Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e203238313838.roa
File:                     3137372e31322e3133392e302f32342d3234203d3e203238313838.roa (raw, json)
Hash identifier:          MQHIVou1uJMCt0S7szwrT3whFt0pmM7HL2NOcyYxt88=
Subject key identifier:   E9:97:C1:54:A5:4C:F6:65:22:E4:C3:5E:90:69:EC:BB:5A:F5:0E:41
Certificate issuer:       /CN=9837137423ED461C8F9E6EB8C108F7C4CF88B4D8
Certificate serial:       49980BE068C7DE2EBC073C85EE6E8C4B6A26EF32
Authority key identifier: 98:37:13:74:23:ED:46:1C:8F:9E:6E:B8:C1:08:F7:C4:CF:88:B4:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e203238313838.roa
Signing time:             Mon 12 Oct 2026 22:39:42 +0000
ROA not before:           Mon 12 Oct 2026 22:34:42 +0000
ROA not after:            Mon 11 Oct 2027 22:39:42 +0000
asID:                     28188
IP address blocks:        177.12.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.crl
                          rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:98:0b:e0:68:c7:de:2e:bc:07:3c:85:ee:6e:8c:4b:6a:26:ef:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9837137423ED461C8F9E6EB8C108F7C4CF88B4D8
        Validity
            Not Before: Oct 12 22:34:42 2026 GMT
            Not After : Oct 11 22:39:42 2027 GMT
        Subject: CN=E997C154A54CF66522E4C35E9069ECBB5AF50E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:71:99:a5:56:d1:a5:ac:53:1a:c1:7f:a9:
                    f5:44:e2:80:1f:84:a2:ce:93:a3:1b:12:77:2b:fa:
                    8c:f9:75:a5:d3:b7:26:69:86:bd:39:e5:91:40:bd:
                    f3:61:78:19:77:63:63:02:78:00:c8:f7:e5:bf:08:
                    74:9b:6c:de:8b:9e:bd:b4:29:aa:59:76:27:1a:9f:
                    23:b3:b2:5b:64:5f:22:69:18:cb:c3:d2:b3:b7:b4:
                    70:c1:df:8f:96:aa:f0:fd:ab:e4:c7:49:3b:cb:6e:
                    b5:f6:33:d6:7a:e6:f4:4a:f1:0a:de:9a:32:c0:89:
                    15:83:19:2d:93:8a:f2:90:e6:13:13:8a:cf:03:95:
                    78:29:e3:8f:5c:13:03:1f:27:80:91:89:3a:52:ca:
                    e3:dd:15:90:ae:c1:a0:7a:fa:07:3a:54:54:be:b6:
                    4e:e2:9b:45:d1:ce:1b:df:a8:fa:fb:a3:55:e0:ca:
                    05:98:ba:2c:3a:8b:9e:fd:d2:a9:f0:d5:63:2b:6f:
                    89:9f:10:94:e6:83:79:da:c9:f5:f6:24:bc:66:c7:
                    cc:f3:c2:38:ea:8e:c1:51:a7:3f:4b:12:e1:50:40:
                    01:7e:44:26:e5:d1:d4:8d:df:33:75:77:fc:b5:dc:
                    f7:1d:17:7d:f9:15:7d:eb:39:6f:12:a0:f3:a3:0f:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:C1:54:A5:4C:F6:65:22:E4:C3:5E:90:69:EC:BB:5A:F5:0E:41
            X509v3 Authority Key Identifier:
                keyid:98:37:13:74:23:ED:46:1C:8F:9E:6E:B8:C1:08:F7:C4:CF:88:B4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9837137423ED461C8F9E6EB8C108F7C4CF88B4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6e3KUqjYwAyCr7aT32a4xc7iQ9zCGBzxBr37Ppimqb3V/0/3137372e31322e3133392e302f32342d3234203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:0d:9c:0e:7a:12:e6:11:5f:16:03:6e:df:76:98:dd:f0:
         bc:41:d4:fa:14:31:f5:04:09:66:c5:a4:f0:b6:fd:bf:18:9b:
         fd:93:0b:aa:aa:0f:b7:c0:d2:10:02:c1:7b:55:05:d5:37:bf:
         27:30:18:45:97:f9:a1:5c:a5:91:46:74:81:fe:43:bf:ba:60:
         11:7f:d9:bc:b0:61:cd:07:46:96:a2:d0:56:23:a2:2f:c8:61:
         58:5a:d4:fa:67:7e:dd:f2:88:ae:8a:8d:e9:ab:54:06:29:5d:
         6d:52:c0:1b:b5:f4:9d:f1:24:9b:48:81:49:98:a6:21:ff:ec:
         2e:ba:77:5f:c7:f7:a7:cf:6c:46:7f:a9:74:a2:c0:aa:39:73:
         da:49:06:b8:e2:1f:dd:ca:4e:a6:ad:d4:7a:13:3c:9d:75:38:
         3f:ba:23:45:55:c0:82:98:a7:b7:73:5c:dc:9f:4d:79:1b:db:
         6a:9a:de:54:ef:5d:88:5f:8c:28:53:7e:e3:8c:4c:36:27:a6:
         8c:d5:6d:37:6b:31:ee:2b:32:48:1e:1e:be:c1:ef:05:a9:56:
         e6:e0:87:54:6d:49:79:b7:95:91:81:28:c8:a5:cd:a8:59:71:
         60:8b:a1:b6:7e:bd:92:7f:d4:56:35:0c:f1:43:a2:c4:73:6c:
         98:8c:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:37:02 2026 by rpki-client