Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32312d3231203d3e20323632363432.roa
File:                     3137372e38372e302e302f32312d3231203d3e20323632363432.roa (raw, json)
Hash identifier:          Ff+CZlTbNCnAwiuTnXhxyR+5rSm7prVw3ieFJxwdOeE=
Subject key identifier:   4B:87:23:03:7D:52:07:48:73:BA:CF:A9:4E:E0:1F:5B:CB:19:79:2D
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       6141547DFC6694F59276BE10039530295AD5EDB5
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32312d3231203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:01 +0000
ROA not before:           Fri 28 Aug 2026 17:01:01 +0000
ROA not after:            Fri 27 Aug 2027 17:06:01 +0000
asID:                     262642
IP address blocks:        177.87.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 16:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:41:54:7d:fc:66:94:f5:92:76:be:10:03:95:30:29:5a:d5:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:01 2026 GMT
            Not After : Aug 27 17:06:01 2027 GMT
        Subject: CN=4B8723037D52074873BACFA94EE01F5BCB19792D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:75:3c:c5:e8:1d:29:f9:21:58:48:eb:12:
                    97:e1:75:36:cd:10:e4:d9:c0:f9:0f:eb:e5:bc:d7:
                    4d:bc:41:0d:6e:8b:3e:ba:c2:45:95:46:60:79:5d:
                    7e:dc:3d:a3:73:3b:f0:f9:ce:a6:e0:68:ab:c6:6e:
                    c9:1e:37:9f:be:1a:23:65:1c:e0:11:1c:03:6d:67:
                    25:de:24:40:01:1e:ae:67:5c:c7:5c:41:e2:f8:81:
                    a3:12:fb:bd:fc:8d:a8:22:fd:c1:95:88:fb:66:30:
                    30:df:16:2e:c7:fa:5b:72:77:b2:4e:c2:21:80:c9:
                    19:95:04:3e:57:09:52:fc:9d:70:6f:a1:0e:8d:be:
                    fb:8b:b3:46:5d:d4:93:fa:96:95:02:61:bb:3f:29:
                    b1:b9:c3:35:9c:f2:00:96:16:3d:00:b8:2e:84:1e:
                    ee:a4:82:c3:cf:f0:c3:93:ea:6d:b4:0e:a2:e1:6f:
                    56:aa:84:6a:c7:e1:27:97:22:f3:9c:3e:ca:f6:9b:
                    65:9f:82:7c:35:f9:19:6d:cb:24:a7:58:27:d4:b1:
                    97:27:40:92:1e:c0:ff:68:45:2e:1f:cc:53:cd:3a:
                    db:a1:0c:17:cd:ec:66:e1:b0:83:51:5c:3f:8e:23:
                    d8:de:0c:3f:9f:7f:a2:87:df:80:6e:89:c2:2d:d2:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:87:23:03:7D:52:07:48:73:BA:CF:A9:4E:E0:1F:5B:CB:19:79:2D
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32312d3231203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:40:23:62:9b:72:03:27:d2:45:ca:31:e8:66:b7:e8:a1:
         df:25:25:04:cf:2a:b3:f7:50:d7:8a:4c:6c:5d:64:eb:0f:31:
         e0:62:e2:6a:4b:c9:4c:3c:3b:9a:2d:88:34:1b:ca:79:9b:d2:
         02:ad:b5:23:1b:91:3e:c6:b7:c7:38:b9:8f:1f:cd:d8:e1:54:
         02:da:38:1f:00:9c:a3:22:3a:67:d7:62:51:30:f1:74:be:76:
         88:e5:20:db:f2:81:2b:b5:07:c9:d6:06:71:bd:35:23:da:96:
         4b:65:41:38:14:1f:71:ea:92:ef:47:e5:a4:29:42:b9:47:db:
         0f:ca:41:82:66:3f:53:47:18:7d:48:9a:62:b5:ee:f9:f0:76:
         32:cb:6d:95:85:38:c0:46:26:07:ae:5b:1a:44:4c:45:03:31:
         de:3a:4f:51:6c:c0:e8:b2:07:16:b9:c1:51:08:5a:cd:41:c3:
         4e:c6:e5:dd:8f:4a:6f:41:96:44:7f:77:1c:82:4e:3c:1c:40:
         cf:47:e4:21:6b:29:da:b9:bb:ab:88:e5:81:f2:c0:47:5a:97:
         36:a5:8a:7e:1e:22:ca:c7:a1:db:33:fa:64:38:0c:dc:b0:dc:
         dd:37:9d:8b:23:a8:3c:e6:a6:31:12:a4:99:26:92:e8:eb:30:
         c5:f8:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:54:13 2026 by rpki-client