Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          1BNl6kYRWMkEBzsLk3xIiXdgZKA7xDbacwtj65qShT8=
Subject key identifier:   C9:B8:93:04:01:10:23:4A:3E:D6:1C:4A:D6:31:9B:69:45:23:0B:78
Certificate issuer:       /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
Certificate serial:       2DF812BA6AAF49F732D8D4C3758BD70106266DC8
Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 16 Apr 2026 22:17:40 +0000
ROA not before:           Thu 16 Apr 2026 22:12:40 +0000
ROA not after:            Thu 15 Apr 2027 22:17:40 +0000
asID:                     262653
IP address blocks:        177.105.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:12:ba:6a:af:49:f7:32:d8:d4:c3:75:8b:d7:01:06:26:6d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E
        Validity
            Not Before: Apr 16 22:12:40 2026 GMT
            Not After : Apr 15 22:17:40 2027 GMT
        Subject: CN=C9B893040110234A3ED61C4AD6319B6945230B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:4a:a3:15:a3:45:5b:39:69:8f:15:93:5e:
                    9b:13:91:ed:5a:3e:81:70:4c:8c:1a:48:ea:16:f4:
                    eb:6a:ef:00:1a:d3:e6:cd:eb:1f:b4:61:5d:87:a3:
                    3e:2d:c1:e5:2d:61:01:bb:1d:67:19:8b:97:2a:cd:
                    da:10:25:ce:ab:a6:d8:fc:40:10:da:13:f7:6a:a3:
                    8f:5a:97:b5:8f:af:bd:56:83:59:89:e3:43:30:48:
                    e1:38:8f:39:95:2f:00:03:97:53:11:b5:31:03:97:
                    fc:c1:94:64:0c:74:1d:40:05:35:14:97:63:ab:43:
                    68:d3:b0:11:57:66:76:b7:86:ae:56:ed:79:f5:59:
                    ea:7a:d2:2e:47:70:37:c0:d2:b7:0e:ca:f8:20:fd:
                    36:0f:f7:1a:b5:a4:32:ee:c2:68:75:98:ee:c7:7e:
                    95:4e:f6:7e:0b:b2:35:20:17:92:c9:c6:95:38:a1:
                    bd:68:55:14:3a:3d:84:63:64:a4:ba:59:dd:85:fd:
                    46:9c:a3:82:d3:47:28:d9:8f:e9:95:01:29:4d:c9:
                    e5:3c:3a:08:a2:de:89:86:17:7d:ec:8b:55:ce:f0:
                    b6:b0:c1:e7:7d:b4:d2:87:cd:04:2f:78:84:8e:8e:
                    05:45:1a:02:5f:49:ec:47:04:34:a7:c4:40:e2:c3:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B8:93:04:01:10:23:4A:3E:D6:1C:4A:D6:31:9B:69:45:23:0B:78
            X509v3 Authority Key Identifier:
                keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:31:4b:be:bb:a2:ef:bd:29:a2:30:e6:06:33:6f:8b:3a:0b:
         93:01:65:92:d1:9a:e8:dd:38:49:87:f0:2e:a9:79:e6:4f:81:
         42:bb:ff:7c:82:3d:0e:5e:dc:27:21:1a:bc:a0:c0:60:1c:0f:
         7a:7a:78:3d:21:36:de:36:d9:c7:4b:3b:68:98:18:c4:1f:98:
         cf:02:98:c5:f5:94:c5:a4:1c:c7:85:e1:7d:bb:80:f6:be:91:
         94:62:12:09:f1:e7:25:a8:77:ae:48:7d:00:87:94:de:a3:17:
         51:ab:8b:80:23:62:38:6c:ab:16:cc:18:e6:fa:f0:3b:cf:23:
         4b:da:2d:7f:5f:f9:61:c5:f6:78:53:62:69:97:5a:19:9a:20:
         6a:d4:fc:5f:ee:33:3a:39:3b:bb:f3:9c:40:cd:2d:a7:11:3c:
         13:17:45:0b:24:98:5e:e1:7d:58:fb:83:75:e2:75:7f:55:5d:
         e3:2b:0b:af:12:9f:18:09:7e:a8:11:2e:6f:0e:14:6d:a1:bf:
         f1:cd:a2:06:87:9e:34:08:32:fb:61:b2:4e:62:56:0e:4a:18:
         b7:af:2a:97:23:00:30:46:4a:36:06:f8:71:83:3e:bc:29:e5:
         17:80:ff:68:41:df:3a:64:b9:51:65:2f:c6:62:be:bb:65:b3:
         61:7b:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:13:06 2026 by rpki-client