Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32312d3231203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32312d3231203d3e20323632363533.roa (raw, json)
Hash identifier:          8gXRZqVrq6eclZTTuSg5Ogr3PCn7F0dkzNxlKNPjGaQ=
Subject key identifier:   C8:7D:52:D4:38:8E:33:1B:E6:12:B7:FF:ED:AC:0E:30:F0:52:DD:A9
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       147430FAA5911ABDE2D1D716B5C6F788F8A5D1EF
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32312d3231203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:03 +0000
ROA not before:           Thu 16 Apr 2026 22:12:03 +0000
ROA not after:            Thu 15 Apr 2027 22:17:03 +0000
asID:                     262653
IP address blocks:        177.105.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:74:30:fa:a5:91:1a:bd:e2:d1:d7:16:b5:c6:f7:88:f8:a5:d1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:03 2026 GMT
            Not After : Apr 15 22:17:03 2027 GMT
        Subject: CN=C87D52D4388E331BE612B7FFEDAC0E30F052DDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:0e:0c:19:ca:58:b0:bd:b7:ab:9d:45:4b:
                    f1:d1:8c:79:94:0a:9e:b5:d0:0c:d2:26:c5:41:92:
                    8c:7e:8a:ae:3e:6e:54:5d:7d:a9:ca:e5:0f:8e:ad:
                    ad:a3:1d:7b:e4:fc:9f:1e:ad:38:3f:a5:81:f2:87:
                    53:99:c2:f6:43:a5:b1:06:13:62:bf:01:4d:1b:d1:
                    24:c9:90:04:24:10:3a:75:23:4d:9a:37:2c:d0:77:
                    76:0b:77:02:ba:62:6c:7e:a5:1d:c6:cb:b6:13:9e:
                    28:2d:58:a0:1e:ef:cc:be:56:9b:7a:f9:6d:5e:85:
                    01:7a:bc:a7:b7:7c:52:47:17:76:a6:a2:21:64:cd:
                    8d:25:64:91:39:a0:55:e7:24:9b:96:f8:a7:95:8c:
                    57:0e:42:75:41:1e:94:f7:ba:b3:5f:7a:ca:fe:57:
                    47:4f:2f:8e:70:54:8b:2f:16:ea:f4:e6:e6:19:9d:
                    89:ce:76:ca:b6:9a:91:ae:6d:d9:33:08:35:7e:42:
                    a9:2b:4b:31:db:97:9a:f7:0b:19:60:7e:6e:e6:c3:
                    f5:06:0b:af:88:97:c4:86:37:4e:31:4a:e2:71:10:
                    38:84:b4:43:df:3d:81:4d:be:31:54:2c:4a:5a:bf:
                    d1:36:e1:bb:d2:e7:0d:d9:fe:01:0e:1a:1e:79:b8:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:52:D4:38:8E:33:1B:E6:12:B7:FF:ED:AC:0E:30:F0:52:DD:A9
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32312d3231203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:0a:82:4c:06:f9:eb:98:81:d2:1d:1b:8d:08:98:ab:c9:
         75:93:23:6d:fc:a3:42:b6:b0:3b:29:83:eb:04:4e:28:6b:fd:
         75:19:d1:47:85:42:41:98:3a:57:f9:ea:45:66:00:04:40:ae:
         d4:e2:b0:87:69:b7:d3:95:de:9e:f6:8a:44:bd:ca:a5:81:37:
         94:13:d5:02:b6:47:03:ba:15:a7:7b:12:33:cd:fb:02:40:be:
         c6:41:e5:ff:c8:e1:77:ae:c8:b5:5f:ad:a1:b8:c1:b3:b6:06:
         d9:f3:58:e9:6c:1b:1d:61:b9:2e:f5:91:2d:1b:be:70:e9:b4:
         a8:cb:cb:5b:8b:c5:01:c8:02:75:74:1f:7b:7d:9c:c1:72:90:
         09:b6:40:8f:2d:79:19:43:76:12:17:4c:9f:df:e4:3e:ed:46:
         a1:04:2d:13:45:d7:ec:19:5f:ab:1a:da:7d:f2:16:72:8c:ab:
         f7:3c:e6:7d:14:8e:c6:a8:e0:70:88:79:4b:c9:4f:3d:f7:1e:
         61:d9:23:f9:3c:ab:d7:7e:74:fd:e8:32:23:ba:b4:cf:b4:5c:
         ea:1e:03:65:3c:0b:00:2e:48:8b:90:0f:3e:ce:c5:8f:63:2d:
         3e:aa:ca:e9:0e:c3:2d:e0:35:83:ad:85:e0:41:31:3a:8e:04:
         95:88:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:11:06 2026 by rpki-client