Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231382e302f32332d3233203d3e20323733343433.roa
File:                     3137372e32312e3231382e302f32332d3233203d3e20323733343433.roa (raw, json)
Hash identifier:          FYNASGXxthG9pLuoVDiJxDrv1z1QJKO2R4aTYAaA+sw=
Subject key identifier:   DD:3F:6F:17:9A:E0:76:1C:F4:36:B2:70:3D:11:5E:5F:26:99:3B:8A
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       7B23CD2C3C49288B469BE3C2374C4D700F4268FA
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231382e302f32332d3233203d3e20323733343433.roa
Signing time:             Mon 26 Oct 2026 17:28:00 +0000
ROA not before:           Mon 26 Oct 2026 17:23:00 +0000
ROA not after:            Mon 25 Oct 2027 17:28:00 +0000
asID:                     273443
IP address blocks:        177.21.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 12:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:23:cd:2c:3c:49:28:8b:46:9b:e3:c2:37:4c:4d:70:0f:42:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 26 17:23:00 2026 GMT
            Not After : Oct 25 17:28:00 2027 GMT
        Subject: CN=DD3F6F179AE0761CF436B2703D115E5F26993B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:9c:43:0c:14:06:d5:0d:e1:58:4b:c2:c6:
                    a3:c8:7b:f7:d2:96:e6:02:fc:4f:f0:a2:c4:90:cb:
                    25:b8:73:45:c5:30:75:20:58:92:a4:2a:6d:6f:44:
                    92:63:28:df:ef:55:4e:1c:99:32:03:72:9b:40:b1:
                    53:eb:6e:80:c8:fe:8c:3a:9a:a7:77:5e:99:05:3c:
                    d2:96:98:87:d4:a0:bd:2b:5e:94:75:c1:b4:1f:27:
                    54:bc:8b:c6:59:18:e0:e0:44:b9:ad:46:cc:36:13:
                    75:ed:d4:aa:c7:36:28:d4:11:b0:cb:63:08:96:f1:
                    9a:30:49:fd:a3:b4:1f:7f:ff:2b:c6:57:24:47:79:
                    8f:24:cb:1e:71:55:3b:97:e2:af:e8:49:ce:f6:70:
                    52:01:6b:11:e8:72:73:02:2f:b9:0c:d4:16:9a:12:
                    1d:da:50:90:8c:b2:bf:ef:b6:b6:83:33:0c:2a:16:
                    19:c3:0f:69:5b:bf:c2:a7:5f:f3:b0:d4:26:5f:19:
                    94:38:6f:66:b0:31:92:37:03:c9:2b:f6:23:74:14:
                    f9:e1:13:d3:ab:60:80:1c:97:2d:b6:71:a5:e3:23:
                    ae:ad:8a:d1:7a:12:69:b4:4b:bc:d9:68:03:c2:90:
                    32:d4:76:17:78:b3:93:a8:9d:e5:af:a9:4b:13:d5:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:6F:17:9A:E0:76:1C:F4:36:B2:70:3D:11:5E:5F:26:99:3B:8A
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231382e302f32332d3233203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:6f:bc:1e:f5:43:b1:8f:fc:e0:d7:e6:af:ee:24:29:32:
         51:4d:6b:aa:32:8d:82:9a:fb:7d:9b:05:b1:f6:7c:1c:71:f9:
         8f:47:95:df:30:a7:77:99:e8:90:fe:e0:99:0f:d6:8a:34:3c:
         a6:53:96:bc:f0:9d:67:73:04:b5:89:7a:17:0d:2f:54:63:22:
         c7:17:b2:de:e0:f7:f3:a5:25:6b:29:10:ee:5c:8e:47:f8:f2:
         2d:2e:ce:2f:71:a3:b2:75:32:f4:3a:a9:3c:34:09:90:56:0b:
         16:db:90:43:c1:c1:36:dd:4e:77:36:4f:34:1d:fe:92:5c:09:
         a8:36:21:90:9e:14:77:de:ee:66:79:0c:1f:06:82:f4:42:db:
         fc:98:58:90:e4:a3:20:db:30:e2:5f:0a:bd:ea:2f:d1:1a:19:
         f2:e0:4a:0d:66:a8:2a:3e:41:1a:9b:e0:8e:1c:2b:84:dc:93:
         aa:c2:94:82:bc:cf:55:4c:8a:0d:ed:17:c7:16:d4:91:f6:f4:
         98:6e:14:11:8f:cb:8e:bc:79:00:73:fd:3b:ac:6b:e4:80:d0:
         3a:28:64:51:41:5a:c2:e3:cd:a0:53:f6:1b:95:4e:b5:80:47:
         35:6b:04:68:b1:fe:aa:02:9b:0b:5c:66:15:c0:30:0f:d2:40:
         90:84:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:10 2026 by rpki-client