Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e382e302f32312d3234203d3e20323730383134.roa
File:                     3137372e35332e382e302f32312d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          zkID9fSXyvpg/z1vk4ADqLhniDB9yszBvbPVvN1Rdfo=
Subject key identifier:   8E:8C:68:F8:ED:EF:D9:F9:84:3F:81:FB:5A:27:F5:4A:A1:B6:70:89
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       01893818B1510D3F99E0CD08950911C67CBAC8E0
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e382e302f32312d3234203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:49:58 +0000
ROA not before:           Mon 28 Sep 2026 17:44:58 +0000
ROA not after:            Mon 27 Sep 2027 17:49:58 +0000
asID:                     270814
IP address blocks:        177.53.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 11:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:38:18:b1:51:0d:3f:99:e0:cd:08:95:09:11:c6:7c:ba:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:44:58 2026 GMT
            Not After : Sep 27 17:49:58 2027 GMT
        Subject: CN=8E8C68F8EDEFD9F9843F81FB5A27F54AA1B67089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:89:b0:3f:40:04:14:ab:cb:63:c1:3d:83:
                    0b:f5:a1:0e:7c:7b:38:0c:1e:3d:18:b2:20:2d:68:
                    61:6a:7c:1b:a9:17:7c:fd:6f:0f:10:28:1c:61:bc:
                    44:3c:36:cf:bd:b3:e0:9c:63:94:39:10:69:09:7d:
                    37:38:65:9a:09:52:23:48:12:a1:6a:e6:f1:e7:26:
                    8d:f2:61:de:02:a5:15:49:10:61:3e:2c:e9:12:d9:
                    f9:9b:70:7e:c7:c3:48:f2:46:20:6a:01:0a:28:5f:
                    91:0c:e4:e9:28:2b:6a:f0:1b:d0:ee:01:df:f7:eb:
                    f2:21:a3:95:f5:a3:5b:e1:09:01:68:53:a6:e3:75:
                    b7:80:4a:ae:95:1f:dc:46:8c:02:56:f4:be:a5:4c:
                    13:d9:e4:f2:40:c1:22:04:6d:cb:c0:19:2b:b1:a7:
                    73:50:b8:aa:d3:16:b6:a0:46:07:72:90:84:34:00:
                    28:94:90:0d:65:de:65:53:02:29:c4:37:c2:46:aa:
                    fb:ef:83:3f:8c:bb:7d:67:ca:2e:18:ca:d1:b2:91:
                    b8:7c:1f:d0:36:82:e5:5a:39:a4:bd:1e:c1:87:37:
                    49:1e:cf:c1:ff:cd:fd:8d:49:5f:dd:78:11:2d:57:
                    0d:0d:58:57:97:84:85:87:20:5e:66:8a:c1:6e:a8:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:68:F8:ED:EF:D9:F9:84:3F:81:FB:5A:27:F5:4A:A1:B6:70:89
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e382e302f32312d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:06:e0:74:f8:65:27:81:e9:02:92:aa:0d:8a:cd:84:04:37:
         a1:7b:e7:b9:00:e8:1f:cc:77:db:25:7a:f7:81:69:2d:01:42:
         6a:26:cd:60:79:bd:70:c0:d5:70:b8:ed:1d:72:77:3b:b0:fd:
         eb:fc:8c:38:e4:2b:af:15:b0:15:78:f3:28:bf:ba:ba:76:7a:
         e5:35:6d:0e:67:60:18:5a:df:10:13:90:05:50:01:32:42:10:
         52:92:31:e6:2f:35:03:c3:83:6d:b1:4d:f9:65:dd:b2:85:55:
         da:5c:bc:d1:10:5d:ab:f7:c0:99:52:ba:08:66:7c:cc:ad:0c:
         88:d1:60:1b:fa:1e:ac:70:31:2d:c8:d6:60:ce:15:43:9d:a4:
         0c:66:b3:5b:2b:ef:08:f8:41:2b:a1:72:d9:31:01:ba:6e:ce:
         f9:f5:91:13:28:9b:94:ea:d5:ad:72:ed:d5:95:c8:20:81:d4:
         f5:f9:d9:18:80:bf:30:66:6a:b1:17:bf:16:d2:ab:12:1b:c3:
         03:fe:26:7c:55:11:0a:64:f3:a9:05:fd:c3:75:1b:3d:ee:21:
         ce:82:b0:01:ce:ef:47:ce:39:8a:0e:1e:db:8c:80:91:ad:0c:
         c9:48:ce:87:c9:49:fb:2f:3b:42:67:56:6b:aa:6f:d2:43:e1:
         52:a4:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:49:16 2026 by rpki-client