Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3231322e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          W0mzbp8UFTs4DVdsSZ6aoIo5fqgnlcSdNAib9hr88kQ=
Subject key identifier:   F3:29:DD:98:15:CE:29:70:07:B7:FC:39:7C:5C:92:0F:70:02:B8:0B
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       6CDEFE14FCDD2C72C08B5640D561CD5750F5795F
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32322d3232203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:20 +0000
ROA not before:           Thu 16 Apr 2026 22:12:20 +0000
ROA not after:            Thu 15 Apr 2027 22:17:20 +0000
asID:                     262653
IP address blocks:        177.105.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:fe:14:fc:dd:2c:72:c0:8b:56:40:d5:61:cd:57:50:f5:79:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:20 2026 GMT
            Not After : Apr 15 22:17:20 2027 GMT
        Subject: CN=F329DD9815CE297007B7FC397C5C920F7002B80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:fa:77:8f:3a:72:18:6b:d5:75:7c:79:86:
                    c6:e8:de:5d:52:5d:6a:85:40:51:90:20:fd:74:f9:
                    ad:f4:d4:33:39:04:84:e5:20:63:d5:12:14:0e:3d:
                    c5:3f:73:76:b2:68:5f:a2:ea:c4:d4:cd:71:d3:88:
                    6e:a9:b0:f2:69:3c:e1:e3:bd:a2:e7:20:2b:bf:e7:
                    f3:5c:7a:99:d4:28:2b:63:02:6c:fd:33:bc:5b:4e:
                    7d:de:64:52:18:fb:d0:05:02:54:74:e3:e8:8d:38:
                    5e:a1:ef:f4:9f:60:62:9e:5c:ac:1a:f5:a5:b6:14:
                    3d:11:b2:14:0f:5d:e3:e6:05:84:8f:e0:36:99:26:
                    a8:45:fb:f4:2c:b3:66:20:e4:d7:84:4a:7e:56:35:
                    2a:a2:67:90:4f:76:68:f1:20:ad:e9:d9:06:dd:cc:
                    e5:62:b1:f9:68:b9:1a:17:31:01:c5:f5:3f:83:6d:
                    2f:30:36:ba:4d:42:a7:fa:a0:9f:54:a6:61:b7:a2:
                    2e:39:a6:3c:ae:44:88:fb:fc:7d:19:d7:53:22:fa:
                    43:c5:39:7b:74:ab:b2:3a:e0:09:92:ac:b6:47:f6:
                    1d:e1:a3:6d:3a:39:e1:fa:61:70:a2:a8:03:54:bb:
                    55:02:e4:f1:ba:28:94:5a:c1:8e:ae:ea:a9:46:51:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:DD:98:15:CE:29:70:07:B7:FC:39:7C:5C:92:0F:70:02:B8:0B
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:53:69:19:a0:7c:1e:62:0b:24:1f:7d:07:7f:b8:d6:ce:
         62:2d:f0:5a:4c:3c:b6:f3:bf:ff:6f:b5:42:dd:bf:52:88:89:
         08:fc:31:56:18:4f:83:e2:77:1a:fc:c2:d6:1a:57:ec:09:11:
         d0:c6:ae:46:70:7a:a4:c4:14:05:ed:69:47:a5:78:28:50:bf:
         7b:d2:61:90:e8:82:c4:8a:4b:df:36:b1:54:49:1d:5b:6f:64:
         9f:6d:b6:60:f1:68:f0:24:a5:d1:5c:04:04:5e:c6:03:bb:8e:
         bf:21:9b:01:a4:3f:ff:01:df:21:40:c8:9f:ad:b1:5d:2e:dc:
         7b:3f:6c:82:ac:f7:c1:f4:43:d7:b9:4f:82:4d:0b:4b:a1:ff:
         7f:00:aa:64:ec:27:9e:4b:2d:99:3d:63:4b:6e:60:28:5c:c9:
         a7:2e:fa:7d:08:3f:04:e3:6c:dc:cf:63:1a:5d:ed:d3:4d:bd:
         c7:00:d6:13:b5:b3:70:75:c3:4a:92:e1:2c:df:de:f4:19:cf:
         06:57:b2:6b:95:05:ee:89:7a:7b:95:a5:8d:a3:a7:88:ab:5a:
         ed:53:33:9f:1e:4e:69:aa:b2:44:cc:84:5e:9a:d6:11:44:ad:
         6c:27:42:60:87:b6:20:f6:81:ae:e5:99:0a:25:0d:ab:e0:7b:
         73:5c:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:13:08 2026 by rpki-client