Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131372e302f32342d3234203d3e203532363030.roa
File:                     3137372e3133372e3131372e302f32342d3234203d3e203532363030.roa (raw, json)
Hash identifier:          jR+oyA3VRFYhvIWx5TiXh30yyx0FbKCH6SoDJgPkUg8=
Subject key identifier:   5A:90:08:5C:75:1F:C7:90:BE:2C:67:10:A7:2D:05:4B:A4:1C:91:13
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       3F25074D728E7435A1C5722D42C1C193C0898B8E
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131372e302f32342d3234203d3e203532363030.roa
Signing time:             Mon 19 Oct 2026 12:59:47 +0000
ROA not before:           Mon 19 Oct 2026 12:54:47 +0000
ROA not after:            Mon 18 Oct 2027 12:59:47 +0000
asID:                     52600
IP address blocks:        177.137.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 05:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:25:07:4d:72:8e:74:35:a1:c5:72:2d:42:c1:c1:93:c0:89:8b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Oct 19 12:54:47 2026 GMT
            Not After : Oct 18 12:59:47 2027 GMT
        Subject: CN=5A90085C751FC790BE2C6710A72D054BA41C9113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:08:f4:21:1e:d0:87:54:18:04:a1:ca:30:
                    cb:b8:54:bf:64:cd:12:85:55:2e:d4:d8:e7:38:e1:
                    47:d0:8e:be:9a:ac:1d:d9:01:04:97:61:72:53:f0:
                    68:48:d0:0c:c6:1b:f9:d0:d2:30:08:74:88:d7:cd:
                    ed:a2:47:ae:b6:a1:e1:dd:99:8a:ea:af:82:2d:43:
                    c7:22:7c:a6:5e:d5:33:fd:2f:53:3d:bc:f5:68:b0:
                    13:28:13:50:ec:d5:73:6b:6e:79:c4:a0:ea:dd:bd:
                    9a:1c:86:4e:90:b5:16:87:a8:23:7d:76:a9:0e:42:
                    b5:d8:41:c5:1b:e4:93:8c:85:ee:32:d2:28:68:a0:
                    95:9f:b6:69:6e:1d:cc:21:57:7a:3d:62:f4:e3:b3:
                    4f:56:bb:22:91:d7:b2:f9:74:13:4c:3c:07:e1:95:
                    af:68:d6:9c:e8:d7:7b:5a:9f:a4:58:e7:1a:fa:f7:
                    f8:e1:2c:31:61:72:9e:ed:52:a8:9b:9a:18:9d:3b:
                    c4:aa:fa:7e:91:cb:50:b9:79:14:56:b8:f3:8c:26:
                    f1:c8:8f:9f:35:82:e8:79:8f:e5:34:f0:83:25:db:
                    d1:8a:21:20:84:94:f2:83:0b:46:b1:10:f0:c8:71:
                    7f:e4:a4:6b:92:3a:3f:be:05:b7:a3:b7:ac:77:af:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:08:5C:75:1F:C7:90:BE:2C:67:10:A7:2D:05:4B:A4:1C:91:13
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131372e302f32342d3234203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:3f:f1:1e:df:e0:6e:cb:18:d9:cf:f0:63:c6:b5:49:17:dc:
         39:80:bb:b3:80:9c:60:64:3f:09:7b:f9:c0:48:9e:bd:e3:04:
         a1:e7:a0:53:39:df:13:7d:92:e2:e4:f1:6d:15:50:8b:93:48:
         a8:87:85:40:6d:66:ac:d7:dd:db:84:8f:a9:63:66:04:d2:a1:
         c0:1f:07:c9:f1:b0:dc:c8:f9:c9:cc:46:a3:cd:e2:7a:2b:c4:
         a6:9c:e5:92:90:bb:51:54:d2:30:3c:cd:21:2a:a3:cf:34:5b:
         44:4a:af:cc:ac:30:9e:95:99:c6:c7:5f:6f:93:e2:67:79:5e:
         8a:fa:d3:6b:6c:bd:38:1c:22:bf:7e:e8:b5:98:6f:e4:2d:4b:
         ef:73:41:db:7d:49:fd:68:a2:a0:d0:2b:46:78:bb:92:9e:38:
         92:de:78:d8:dd:bc:96:9a:3f:3e:18:8d:97:53:d7:1a:6a:38:
         73:48:20:0d:ef:c5:01:82:f6:db:97:df:e5:ae:6b:1a:67:e5:
         bd:2b:73:a8:41:3d:82:dc:b8:9b:44:6b:8d:5c:37:98:3f:82:
         26:a7:cc:86:80:1d:84:43:81:e7:26:99:1c:73:89:74:7a:51:
         80:8c:27:ed:b9:d3:c1:c9:cd:86:53:aa:76:02:ab:f8:56:2b:
         8d:68:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:14 2026 by rpki-client