Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32342d3234203d3e20323730383133.roa
File:                     3137372e3132382e3230302e302f32342d3234203d3e20323730383133.roa (raw, json)
Hash identifier:          1wWI68ibSVmpINP32wzE0tPNUCDvXYrFyyR+gb15n6I=
Subject key identifier:   C3:14:16:50:F2:97:98:F3:DE:D0:58:82:EC:EE:16:3E:8D:81:05:EE
Certificate issuer:       /CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
Certificate serial:       5D07FFF4D911AA614F38ABC0F6E5DAE8CEEDC8F4
Authority key identifier: 98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32342d3234203d3e20323730383133.roa
Signing time:             Mon 13 Apr 2026 15:31:18 +0000
ROA not before:           Mon 13 Apr 2026 15:26:18 +0000
ROA not after:            Mon 12 Apr 2027 15:31:18 +0000
asID:                     270813
IP address blocks:        177.128.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl
                          rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:07:ff:f4:d9:11:aa:61:4f:38:ab:c0:f6:e5:da:e8:ce:ed:c8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
        Validity
            Not Before: Apr 13 15:26:18 2026 GMT
            Not After : Apr 12 15:31:18 2027 GMT
        Subject: CN=C3141650F29798F3DED05882ECEE163E8D8105EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:70:ff:59:40:7e:ab:aa:a5:c1:7b:56:87:
                    02:6b:70:98:8e:d4:fe:f2:e9:25:dd:9a:40:e4:01:
                    24:1c:9a:e6:e4:04:74:a2:af:d3:12:57:a2:f9:2e:
                    c9:9b:de:28:20:db:c3:a6:93:0a:51:31:4e:57:39:
                    d8:87:5e:14:eb:f2:ae:9f:e2:fe:cd:83:35:6a:16:
                    c6:03:5a:b9:9e:77:63:e9:77:2d:25:f6:13:af:23:
                    75:7d:cb:7f:85:4f:7b:19:19:08:a7:2f:7d:03:39:
                    19:b1:a1:a3:b5:9b:13:e2:dc:d5:84:1c:81:b4:86:
                    82:0f:53:c2:ed:07:2e:9d:13:be:a0:c3:34:d5:6b:
                    b1:90:38:1c:70:34:74:fa:a8:69:6f:78:a8:55:6a:
                    04:32:e1:74:8b:38:00:d2:72:3d:f6:ba:d3:bc:2d:
                    e2:75:5a:61:fb:ad:37:32:6a:37:0b:55:0f:29:03:
                    65:0b:61:51:ca:c9:b8:32:55:71:f9:8d:a3:d1:21:
                    7a:fa:91:e0:c9:4f:49:fa:87:62:76:c5:8d:8c:97:
                    9c:94:4a:51:a1:bb:32:c9:8e:26:89:ba:2e:af:23:
                    45:5d:60:36:35:73:22:74:e1:29:8a:5c:b0:80:d7:
                    4f:c6:d6:43:05:61:2e:62:26:9d:07:5d:01:32:d2:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:16:50:F2:97:98:F3:DE:D0:58:82:EC:EE:16:3E:8D:81:05:EE
            X509v3 Authority Key Identifier:
                keyid:98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/3137372e3132382e3230302e302f32342d3234203d3e20323730383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:d4:8b:cc:17:9f:3e:3b:f7:9a:3f:61:b3:d2:67:1a:96:
         e3:65:4a:f0:72:41:2c:2f:7a:d6:a7:e5:12:7b:0e:13:05:7a:
         ee:2d:15:28:36:20:98:4b:b8:a2:51:2a:fa:9c:b7:c3:b0:1f:
         71:7e:fe:38:39:d0:12:32:5e:9f:92:6d:a6:a8:fe:d5:35:d2:
         d3:a0:b9:53:f8:a3:70:d9:fa:f9:a9:87:09:e2:22:38:bf:14:
         b0:22:b8:d3:e7:9e:eb:97:40:63:1b:33:f7:1c:9c:cc:9a:0e:
         6b:36:66:4a:fa:3f:0a:35:1a:ff:4f:3f:45:1b:45:e9:47:43:
         ca:ed:65:f5:c7:b4:f8:2f:10:30:6c:3a:8a:5c:35:ab:39:f6:
         8b:62:5e:b0:22:ce:74:61:59:5c:a5:69:af:6f:19:1f:47:a9:
         da:a8:1b:ee:33:7f:8d:81:c7:c3:f4:89:90:30:97:d2:35:cb:
         4a:67:e1:50:3b:66:01:10:53:6d:d4:7e:63:61:bf:8d:06:8d:
         05:59:45:50:a8:0b:da:df:69:c1:8f:51:20:eb:3b:f4:30:f1:
         33:c8:76:ad:99:3f:ac:22:ae:f3:ce:a1:75:e6:80:d9:c0:4c:
         e7:45:27:56:22:8a:e9:14:ed:63:f9:4d:bb:de:26:77:f5:75:
         4a:93:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:57 2026 by rpki-client