16:33:16 +0000
asID:                     52575
IP address blocks:        177.86.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:77:f5:84:2c:88:b5:85:ab:89:a9:1c:0e:85:2b:6e:dc:ef:42:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:16 2026 GMT
            Not After : Apr 13 16:33:16 2027 GMT
        Subject: CN=D903808FB5D44A2BD540A4A9853F4F389ECD1E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:4d:98:c0:6d:56:d7:87:05:76:b9:42:d8:e3:
                    8e:4f:5b:40:84:c0:fe:16:aa:1c:88:36:1a:e5:9c:
                    84:ee:4d:6a:d5:dc:30:83:3e:da:c1:23:22:ab:4c:
                    42:2e:77:24:20:ae:07:06:06:25:4b:c0:21:81:f8:
                    88:50:8d:76:ff:94:04:d3:4b:38:e8:6e:3c:ae:e9:
                    3e:25:06:90:01:2a:37:db:1e:8c:4c:a9:2c:bd:93:
                    5b:cc:4a:c8:d7:fc:25:bf:33:1f:d1:46:fd:dd:b7:
                    8f:a6:00:1f:20:2b:c0:92:9f:b5:6d:0d:62:e8:d2:
                    5b:66:16:c9:64:42:35:11:06:07:88:be:bb:15:15:
                    cf:17:53:de:bd:21:34:41:ed:12:5c:c6:93:4e:ad:
                    96:4c:8a:57:cf:79:7c:8e:9e:89:b4:c7:58:8f:1b:
                    85:6d:21:f4:a0:76:21:54:69:5f:e2:13:5e:9f:28:
                    b0:12:a9:a7:5d:21:5b:e7:f0:ad:b6:e4:13:35:9a:
                    48:38:fd:ee:84:07:cc:13:d9:04:62:fb:78:66:8f:
                    b6:df:3f:3c:1b:6b:3f:0b:0a:4c:50:3a:57:77:fa:
                    08:95:95:0f:94:8f:ef:4d:29:69:38:c5:b1:e8:9d:
                    6f:bc:d1:97:55:df:28:bc:b5:43:76:b9:d8:20:7f:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:80:8F:B5:D4:4A:2B:D5:40:A4:A9:85:3F:4F:38:9E:CD:1E:5B
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:db:92:5d:2e:f4:64:6f:a0:0d:3c:26:98:54:3c:fd:d1:e7:
         1c:47:63:f4:51:69:68:38:35:93:b5:fe:79:cf:b0:80:1e:a7:
         c5:9c:bb:60:ba:1e:8e:7a:af:ba:37:62:be:47:3b:04:a8:58:
         6f:46:fa:79:65:c7:36:c7:92:fa:23:df:d9:34:e2:c2:7b:9a:
         7e:5a:38:3b:f7:21:b1:09:b5:00:46:a3:0d:cd:29:d8:2a:c4:
         be:b2:47:eb:7c:17:60:40:6c:aa:b6:48:7c:91:5d:02:23:f1:
         50:82:dd:5d:56:24:32:ff:31:27:30:71:c7:55:90:eb:24:e7:
         db:57:39:df:6f:f7:0e:af:8f:83:ab:6c:88:76:63:23:fe:85:
         ba:86:6e:80:b0:9c:f1:47:28:23:ae:fa:f5:e9:d7:42:fa:f4:
         ce:d4:01:da:7b:03:b5:22:04:3c:ec:51:21:a4:39:95:f8:b5:
         13:d1:68:76:2f:cd:52:da:17:87:47:ee:28:62:07:e4:b0:bb:
         bf:14:ec:10:65:7f:47:20:f7:6a:d4:e1:b6:3d:0e:89:51:bd:
         c4:3e:76:ec:e1:cb:e8:35:17:da:7b:1f:6b:49:23:37:34:30:
         c2:a2:d4:51:7c:3a:f3:8a:9c:98:e8:6b:b9:fa:f6:4b:9a:e7:
         fb:eb:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:58 2026 by rpki-client