Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138382e302f32332d3233203d3e203532353735.roa
File:                     3137372e38362e3138382e302f32332d3233203d3e203532353735.roa (raw, json)
Hash identifier:          Rwq1n2OXQt6hrq7dWfu0GP5TEBY/wgHvHEVPtNa5orw=
Subject key identifier:   1B:2A:71:98:7B:EB:2F:02:B6:37:11:0F:64:32:D4:B0:5D:C3:52:59
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       28BD73C7E280B4B8C6E767F0AAB2520E1321C8
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138382e302f32332d3233203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:16 +0000
ROA not before:           Tue 14 Apr 2026 16:28:16 +0000
ROA not after:            Tue 13 Apr 2027 16:33:16 +0000
asID:                     52575
IP address blocks:        177.86.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bd:73:c7:e2:80:b4:b8:c6:e7:67:f0:aa:b2:52:0e:13:21:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:16 2026 GMT
            Not After : Apr 13 16:33:16 2027 GMT
        Subject: CN=1B2A71987BEB2F02B637110F6432D4B05DC35259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:87:0e:17:c8:04:fc:a7:6a:51:6c:1a:08:
                    55:f5:93:63:ed:70:2a:f2:2c:f8:58:ca:b8:46:3e:
                    37:a4:eb:63:ab:fa:de:c9:84:0a:92:94:f9:cf:58:
                    85:35:ce:ab:dd:87:12:74:49:2c:51:e1:54:90:90:
                    fc:41:a9:3a:dd:76:d3:fd:8f:f8:0d:9b:77:b7:88:
                    f9:c7:8f:42:44:2e:73:8a:c3:ad:67:a6:31:41:f3:
                    56:c0:86:7c:ca:9e:05:97:39:5a:2b:39:41:e8:05:
                    28:97:d2:c9:97:00:18:44:f9:21:24:5b:03:24:7b:
                    fd:2f:38:bf:28:d4:40:cd:14:aa:b5:81:97:0a:d4:
                    14:b3:ed:b2:ef:29:51:fb:ff:53:dc:a2:a2:ae:c7:
                    94:42:9b:1a:c7:0e:f5:79:2a:6e:11:b0:90:45:3c:
                    b2:a9:dd:6c:e1:cf:ba:41:da:85:8b:0e:81:b8:02:
                    33:f6:78:d1:41:9b:97:10:f2:61:ea:91:43:75:97:
                    f0:13:ea:14:b2:ce:14:de:e8:88:91:08:21:78:e2:
                    c3:ca:50:82:bc:e6:82:fa:9b:e6:6e:89:43:36:9b:
                    2e:72:72:16:1f:a4:7e:2b:32:0e:13:1d:8a:c7:6d:
                    b6:2a:69:d4:56:4f:7e:3b:34:6a:52:ad:d5:a7:e2:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:71:98:7B:EB:2F:02:B6:37:11:0F:64:32:D4:B0:5D:C3:52:59
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138382e302f32332d3233203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:17:95:32:98:a8:31:83:01:c8:ee:2c:20:d9:9e:12:e6:7b:
         66:0b:90:3c:94:e8:7f:05:90:a8:3d:64:36:0e:6e:49:18:64:
         09:41:ae:0d:72:3e:c1:16:66:b1:a9:1e:b4:6a:e8:00:f8:ca:
         a6:c5:57:67:d8:9b:5a:a8:d2:0e:a8:ea:f9:86:62:56:05:e8:
         d3:73:b0:ae:b2:09:22:91:1c:13:78:19:a7:6f:17:4c:aa:2a:
         99:af:d2:78:e1:2d:33:11:d6:ec:ad:a8:4c:f3:6f:57:17:a7:
         4b:e5:b2:4e:7b:94:c7:74:ff:e2:85:a7:61:ce:69:ef:a2:cd:
         4c:ad:f9:0c:02:5a:eb:40:d9:f2:98:bf:e3:93:2e:79:84:fa:
         71:de:1e:f1:5b:c7:51:9f:68:cf:2f:29:83:98:05:1c:35:88:
         0d:c2:5c:ba:a4:4b:9a:15:02:58:bf:93:a9:42:1e:20:03:f2:
         69:b5:a9:14:08:74:14:d9:94:7e:be:ca:bf:f9:08:1f:98:ba:
         f7:5f:a4:4e:4c:99:a2:ce:ae:b1:79:44:93:39:f4:ce:78:94:
         e9:cd:05:e5:cf:58:9b:4e:7a:18:8a:b3:41:19:75:42:b0:30:
         ca:95:44:90:95:35:15:cf:6d:d1:a8:b7:1e:55:55:21:b5:3d:
         00:eb:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:01 2026 by rpki-client