Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3233203d3e203238353834.roa
File:                     3137372e3132392e3233362e302f32322d3233203d3e203238353834.roa (raw, json)
Hash identifier:          lclLtPSNgL3Wnoh73vKxS+4M43JRVz72qEEcRkb7R0g=
Subject key identifier:   3E:7A:D2:83:A4:C7:46:92:F0:6C:E1:80:06:16:B1:B2:B8:90:24:F1
Certificate issuer:       /CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Certificate serial:       28B7FD293BA0194B0F7F395D3DEE63324F639A4F
Authority key identifier: 14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3233203d3e203238353834.roa
Signing time:             Tue 07 Apr 2026 17:03:57 +0000
ROA not before:           Tue 07 Apr 2026 16:58:57 +0000
ROA not after:            Tue 06 Apr 2027 17:03:57 +0000
asID:                     28584
IP address blocks:        177.129.236.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b7:fd:29:3b:a0:19:4b:0f:7f:39:5d:3d:ee:63:32:4f:63:9a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
        Validity
            Not Before: Apr  7 16:58:57 2026 GMT
            Not After : Apr  6 17:03:57 2027 GMT
        Subject: CN=3E7AD283A4C74692F06CE1800616B1B2B89024F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:3f:d7:30:6f:e0:66:c2:ba:24:87:ad:36:
                    4c:6e:db:d0:f2:92:21:95:72:83:31:8f:07:2d:a0:
                    b5:54:29:cf:09:1f:57:b3:7a:81:c4:34:70:89:b6:
                    12:8d:18:c3:82:89:08:35:98:a3:34:76:98:dc:5d:
                    58:6a:27:e8:d3:21:10:2e:64:be:1f:9a:88:be:90:
                    39:8b:05:3c:7a:ad:d9:0a:f6:79:9f:f7:f4:7c:94:
                    bf:3e:f8:4a:17:b3:bb:18:1a:33:f1:2f:ed:bb:bc:
                    81:4b:70:b6:78:78:4c:66:15:cc:f8:ac:9e:e2:d8:
                    c6:18:9e:35:a5:60:78:1e:ae:5f:ec:c4:2b:e7:72:
                    46:65:54:bc:97:db:50:1f:41:93:e8:b5:d5:da:5b:
                    8d:2d:7f:bf:7d:55:ce:41:af:2a:50:64:32:05:06:
                    05:cb:57:04:9c:5b:96:71:77:f5:42:0e:0f:76:14:
                    f8:91:1f:b6:b9:22:e8:f0:76:1e:98:74:67:19:85:
                    6e:e7:77:95:97:1c:8a:44:e5:50:77:45:55:cf:ad:
                    0a:2b:20:15:d0:35:3c:5d:a3:d9:a7:fc:50:2b:b6:
                    d9:0e:8c:79:1d:c5:35:03:ec:12:3c:ed:6d:06:40:
                    14:07:ad:54:dc:b8:f6:a9:11:01:df:9d:20:ef:0f:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:D2:83:A4:C7:46:92:F0:6C:E1:80:06:16:B1:B2:B8:90:24:F1
            X509v3 Authority Key Identifier:
                keyid:14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3233203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:9e:8b:23:37:a3:df:f3:62:d7:a2:72:60:41:1a:e4:76:
         05:a7:79:6c:d1:43:b4:67:b3:04:27:dd:4c:a4:17:be:6f:22:
         96:35:22:1d:df:c7:6f:91:6e:b3:63:0e:2a:b8:9c:e8:71:33:
         75:e5:ac:08:de:ac:51:39:44:1b:da:b2:f6:ac:a2:f3:3b:55:
         74:a7:d8:da:95:f2:19:24:45:4e:9b:0d:6b:7b:a3:11:b4:46:
         8c:10:c9:36:30:fa:ac:34:73:f9:3f:ad:01:e4:9e:19:01:a5:
         5d:b9:11:56:69:89:9a:77:72:d7:b7:0e:56:93:3f:f6:d7:5f:
         5c:76:30:3b:c9:c7:a5:cd:f2:52:5f:21:a9:ba:94:f0:c2:8d:
         35:77:08:3d:65:58:1a:51:b0:a4:d7:05:37:e9:ed:b1:31:e2:
         1e:f0:6a:63:5a:43:3f:34:d7:ab:d1:56:b4:b9:57:af:b4:e5:
         ee:20:3c:dd:f2:2b:75:cf:87:40:8a:e7:78:24:b5:88:dd:5a:
         05:1f:6c:37:ae:d8:f5:f6:27:e2:37:45:1e:f2:e3:fe:33:fc:
         b4:3a:00:4e:18:19:9f:66:f2:3d:c4:5d:33:16:7d:6b:4f:bd:
         16:9d:7d:06:7d:82:f0:13:5c:62:4b:3c:bf:d3:3c:1c:1b:32:
         e0:1e:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 01:37:53 2026 by rpki-client