Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20323632343832.roa
File:                     3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (raw, json)
Hash identifier:          lLNB2cBPThclys7QPsArqC9me72DMbdsI4Zz8WzSw64=
Subject key identifier:   04:E9:18:04:95:7E:FD:3F:C4:C6:86:63:C7:E8:B3:7B:3D:5E:57:5A
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       09D2B1679731078D5063C8A3770960F4D3A37CDC
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20323632343832.roa
Signing time:             Mon 23 Feb 2026 19:17:07 +0000
ROA not before:           Mon 23 Feb 2026 19:12:07 +0000
ROA not after:            Mon 22 Feb 2027 19:17:07 +0000
asID:                     262482
IP address blocks:        177.55.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:b1:67:97:31:07:8d:50:63:c8:a3:77:09:60:f4:d3:a3:7c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: Feb 23 19:12:07 2026 GMT
            Not After : Feb 22 19:17:07 2027 GMT
        Subject: CN=04E91804957EFD3FC4C68663C7E8B37B3D5E575A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:62:ec:dc:11:dd:30:32:36:7d:fd:83:4b:
                    eb:ed:fc:7a:a3:61:13:1a:30:ef:64:f5:46:42:02:
                    6d:33:a4:51:d9:85:61:89:aa:0b:a2:db:8c:e4:8c:
                    a5:5e:36:6a:df:09:ba:c5:5b:32:3d:46:fd:a6:17:
                    df:4b:1e:be:ae:8d:02:4e:72:75:e6:57:40:c9:40:
                    59:bc:c4:48:67:d4:4c:31:fa:ea:83:c5:7f:4b:d9:
                    39:b6:d0:b2:b0:b0:42:66:dd:fc:7e:17:9f:39:53:
                    59:54:34:27:8d:85:69:76:46:37:8e:dc:0e:65:f8:
                    ea:f6:ea:ed:9b:0a:78:dc:59:93:29:e4:85:1c:c3:
                    69:80:ef:ce:75:29:03:70:e4:65:f1:c2:a1:1f:6f:
                    a2:ff:b4:e4:e4:72:2c:8e:38:7a:20:2a:a3:e3:82:
                    d7:cc:7c:15:4a:f4:f2:04:92:0e:88:8d:c3:c4:d0:
                    1d:27:fb:06:63:ee:f4:d2:9d:1a:9c:27:3f:5d:0f:
                    17:93:57:06:82:17:70:dd:c1:b7:f7:3a:d7:87:c4:
                    c6:15:27:9f:8e:16:1f:48:7c:66:27:dc:4f:f0:52:
                    df:59:14:61:79:fa:c9:e6:98:36:b6:28:60:11:18:
                    38:f9:be:1d:51:5b:ec:4c:b9:be:d1:70:e0:d9:27:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:18:04:95:7E:FD:3F:C4:C6:86:63:C7:E8:B3:7B:3D:5E:57:5A
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20323632343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:f7:f6:e4:73:ea:7e:f5:bb:ca:83:ea:1a:5c:21:32:d0:
         45:15:5c:3a:3b:a0:fb:b4:e8:8f:ec:79:da:11:b7:b6:43:14:
         79:2d:1c:3a:be:cf:55:32:8e:d5:30:1a:0b:d0:04:cf:4d:25:
         2e:1b:0a:a6:5e:a2:08:28:83:9f:ad:19:6e:0b:b6:3e:60:58:
         4a:de:ca:4c:c6:9d:c0:47:ee:b9:96:8e:fb:f0:74:cc:04:f0:
         a9:97:47:55:4e:f0:69:a4:f4:b4:72:2a:bf:4e:40:76:b3:d8:
         56:6c:36:4e:f7:37:ca:47:ff:4b:53:d0:e2:f0:18:ec:57:df:
         50:e7:b2:e9:97:0a:05:3a:fe:5c:83:02:7a:05:27:8e:e4:45:
         24:51:24:5a:5e:d8:d4:19:c0:19:09:7e:a9:2f:6f:bc:0e:55:
         62:fd:80:6b:8a:94:c1:e4:c4:0c:9f:65:ee:c8:fb:84:e9:9e:
         23:b0:34:0b:63:f4:98:b5:e2:4e:12:23:28:9d:7f:04:38:f6:
         22:11:fa:0a:9e:72:c1:f8:cb:f3:c6:4d:e1:0d:6a:66:e3:73:
         6f:33:ee:f0:df:2b:a3:b4:1a:b8:a4:e9:38:bc:02:e6:b6:72:
         c6:cd:6e:d6:92:5a:bd:1f:65:33:76:f0:46:ab:76:da:f8:73:
         97:a1:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:42 2026 by rpki-client