Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa
File:                     3137372e33382e3233322e302f32312d3232203d3e203134383638.roa (raw, json)
Hash identifier:          k/6M9RKV25rC+XBQD98rnz9kh0exTYuZ1XhWuJdckBI=
Subject key identifier:   ED:79:2D:7B:5A:EE:E6:45:EB:EE:32:22:71:9C:6A:73:F6:B6:1C:B0
Certificate issuer:       /CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
Certificate serial:       6750F432FE3B771365A05EBBC98E56EDB06A08E6
Authority key identifier: 1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa
Signing time:             Mon 25 May 2026 17:36:24 +0000
ROA not before:           Mon 25 May 2026 17:31:24 +0000
ROA not after:            Mon 24 May 2027 17:36:24 +0000
asID:                     14868
IP address blocks:        177.38.232.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl
                          rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:50:f4:32:fe:3b:77:13:65:a0:5e:bb:c9:8e:56:ed:b0:6a:08:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
        Validity
            Not Before: May 25 17:31:24 2026 GMT
            Not After : May 24 17:36:24 2027 GMT
        Subject: CN=ED792D7B5AEEE645EBEE3222719C6A73F6B61CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:a5:ef:24:16:58:f9:84:4b:1c:ec:32:19:
                    11:4c:2d:a7:67:96:d9:1d:11:e5:1b:c1:51:a6:72:
                    d0:0d:61:22:75:49:b8:f3:15:b7:ca:70:46:34:92:
                    b6:5b:89:78:75:14:00:e5:88:b9:14:99:1d:47:16:
                    f9:d2:5b:3c:c0:fb:12:cf:07:03:3a:ab:19:09:bc:
                    49:a9:e1:b7:fe:82:a3:60:f7:9d:d8:c2:e0:a9:14:
                    fe:ac:2a:33:b2:54:a0:4d:7f:2b:a9:85:7d:7f:91:
                    06:02:bd:53:df:d6:9e:ff:17:bb:b9:e0:93:27:97:
                    c0:e2:de:fb:1f:57:37:4b:cb:68:83:a1:e6:09:51:
                    72:ea:6a:c3:d6:0a:c0:3e:ee:06:df:0e:5d:d9:16:
                    6d:6c:46:06:8c:81:9c:dc:ed:b6:08:25:ad:b6:63:
                    14:a7:29:16:66:35:3d:d5:ee:ce:54:c2:fd:9c:fd:
                    d8:4b:4e:c6:8f:87:6d:5a:3a:87:66:45:65:ce:9a:
                    e7:00:51:e5:97:16:52:71:33:b7:23:6c:fa:7a:98:
                    dd:e2:bb:4c:95:09:7b:9c:12:a8:7d:9b:84:8f:d8:
                    4d:6c:3a:02:c7:60:b1:9b:e6:53:25:d2:f6:b6:a6:
                    79:7d:17:a3:46:a3:ba:4e:8d:aa:9c:79:40:cc:16:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:2D:7B:5A:EE:E6:45:EB:EE:32:22:71:9C:6A:73:F6:B6:1C:B0
            X509v3 Authority Key Identifier:
                keyid:1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:75:e3:dc:b6:9a:fe:6f:d7:69:4e:f4:bf:d1:17:13:01:44:
         0a:d2:da:a9:cc:25:fe:33:a5:a1:8c:5b:98:a3:f8:3d:6a:b2:
         e4:d6:08:7b:c3:49:aa:78:2e:88:9f:48:46:23:03:a6:34:d4:
         84:e1:da:6a:be:db:70:40:14:74:49:d1:8d:2b:4c:81:65:0b:
         7e:1f:58:9e:e4:f4:7e:58:45:f0:0c:64:0b:ed:44:e4:95:6f:
         25:c6:19:c5:e3:ac:e4:4f:f0:e2:e9:5e:c3:e4:9f:f5:4b:6e:
         cc:67:d5:6d:66:f7:fe:b0:df:a7:1a:5c:cd:79:36:8d:e8:30:
         23:b5:a6:c5:aa:72:8f:ea:2f:76:53:b1:d2:93:6f:4e:5a:ec:
         b8:e3:89:8e:6c:65:7b:c9:4f:24:50:b3:d7:a9:39:7c:d0:6b:
         3e:5b:80:d1:c2:41:02:d6:04:59:cb:5d:e7:9f:ec:dd:ef:1f:
         2f:79:97:f0:2d:72:90:db:7c:58:89:b0:18:cb:af:c5:08:ae:
         41:8a:a5:d5:3f:49:ec:e1:41:c3:d8:3e:ef:6b:bc:e1:a6:07:
         b3:54:38:15:09:53:34:28:21:85:64:2a:c7:66:80:1d:30:11:
         e2:a6:75:0d:60:c8:70:92:9f:df:46:d4:ae:64:4f:6d:7a:7c:
         38:7b:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:30 2026 by rpki-client