Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3137372e33382e38382e302f32322d3234203d3e20323634333836.roa
File:                     3137372e33382e38382e302f32322d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          jogr1sFBFweIww06NUImv+W1fijBnVaSw/777woTfJM=
Subject key identifier:   3A:C1:9B:03:9F:7B:45:E7:A1:50:81:2E:F8:81:2D:68:B7:BE:40:69
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       3FA5343B52AF213FA00DAD628DE42750FB4E50EE
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3137372e33382e38382e302f32322d3234203d3e20323634333836.roa
Signing time:             Tue 14 Apr 2026 22:34:11 +0000
ROA not before:           Tue 14 Apr 2026 22:29:11 +0000
ROA not after:            Tue 13 Apr 2027 22:34:11 +0000
asID:                     264386
IP address blocks:        177.38.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 03:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a5:34:3b:52:af:21:3f:a0:0d:ad:62:8d:e4:27:50:fb:4e:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Apr 14 22:29:11 2026 GMT
            Not After : Apr 13 22:34:11 2027 GMT
        Subject: CN=3AC19B039F7B45E7A150812EF8812D68B7BE4069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:85:cd:0d:e2:ef:49:4c:77:c8:22:21:e6:
                    d8:cb:ee:12:eb:0a:61:74:b0:ac:d3:67:60:d1:3b:
                    8d:ad:c1:e7:12:2e:97:0d:32:1f:14:9a:b6:95:0e:
                    ef:25:df:c1:8b:fc:b6:e0:38:89:61:b6:f1:3b:e4:
                    5a:a2:fb:82:19:2b:5e:a8:4a:d6:99:62:84:f8:1b:
                    cb:53:ad:b1:eb:d1:45:80:33:64:38:c0:fe:01:e1:
                    1e:53:3a:45:f3:cb:1b:ce:be:97:fe:08:5c:d2:d1:
                    3f:c8:ab:63:67:4e:6e:fd:4d:97:63:c9:c3:37:32:
                    85:c2:6f:23:67:52:a3:ac:ff:ab:9d:12:2e:80:e9:
                    b2:e8:98:18:1e:a2:80:64:29:4c:29:63:fd:d1:58:
                    73:e2:da:20:b1:92:7e:12:4a:fd:38:46:bf:b3:59:
                    5e:3c:6b:42:af:cb:b8:57:e6:78:05:c4:15:bc:8b:
                    49:3d:46:ef:62:21:e8:f8:e0:09:c9:a9:3a:b1:a7:
                    e6:11:3e:62:e2:9b:4a:4c:bb:68:a5:d0:04:20:57:
                    d2:59:9e:a7:6f:9e:dd:35:4d:e5:5b:a8:e9:6f:4f:
                    10:c8:d3:09:42:04:14:76:35:89:d6:a2:de:6a:5c:
                    11:c0:a0:0f:39:7a:e5:54:2e:e5:dc:9f:1d:5d:55:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C1:9B:03:9F:7B:45:E7:A1:50:81:2E:F8:81:2D:68:B7:BE:40:69
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3137372e33382e38382e302f32322d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:10:84:cc:d7:f9:e7:f2:cb:9f:3e:4d:8c:76:0f:40:0b:99:
         a9:d6:c8:01:b4:b5:77:11:13:f0:1d:01:37:6d:dd:ca:2e:88:
         cb:4f:6a:44:be:c4:db:60:65:0c:e6:53:06:ba:e7:df:31:72:
         10:60:d0:7d:b5:76:da:e5:89:84:ef:e9:06:c3:6a:da:2c:c2:
         fa:61:32:9b:61:62:5a:c5:68:ec:3a:6e:5e:46:fa:25:a2:ed:
         4d:07:5a:6b:cf:b3:a7:21:58:e3:a6:39:19:aa:f2:ec:05:67:
         53:fc:bf:12:92:ac:65:7b:a2:e0:32:b5:0f:53:2e:5c:c9:1c:
         5f:35:d7:6c:3e:71:5e:52:df:12:76:a0:ab:55:67:99:10:a6:
         fe:5f:18:f4:1f:30:53:7b:8e:16:fc:b6:9d:e7:25:c9:47:0f:
         ee:9a:0d:a1:74:84:c2:8a:20:dc:86:6f:ef:e7:47:10:7a:e8:
         22:85:19:09:82:79:cc:16:93:05:51:a0:1b:f8:be:97:ce:fe:
         33:0c:4c:61:da:2e:16:30:62:03:a1:31:f6:44:9f:41:4c:26:
         1f:80:79:8e:e3:b1:7b:63:34:6b:6e:0d:e1:1a:50:31:3a:90:
         e6:53:3b:cb:a1:3c:aa:ba:ed:64:53:54:d6:63:4b:ab:42:dc:
         ac:8e:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:50:48 2026 by rpki-client