Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231342e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231342e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          fk4T38pyCQg0tpV63X1FU59PONV2BgzJ2zMwSbGcC7s=
Subject key identifier:   6D:EE:11:28:8C:25:7A:23:94:91:DD:6A:70:49:7B:E5:EE:EC:2E:B8
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       32EC6F21AFF999D3FA33B99889B693A882B78468
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231342e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:30 +0000
ROA not before:           Thu 16 Apr 2026 22:12:30 +0000
ROA not after:            Thu 15 Apr 2027 22:17:30 +0000
asID:                     262653
IP address blocks:        177.105.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ec:6f:21:af:f9:99:d3:fa:33:b9:98:89:b6:93:a8:82:b7:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:30 2026 GMT
            Not After : Apr 15 22:17:30 2027 GMT
        Subject: CN=6DEE11288C257A239491DD6A70497BE5EEEC2EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:82:00:03:21:5d:83:1f:1e:75:a3:d0:b4:
                    4c:24:53:bb:44:fb:50:22:04:7b:d6:12:55:7c:62:
                    d4:36:db:14:00:e9:2e:52:3d:f1:20:ce:72:e8:c7:
                    d4:83:40:18:71:ac:20:d2:f5:9f:9b:98:1d:4f:92:
                    a5:71:8b:93:2c:3e:ff:c5:eb:e3:e8:73:60:ac:86:
                    fc:66:69:82:4d:fd:0c:24:38:c7:e3:75:92:d8:11:
                    47:08:85:b2:99:83:bf:45:53:71:62:45:ed:0a:0f:
                    1b:df:f6:ad:ab:2e:f2:29:2b:4e:41:db:24:4a:00:
                    2f:7e:82:b0:3a:9d:3a:4e:33:69:69:43:78:3f:7a:
                    c1:54:ca:b9:6f:49:63:b3:d0:77:8c:95:8d:ec:e2:
                    cf:14:7f:23:00:18:f6:79:e8:d2:78:cc:b3:8a:e4:
                    4a:68:4f:09:9d:d1:01:cd:8e:f2:68:5e:f1:f2:dc:
                    65:d5:7b:2c:39:d0:ce:bf:5a:9f:0b:c4:5d:11:91:
                    cd:fe:dc:9e:00:3a:15:ff:06:ce:2d:ca:cd:00:41:
                    82:d6:75:cb:fe:ae:54:51:7c:43:67:77:e2:aa:97:
                    d9:cf:6c:71:7f:20:69:ae:a4:d1:3b:7f:d1:1d:4f:
                    19:6c:71:e0:58:9d:a6:6b:37:9b:46:cf:e3:87:f9:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:11:28:8C:25:7A:23:94:91:DD:6A:70:49:7B:E5:EE:EC:2E:B8
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231342e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:31:08:6d:e2:89:fd:fb:04:21:4b:b1:8c:7b:38:d6:ab:24:
         08:d4:d0:a8:de:39:a8:ab:d8:30:9a:92:b5:69:25:9b:fd:4f:
         9c:e4:34:cc:c1:4a:fc:9d:09:c4:b7:78:c5:c5:d2:94:71:25:
         f5:82:87:43:b4:e4:76:5a:16:f7:78:22:ac:c1:58:2b:f5:f2:
         e2:29:b7:52:da:52:04:b9:9c:8c:e0:74:05:fa:e0:a2:8e:79:
         f8:41:c8:28:28:63:ce:87:e7:00:19:0f:c9:93:1a:d6:2a:a3:
         30:26:cf:d9:2a:58:79:3b:e9:6c:b2:aa:00:2d:56:7c:f6:9f:
         ed:9b:c0:e9:2d:c4:93:40:c4:9a:f2:4c:ff:ba:29:15:ca:fa:
         ca:70:84:d8:02:cc:af:99:14:4a:23:70:dd:58:c4:c9:3b:e2:
         3b:49:8d:cd:d1:7c:f8:2e:30:7b:ad:11:fd:04:39:3f:b0:3b:
         89:0f:9c:80:81:59:4e:cf:a6:b7:01:7b:1d:23:9c:f5:85:9f:
         31:c7:45:ce:d6:7c:31:13:5e:e7:14:54:64:7c:c3:d3:65:96:
         85:01:08:96:cf:f4:46:2b:6a:da:c5:4a:dc:e1:84:4d:b9:e7:
         e3:74:5d:c6:73:e6:5b:ee:47:cb:7c:77:a4:95:e2:32:a5:d7:
         a0:dc:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:17 2026 by rpki-client