Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37352e302f32342d3234203d3e20323633323833.roa
File:                     3137392e3132372e37352e302f32342d3234203d3e20323633323833.roa (raw, json)
Hash identifier:          53GdkEvm+T1/cXCmbbyV6ctqihuffJ4Le3VYSM8bLps=
Subject key identifier:   93:98:5B:18:DC:AD:A1:E0:85:38:84:24:FC:57:41:C7:4C:8F:1B:F9
Certificate issuer:       /CN=442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C
Certificate serial:       4425EEF8D3EDC69B58291C01E6BF3E815C7C5E37
Authority key identifier: 44:2B:BD:3A:95:F6:E7:24:C0:B2:F9:51:FB:3D:A3:D7:B2:7E:4C:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37352e302f32342d3234203d3e20323633323833.roa
Signing time:             Fri 25 Sep 2026 09:43:59 +0000
ROA not before:           Fri 25 Sep 2026 09:38:59 +0000
ROA not after:            Fri 24 Sep 2027 09:43:59 +0000
asID:                     263283
IP address blocks:        179.127.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 13:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:25:ee:f8:d3:ed:c6:9b:58:29:1c:01:e6:bf:3e:81:5c:7c:5e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C
        Validity
            Not Before: Sep 25 09:38:59 2026 GMT
            Not After : Sep 24 09:43:59 2027 GMT
        Subject: CN=93985B18DCADA1E085388424FC5741C74C8F1BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:1e:4f:e7:61:e0:f9:e0:5a:f4:3e:a1:65:
                    cd:6d:01:88:e3:41:7b:21:ee:f1:48:b7:74:ec:80:
                    6c:17:aa:07:b4:52:da:b6:83:03:c5:43:d5:11:31:
                    36:4a:33:e4:55:82:0e:b3:5e:73:4a:79:36:8c:62:
                    34:02:2a:de:6a:26:09:fd:80:d9:a3:b7:79:c5:50:
                    bb:dd:90:9c:3d:de:44:24:9c:6e:69:82:58:1c:09:
                    1b:3a:20:31:56:19:4d:85:b7:9a:8f:bd:4b:bf:1a:
                    2f:bf:f9:79:62:ce:94:b6:c2:81:5b:57:04:f7:9e:
                    3e:aa:9b:8b:1b:b0:90:6e:79:22:9a:13:02:97:7d:
                    ed:b3:a2:dd:3a:8a:58:ad:b8:ae:87:ba:df:8f:10:
                    93:07:a1:3e:31:6d:6c:18:c5:73:7c:8e:e9:13:e4:
                    4d:f9:bb:5d:4d:6a:aa:ad:15:58:e4:14:d7:0e:b5:
                    b3:91:85:16:75:39:b7:94:d3:95:96:44:c9:25:e3:
                    9c:bb:1b:68:d8:fb:56:f5:54:2e:6a:54:0f:6c:1d:
                    12:cb:51:8f:e6:68:67:5a:19:16:da:86:ed:91:3c:
                    3f:e6:d9:31:ea:91:4c:2d:98:04:35:e5:1e:41:33:
                    6c:fd:e2:a0:43:56:29:33:6b:d1:92:c1:21:16:32:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:5B:18:DC:AD:A1:E0:85:38:84:24:FC:57:41:C7:4C:8F:1B:F9
            X509v3 Authority Key Identifier:
                keyid:44:2B:BD:3A:95:F6:E7:24:C0:B2:F9:51:FB:3D:A3:D7:B2:7E:4C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/442BBD3A95F6E724C0B2F951FB3DA3D7B27E4C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/3137392e3132372e37352e302f32342d3234203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:b6:06:4b:a8:23:aa:af:7f:ce:56:42:23:ce:3a:51:2b:
         7d:f3:e5:b8:de:80:d9:d8:e7:7d:69:77:a7:e2:dd:0d:c0:cb:
         2b:61:e6:64:23:8a:71:83:7d:32:aa:06:2e:e4:40:d8:71:aa:
         ec:e5:21:42:9a:2e:e4:ba:44:23:49:aa:07:18:2e:94:b1:87:
         f7:b0:d0:db:19:ba:0c:72:e9:4b:00:af:c4:53:fd:e3:f2:74:
         ba:ad:60:10:a3:96:bc:2b:95:ec:11:97:5a:37:cf:43:10:68:
         6f:58:cd:97:e8:f4:e0:e4:c4:6f:2c:da:21:bf:3a:c3:e0:91:
         e7:ca:45:60:cc:56:68:d2:38:78:b6:21:53:9b:18:1c:5e:dc:
         88:22:e0:20:28:b2:39:4f:9b:68:a8:14:6d:ce:16:0c:fe:fc:
         41:ff:29:1e:c4:1c:6f:4c:02:31:5c:63:20:bc:9b:1e:d4:c2:
         35:0d:ed:a2:73:0e:51:2d:6b:ad:19:31:0b:7e:51:ff:b8:20:
         6c:ed:8d:81:f3:1b:d8:0b:c3:e6:69:c6:cd:fb:7b:00:1e:d9:
         c5:60:d8:42:dc:18:c3:fa:4f:2d:45:5c:29:0b:34:26:49:71:
         35:37:d9:1d:8e:03:87:91:53:8a:70:91:4a:c7:62:c0:b3:cf:
         a5:a3:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:33:45 2026 by rpki-client