Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa
File:                     3137372e35342e3136302e302f31392d3332203d3e203532393931.roa (raw, json)
Hash identifier:          JfiJLDfYZY4cHdxkKXexp5Li9NQ2fL7/N5D0r6kdRNI=
Subject key identifier:   48:CF:EB:DC:E1:32:31:39:05:D4:66:74:5F:62:60:AF:2D:CF:4F:CB
Certificate issuer:       /CN=1A38A38646592073E79DD636D868C5FD813E2EAB
Certificate serial:       25E074D22FC104AC6686445A19E8829A93DC23AC
Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa
Signing time:             Mon 13 Apr 2026 17:04:46 +0000
ROA not before:           Mon 13 Apr 2026 16:59:46 +0000
ROA not after:            Mon 12 Apr 2027 17:04:46 +0000
asID:                     52991
IP address blocks:        177.54.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl
                          rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e0:74:d2:2f:c1:04:ac:66:86:44:5a:19:e8:82:9a:93:dc:23:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB
        Validity
            Not Before: Apr 13 16:59:46 2026 GMT
            Not After : Apr 12 17:04:46 2027 GMT
        Subject: CN=48CFEBDCE132313905D466745F6260AF2DCF4FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:82:19:d9:1f:8f:72:01:61:9a:94:55:6f:
                    20:14:ca:00:a1:82:d3:22:31:be:1b:1d:18:1c:fa:
                    9f:d5:ab:ed:e8:19:21:53:48:d9:d0:82:08:75:62:
                    09:a5:a1:13:b0:3f:ee:13:d4:24:a3:63:c5:9b:f5:
                    97:2a:c6:d5:c2:7a:f1:53:e1:66:85:21:46:78:44:
                    99:85:8a:21:92:bb:4a:59:aa:d5:b3:92:54:ee:cc:
                    82:f9:3f:5e:df:95:ab:e7:ae:94:ee:07:c6:22:0c:
                    21:c1:e2:41:89:8e:fa:7e:26:b7:14:f4:cf:83:c1:
                    b5:0f:96:d2:d6:48:9a:49:1a:4c:b3:e4:47:e3:80:
                    56:c7:35:c4:ec:9c:e1:bd:c2:99:01:04:d3:c1:b4:
                    ca:71:f2:33:03:85:fe:86:30:01:7f:d5:d1:3c:52:
                    3e:d5:11:40:d9:a5:62:c9:98:e0:87:c9:22:fe:29:
                    97:a5:65:39:3c:b4:a1:f1:a2:c3:c8:53:ec:92:42:
                    e9:33:04:eb:80:ee:10:44:f1:16:f9:88:34:54:fa:
                    ce:49:0b:2a:74:8e:1d:35:c7:c7:36:14:0f:98:2d:
                    c5:3d:4d:15:7a:2a:ca:92:3f:09:e2:b2:c5:17:44:
                    a6:0d:aa:6d:ef:41:37:1e:cd:e9:9b:25:28:c1:32:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CF:EB:DC:E1:32:31:39:05:D4:66:74:5F:62:60:AF:2D:CF:4F:CB
            X509v3 Authority Key Identifier:
                keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:d6:dd:35:6c:c7:60:9b:4b:0d:6c:04:9e:2d:25:56:fa:
         99:30:76:12:fc:58:15:e0:9f:92:3d:a0:cb:f9:58:0f:1a:6b:
         12:ff:0d:3d:e3:f3:11:0f:93:55:bb:21:a6:36:7a:5b:a6:13:
         bf:9d:0b:3c:e0:33:63:23:09:ae:e7:03:fb:fd:cb:57:19:b4:
         32:1c:63:3a:25:0b:1f:6f:2f:36:35:29:de:bd:c3:8a:c0:8b:
         71:60:72:ff:b3:f5:70:e0:89:54:54:7e:5b:74:14:11:c5:fe:
         fa:11:d0:5d:40:09:ce:0d:ce:77:d2:2b:a2:29:6f:7b:69:f2:
         de:d9:08:88:63:0b:6d:0a:f9:e4:36:83:de:7c:f4:02:4b:23:
         3d:54:21:46:d6:c0:de:d6:0a:ce:b3:98:09:fd:ae:9b:81:08:
         cd:d0:c7:76:86:e4:ff:cf:48:ce:20:ba:1c:8a:4a:24:e0:38:
         d4:0b:a8:6d:2e:3f:61:6f:76:34:79:58:70:79:b2:db:96:9b:
         34:95:f9:1d:10:59:61:fb:88:10:44:87:ba:22:49:97:35:3c:
         0c:87:36:2d:1b:f0:3c:b7:b2:a9:25:e6:5c:e5:f4:2f:01:38:
         0f:76:bd:40:9a:c7:a7:ef:17:e6:f0:2d:c6:f5:a7:e7:27:c7:
         7c:fd:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:52:07 2026 by rpki-client