Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/3137372e3232312e3234302e302f32302d3234203d3e20323633343637.roa
File:                     3137372e3232312e3234302e302f32302d3234203d3e20323633343637.roa (raw, json)
Hash identifier:          wlasmi40HHs+sTa+3GWITEFPgi1Ob1ZYknSlklVPQJQ=
Subject key identifier:   36:1F:7F:02:47:DA:33:72:E0:F0:D3:9E:AF:A0:FB:4B:80:90:10:47
Certificate issuer:       /CN=718FD7745122924B2C0447ECC4439A2FA495E189
Certificate serial:       76174B804487F1B3A214BF641AC6EC149AD64CBB
Authority key identifier: 71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/3137372e3232312e3234302e302f32302d3234203d3e20323633343637.roa
Signing time:             Wed 30 Sep 2026 14:03:10 +0000
ROA not before:           Wed 30 Sep 2026 13:58:10 +0000
ROA not after:            Wed 29 Sep 2027 14:03:10 +0000
asID:                     263467
IP address blocks:        177.221.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl
                          rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:17:4b:80:44:87:f1:b3:a2:14:bf:64:1a:c6:ec:14:9a:d6:4c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Validity
            Not Before: Sep 30 13:58:10 2026 GMT
            Not After : Sep 29 14:03:10 2027 GMT
        Subject: CN=361F7F0247DA3372E0F0D39EAFA0FB4B80901047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:a6:3c:7a:3d:90:b8:a3:6d:22:6b:93:e6:
                    c6:0e:a0:1b:72:a8:8c:55:e2:e3:85:fa:e2:1a:a4:
                    0e:20:41:d1:c1:ee:a0:04:bc:3f:98:a2:41:69:b3:
                    bd:32:36:fa:88:df:28:c1:9e:d1:81:bc:6b:e5:e6:
                    34:0e:36:80:fe:81:7f:66:49:a2:e7:9e:d5:bb:91:
                    bf:e6:e0:bc:d0:03:7c:ad:7e:fd:94:fb:02:07:77:
                    90:ab:b4:3b:77:23:7b:bb:af:bb:73:3e:36:d8:42:
                    3a:a3:05:1d:e6:3a:06:36:2d:73:e4:a9:c0:b0:7d:
                    33:de:d6:fb:15:2f:06:1a:ee:58:91:14:63:ce:e6:
                    1f:d8:d0:30:96:12:e0:e6:c6:ca:7d:81:f2:34:ed:
                    a8:0c:74:c2:c0:c4:30:46:bd:84:90:63:e2:50:d9:
                    ab:b0:99:55:19:b5:ee:30:d7:63:47:f4:8f:6c:e4:
                    b7:11:e2:47:e2:4f:b3:3e:80:39:72:b5:f7:98:6d:
                    54:28:ef:b2:f4:30:0a:18:e3:bd:9b:e1:c7:e0:80:
                    0a:92:dc:27:48:ee:b2:82:60:8f:d7:3d:5d:4d:e0:
                    c2:56:25:e6:ec:6c:5c:18:88:0c:44:78:94:ed:25:
                    ee:5d:1d:02:d0:22:b9:6b:1e:d0:3b:fe:93:19:b5:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:7F:02:47:DA:33:72:E0:F0:D3:9E:AF:A0:FB:4B:80:90:10:47
            X509v3 Authority Key Identifier:
                keyid:71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/3137372e3232312e3234302e302f32302d3234203d3e20323633343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:57:8f:3d:bf:40:d2:a4:d9:3c:d6:a1:d4:f9:89:3b:4a:95:
         d5:55:dd:ac:ee:4d:ed:3f:7f:3a:17:df:7c:cc:22:9b:97:ec:
         87:5b:d7:80:84:47:21:be:2a:dc:a3:88:4f:65:fb:81:99:03:
         6a:f1:14:a3:8e:f1:77:c8:4e:e0:ab:56:ec:ea:38:ae:1c:4d:
         7e:10:0d:84:27:5e:5f:03:ef:9f:9c:8b:fd:6f:9f:1b:63:a8:
         d8:62:76:15:00:ac:e0:21:9a:6c:14:d5:71:35:ae:51:84:42:
         0d:0d:fd:ec:f7:cd:e4:40:d9:30:1c:1c:e4:be:7a:22:40:c2:
         de:a0:c8:b2:e2:b9:89:a8:4f:53:da:4d:19:93:0c:79:35:cb:
         78:70:4b:e2:8c:54:fd:33:1b:72:97:fb:84:a7:bf:b9:94:ee:
         ea:86:63:0b:8c:bc:86:23:76:74:60:d3:1f:fa:84:e7:31:2b:
         94:eb:94:58:5f:1f:a3:7a:e8:f2:fe:46:45:c5:87:b7:f9:87:
         7b:63:ea:54:92:d3:bb:4d:50:35:da:ff:5d:d9:01:17:cd:dd:
         dd:28:b4:01:97:26:5d:1c:fe:d8:e2:15:0f:ca:f8:fd:53:4b:
         85:c7:5e:3e:c4:62:e9:7c:ca:74:8b:9e:98:6b:98:61:5d:44:
         98:0a:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:44:30 2026 by rpki-client