Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          /bFQRonGFA2DJ7tDH60nVB+q8SuHsug7VMQCQ5H22Aw=
Subject key identifier:   DD:6A:9D:6B:C5:8F:0E:1C:A3:22:15:89:C3:0A:A5:0B:82:40:23:F2
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       2D8A0207E5399944508D788EDC12C3A96292F88A
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:07 +0000
ROA not before:           Thu 16 Apr 2026 22:12:07 +0000
ROA not after:            Thu 15 Apr 2027 22:17:07 +0000
asID:                     262653
IP address blocks:        177.105.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:02:07:e5:39:99:44:50:8d:78:8e:dc:12:c3:a9:62:92:f8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:07 2026 GMT
            Not After : Apr 15 22:17:07 2027 GMT
        Subject: CN=DD6A9D6BC58F0E1CA3221589C30AA50B824023F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:b6:a1:68:b2:a0:64:1d:78:0c:2e:aa:4d:
                    46:f3:a8:ee:a1:20:eb:c9:08:72:96:71:0a:29:ca:
                    3f:95:5a:a7:db:3f:03:d3:37:85:e3:38:0a:8d:c5:
                    35:0f:d1:c3:34:96:dd:30:1b:89:8f:bb:89:e2:f0:
                    63:fb:d7:73:d6:54:0a:44:6d:ea:94:4c:d3:ed:26:
                    91:6e:c6:cc:8b:53:79:68:70:87:03:06:f6:8e:82:
                    95:69:fc:88:ab:d8:d7:ad:5c:0b:c3:01:1d:96:d6:
                    55:c3:37:12:8e:6e:01:33:a2:bc:a5:e4:69:ed:35:
                    b7:d1:9e:c5:7d:8a:36:ab:9a:f0:7a:a9:5f:96:d5:
                    50:54:e4:9e:dd:2d:89:3c:cc:55:4e:f5:02:0d:a2:
                    7c:02:a0:90:2b:92:3f:07:e1:40:c0:98:e8:c9:4d:
                    a4:67:2a:1d:5d:59:ae:56:a2:69:3d:37:3a:31:6d:
                    6e:79:81:b8:ef:14:21:76:2e:5f:f6:04:5a:12:6d:
                    a0:08:23:d6:54:03:8f:58:34:47:ca:30:fb:18:71:
                    4c:68:49:8a:87:31:28:4f:af:95:1a:4c:1d:f6:34:
                    d5:78:42:61:90:b8:1b:ba:83:bb:ea:77:cc:f8:e9:
                    8f:37:20:d1:d1:dc:4f:19:82:ef:2e:d0:45:14:51:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:9D:6B:C5:8F:0E:1C:A3:22:15:89:C3:0A:A5:0B:82:40:23:F2
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:a7:c9:10:36:9e:76:e9:7f:66:de:aa:04:3a:10:32:27:
         95:58:4d:39:6a:7e:90:51:9e:ea:5b:dc:6f:72:8b:23:f2:0d:
         d6:8c:52:38:9d:85:b3:18:48:b1:f6:37:b1:6f:7f:2e:2d:e5:
         4a:ad:08:a4:01:97:83:a2:39:cb:74:1f:4c:10:16:35:df:37:
         fc:1d:84:4c:31:80:e2:5f:91:22:7a:25:d2:e1:f5:a7:6f:8b:
         8f:de:a1:55:a8:ca:6c:eb:78:8d:da:4a:44:03:77:06:40:b2:
         12:45:13:87:ca:ae:1b:e1:f7:69:79:dd:d3:11:a8:4d:bd:bb:
         07:0d:32:b5:95:b6:eb:66:da:fd:cc:61:bd:75:ec:53:95:07:
         48:c0:36:54:8b:9b:b3:33:5b:13:68:cd:fb:6d:29:21:75:eb:
         98:92:be:fe:e4:37:3f:6b:8a:fa:c0:9e:ac:ed:c9:3a:4f:d7:
         ae:11:90:75:e3:f2:2c:3b:9d:fe:00:2c:75:00:98:f9:e0:23:
         ed:12:07:88:e1:2e:77:c2:bc:19:53:74:5f:88:50:b1:56:7e:
         26:da:e4:c9:d7:9f:7f:46:d2:0e:b1:b8:c3:7f:6c:3e:04:11:
         a7:59:01:06:6e:eb:6d:da:a6:03:1a:b0:3e:c8:65:5b:bf:59:
         b7:44:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:36 2026 by rpki-client