Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
File:                     3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          4yiI3uzsu00pSfqPumP2wLg5/C6/KvOiWlfuSkl4rY8=
Subject key identifier:   48:4F:EB:DC:34:0C:CD:77:8C:E6:DD:A0:55:EC:D4:A0:A1:D1:19:6E
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       68887687E39722CC87D9E9FBE83A3DA13DFC1B90
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 13 Apr 2026 13:48:35 +0000
ROA not before:           Mon 13 Apr 2026 13:43:35 +0000
ROA not after:            Mon 12 Apr 2027 13:48:35 +0000
asID:                     262688
IP address blocks:        177.154.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:76:87:e3:97:22:cc:87:d9:e9:fb:e8:3a:3d:a1:3d:fc:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:35 2026 GMT
            Not After : Apr 12 13:48:35 2027 GMT
        Subject: CN=484FEBDC340CCD778CE6DDA055ECD4A0A1D1196E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:3f:ca:75:2e:a3:fa:be:13:3d:1b:c4:07:
                    bf:9b:e2:b1:64:6e:e2:a6:f9:e2:ea:6d:87:6e:2c:
                    64:ff:0e:b3:18:0c:cf:2f:2b:20:56:d1:d3:88:bb:
                    ad:85:d0:01:f9:8b:56:01:80:5c:a3:eb:c6:85:c5:
                    45:47:45:05:58:c5:f0:8b:e0:4a:b3:8a:4b:92:c6:
                    b5:60:38:a4:a7:80:e8:de:37:4c:aa:d0:43:0a:0c:
                    b0:97:55:ae:cb:0b:5a:3e:a4:f0:8a:11:09:ae:46:
                    77:e8:a9:cb:72:be:34:79:08:bb:0e:9e:d4:fb:b3:
                    5a:1d:37:d4:89:57:b9:99:d2:e3:f7:02:5e:10:6f:
                    a7:cf:d7:16:4b:c5:60:39:82:6c:f9:3d:8a:0c:09:
                    91:9a:5f:dc:b2:30:27:c8:75:65:bf:a6:7e:aa:84:
                    b8:19:8b:13:2c:6c:e9:d7:f4:26:87:bf:67:09:cf:
                    52:89:9c:37:ea:d3:8c:20:99:60:d7:9d:84:4b:8a:
                    37:3f:e9:39:a1:02:bc:34:ea:65:34:b8:2b:ed:ce:
                    4b:12:e4:11:2b:d7:47:03:b2:38:dd:6a:1f:23:ea:
                    6d:1f:3b:87:87:7b:b7:0a:05:fe:bd:c0:b7:17:c6:
                    88:55:50:a0:e7:61:e3:8a:12:76:ec:44:ae:6c:3c:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4F:EB:DC:34:0C:CD:77:8C:E6:DD:A0:55:EC:D4:A0:A1:D1:19:6E
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:59:9a:a3:c2:b1:e6:1f:c4:38:d0:5b:4b:63:86:82:64:
         f4:6f:72:f8:ea:6b:8a:24:f6:f9:9f:e6:90:aa:3c:c7:d0:14:
         25:c0:04:89:fe:0f:cf:c6:c5:6a:97:1d:11:44:05:bb:fb:9b:
         8c:07:3d:7c:17:22:91:a3:3d:1f:61:99:7e:1e:ff:d3:d8:bb:
         02:5d:b7:7e:53:b6:65:a6:c0:cd:a4:47:10:56:9d:57:1a:e5:
         61:47:a4:5d:87:0d:8a:5f:5e:09:86:88:18:00:7c:9b:c9:e4:
         9f:62:f3:aa:f9:7b:0b:0c:d1:7b:44:f3:dd:31:1e:e7:ff:fc:
         d0:14:ac:0a:dd:3c:a0:ab:2d:01:fa:a4:d3:0a:fa:98:fa:44:
         57:9a:2d:51:18:0c:a8:a8:5e:6a:06:d3:2c:71:4b:87:06:93:
         df:ab:90:dc:20:7d:22:99:97:0e:e8:27:27:77:d6:fd:d1:21:
         9c:36:7b:ba:30:02:9e:77:62:0e:33:65:a9:07:f6:06:b3:c6:
         e7:3a:25:9c:df:76:0c:b5:b6:3b:4b:54:25:36:c4:32:c5:c5:
         f6:aa:73:f6:1c:82:c3:f3:43:3c:04:88:c8:99:d4:f5:2a:fb:
         d3:52:e2:7c:d7:47:17:da:d7:75:b2:90:d2:79:e1:de:e9:f0:
         26:0a:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:16 2026 by rpki-client