Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e20323734373737.roa
File:                     3137372e31322e3133392e302f32342d3234203d3e20323734373737.roa (raw, json)
Hash identifier:          8IyRdy4Qi5hC++YsXLuUMuNkS40qjdWv2VRY+AKUiiI=
Subject key identifier:   96:E1:94:E7:4A:6C:F3:D1:48:4A:91:A3:F1:65:7D:A8:48:F2:F5:67
Certificate issuer:       /CN=9837137423ED461C8F9E6EB8C108F7C4CF88B4D8
Certificate serial:       2AB42CEF45A982AF4FD72393181979C99BA985C0
Authority key identifier: 98:37:13:74:23:ED:46:1C:8F:9E:6E:B8:C1:08:F7:C4:CF:88:B4:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e20323734373737.roa
Signing time:             Mon 12 Oct 2026 22:41:24 +0000
ROA not before:           Mon 12 Oct 2026 22:36:24 +0000
ROA not after:            Mon 11 Oct 2027 22:41:24 +0000
asID:                     274777
IP address blocks:        177.12.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.crl
                          rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:2c:ef:45:a9:82:af:4f:d7:23:93:18:19:79:c9:9b:a9:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9837137423ED461C8F9E6EB8C108F7C4CF88B4D8
        Validity
            Not Before: Oct 12 22:36:24 2026 GMT
            Not After : Oct 11 22:41:24 2027 GMT
        Subject: CN=96E194E74A6CF3D1484A91A3F1657DA848F2F567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:6f:22:79:bb:bc:27:36:ed:3c:37:ac:83:
                    a4:76:cf:89:9f:3d:09:7e:ba:c6:0b:c8:1a:d4:4c:
                    b2:8b:85:bd:46:76:3a:81:b1:a1:74:48:cd:17:93:
                    de:98:77:4f:72:e4:ff:b2:1b:cd:7b:72:46:c4:da:
                    43:f9:ae:94:ad:0b:44:95:31:07:c9:e0:e7:b0:6e:
                    06:c3:dd:57:39:0b:54:45:fc:e5:e4:16:bd:ab:a6:
                    c2:85:14:5f:25:b5:3a:49:fc:b6:19:85:d9:c0:2e:
                    8e:b9:f4:a0:d7:a0:ff:71:09:87:0c:83:b0:47:7d:
                    c5:c8:04:d7:f7:78:55:06:89:3c:8e:f5:ec:a1:a1:
                    3b:52:31:4b:0f:67:5a:4b:b8:31:b0:12:eb:f8:b7:
                    c5:83:3d:5e:2d:6e:4b:e4:18:d6:da:3e:ae:76:c8:
                    df:da:cb:b0:3c:9b:b6:36:c8:f7:0f:07:69:1e:d1:
                    4c:72:73:37:f1:85:f4:82:3d:ee:d1:7c:3d:58:42:
                    91:84:a8:5b:04:23:ce:ea:94:5a:ec:75:56:4f:71:
                    ff:4f:8e:9a:dd:c5:13:22:37:43:24:7e:27:6d:12:
                    2e:1d:1c:ab:5a:73:62:e1:53:86:e1:ae:d1:5f:c6:
                    ca:0a:9b:a7:21:07:c7:78:9f:ad:ad:b3:f0:a0:c1:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:94:E7:4A:6C:F3:D1:48:4A:91:A3:F1:65:7D:A8:48:F2:F5:67
            X509v3 Authority Key Identifier:
                keyid:98:37:13:74:23:ED:46:1C:8F:9E:6E:B8:C1:08:F7:C4:CF:88:B4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e20323734373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:29:a4:a3:de:08:e4:2a:75:5a:4d:0f:15:ad:b0:3c:6a:cb:
         97:a6:4e:47:86:1c:4d:dc:71:48:f8:60:f3:74:07:e1:63:27:
         0b:5a:74:5b:77:78:bd:b8:6c:f3:66:a0:1b:7d:a8:cf:a7:22:
         a8:2d:f0:84:4b:7d:4b:b9:fa:1f:f0:75:ce:29:35:a0:e7:0f:
         f9:cf:cc:78:f6:87:b1:e2:56:be:4d:62:06:4e:4c:32:d3:41:
         6a:3c:36:cf:98:1a:e2:a9:e2:a8:82:c1:08:61:fa:83:c6:f1:
         eb:b0:b3:b6:44:6f:b7:85:94:1e:fa:89:44:6e:e8:73:de:37:
         d2:21:91:ec:cb:3c:b9:ce:b5:cb:42:2b:2d:10:54:c3:82:a9:
         28:63:c7:f1:eb:c3:bf:33:d6:46:4a:ac:b3:a7:a3:94:bb:13:
         3a:26:c3:02:43:7a:c0:c8:10:cc:83:33:5f:de:a2:47:8b:17:
         6e:b1:0a:d4:e4:7c:26:57:61:34:01:fd:b5:20:70:89:09:25:
         f3:49:73:9a:f3:ee:61:97:fa:c4:e7:06:ad:eb:67:67:6a:25:
         75:43:8b:b4:99:30:da:86:c1:d4:66:5d:e7:c0:72:9b:b9:1a:
         b4:ad:a9:12:df:a0:52:a0:e8:45:31:7d:4b:5e:82:cf:cf:b0:
         59:20:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:22:03 2026 by rpki-client