Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
File:                     3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa (raw, json)
Hash identifier:          OYEu08kC/RgAOR6Mszz63nR5U6ZjN/q1ElSmXjHNhS8=
Subject key identifier:   92:D6:AC:BE:CA:E6:26:99:8C:D8:26:3B:4E:73:38:17:E6:89:2A:41
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       40A4A6EFCE2B714F3D118D01A4A05018916145AA
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:37 +0000
ROA not before:           Thu 16 Apr 2026 22:12:37 +0000
ROA not after:            Thu 15 Apr 2027 22:17:37 +0000
asID:                     262653
IP address blocks:        177.105.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:a6:ef:ce:2b:71:4f:3d:11:8d:01:a4:a0:50:18:91:61:45:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:37 2026 GMT
            Not After : Apr 15 22:17:37 2027 GMT
        Subject: CN=92D6ACBECAE626998CD8263B4E733817E6892A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:99:44:e4:e6:07:3d:70:13:0c:12:33:d8:
                    4c:da:de:f9:0d:d3:b1:0e:84:60:a5:eb:bd:a8:a9:
                    b3:d7:58:85:2a:1c:e9:bc:71:d7:85:5a:8e:6d:85:
                    39:fd:7a:2d:b8:04:b4:87:e2:55:40:7d:64:4b:74:
                    07:a6:7b:1a:c5:86:f3:34:23:9b:49:01:2d:fb:de:
                    bb:bc:4f:57:2c:14:9a:95:ac:6e:da:b9:23:92:17:
                    d2:40:41:99:47:c4:b2:31:0e:62:63:68:0d:ce:3e:
                    28:15:4a:ca:63:a2:62:ea:13:f9:5b:2d:64:d4:cc:
                    b2:f7:10:2e:73:1f:9f:3f:b6:93:e2:f3:d2:07:ae:
                    7b:03:5e:8e:3c:99:21:e8:96:9a:b0:6c:de:a1:d5:
                    11:66:65:7f:0f:e7:63:69:3b:34:89:f6:3e:02:53:
                    72:1a:a6:a9:47:9c:9a:79:16:04:61:80:26:b1:8d:
                    f3:74:6f:fe:7c:86:b9:be:4c:8c:d5:f9:37:81:dd:
                    3b:84:93:f8:b8:66:50:67:38:40:e6:3f:85:d7:a4:
                    f1:f0:80:a0:a7:dd:88:9d:54:a4:4d:2a:f5:d4:44:
                    18:c2:f2:85:a0:3e:55:37:82:39:45:25:ba:e8:66:
                    40:c3:f7:6e:8f:33:ad:e7:a1:6c:bb:a8:51:72:ab:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:AC:BE:CA:E6:26:99:8C:D8:26:3B:4E:73:38:17:E6:89:2A:41
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:cc:e3:de:5e:5f:82:b6:29:e5:11:63:c8:bb:52:62:52:a7:
         6b:30:34:79:ef:dd:8d:de:89:d6:18:71:50:fa:c6:fa:d3:52:
         c7:63:c4:ab:0e:08:03:21:bc:0b:32:7c:40:e0:06:37:47:58:
         76:62:ca:28:19:da:3d:44:d0:34:03:2f:d2:d3:30:02:34:0b:
         1c:a5:56:7c:79:68:f7:77:7a:07:15:7a:64:f8:c1:6f:50:de:
         bd:b9:71:d4:97:a8:76:14:6a:61:56:72:60:ff:91:69:8b:9d:
         58:4f:f6:13:5e:18:4c:aa:1a:53:9a:98:60:5b:28:c4:82:e7:
         22:48:77:56:4e:c5:64:0f:ad:df:95:21:5d:4f:d9:54:b4:ce:
         0e:db:95:0f:a0:06:54:06:bf:95:97:9f:27:fe:26:06:bb:96:
         e2:2e:3e:d6:09:3f:01:df:13:70:48:31:b5:86:76:c9:69:e3:
         06:c5:28:48:38:37:e8:9a:ef:95:13:70:a6:86:a2:7d:13:6d:
         aa:e2:14:40:96:56:33:a2:0a:ff:d4:41:d1:6b:97:c5:a7:be:
         90:5b:67:da:6e:28:a1:91:8b:34:30:d7:4f:98:a6:90:e4:a4:
         23:34:88:3c:79:38:db:1b:1c:a7:e7:55:06:05:1f:f4:e5:85:
         f7:d5:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:13:09 2026 by rpki-client