Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
File:                     3137372e3232332e302e302f32302d3234203d3e203532363939.roa (raw, json)
Hash identifier:          tvAqTjG+MU+1jRLIAbV0LBKwuA1zj5jNQSHNlKr8UMs=
Subject key identifier:   FD:41:A3:D5:25:93:66:6B:9A:EE:01:BB:39:B2:CB:E7:43:66:9C:EC
Certificate issuer:       /CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
Certificate serial:       2678F987480ED739D897EB3B643C2549A62D0C3B
Authority key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
Signing time:             Tue 31 Mar 2026 12:23:02 +0000
ROA not before:           Tue 31 Mar 2026 12:18:02 +0000
ROA not after:            Tue 30 Mar 2027 12:23:02 +0000
asID:                     52699
IP address blocks:        177.223.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl
                          rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:78:f9:87:48:0e:d7:39:d8:97:eb:3b:64:3c:25:49:a6:2d:0c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
        Validity
            Not Before: Mar 31 12:18:02 2026 GMT
            Not After : Mar 30 12:23:02 2027 GMT
        Subject: CN=FD41A3D52593666B9AEE01BB39B2CBE743669CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:91:bf:24:47:50:a5:8d:ad:5c:47:f2:0e:
                    cc:37:23:e6:4a:ae:49:85:09:8c:d6:a5:a4:13:67:
                    40:82:05:d2:e1:65:b0:81:04:0a:24:2b:da:af:e3:
                    ed:85:b5:93:e2:94:8c:bb:2d:77:36:64:89:7c:8a:
                    32:a7:e4:04:38:eb:3b:36:60:d5:cd:d7:8f:df:76:
                    7d:b5:f3:f2:2d:88:2f:88:ae:0f:48:6e:15:59:b0:
                    1f:53:0d:dd:85:dc:43:4a:6c:ea:33:59:c2:77:b0:
                    3f:29:c9:a7:8c:e9:7e:af:fe:ef:74:ed:d6:73:f3:
                    7f:3e:92:43:84:8a:e9:e6:c0:55:9b:da:ff:72:ec:
                    dc:53:00:04:ec:27:99:df:5f:85:e6:e5:c6:89:55:
                    e8:70:34:02:9a:52:5a:02:d6:32:8f:4f:65:ff:b4:
                    c1:4c:ee:57:5b:a6:ee:90:6f:81:0a:a7:48:3a:6b:
                    85:7e:dc:ee:0c:2b:f3:2a:94:ac:41:15:3d:a7:84:
                    e3:66:39:95:ce:fa:1d:9f:01:07:7a:da:58:42:57:
                    8c:ed:c2:8a:a4:a1:e6:75:ae:e2:5d:09:fc:f6:f1:
                    bb:fa:21:b3:b3:bd:6e:cc:10:56:3c:7c:6d:de:ca:
                    2c:de:96:be:bb:d1:78:b1:0b:c1:8f:a9:03:49:39:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:A3:D5:25:93:66:6B:9A:EE:01:BB:39:B2:CB:E7:43:66:9C:EC
            X509v3 Authority Key Identifier:
                keyid:ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:18:5e:73:dd:a5:e0:1e:50:32:ce:f0:e0:21:85:9d:3f:09:
         02:23:62:59:ed:c0:59:0a:4e:57:fc:66:20:4d:00:50:13:e3:
         1f:a3:c9:3f:87:50:9c:15:0b:8a:df:d3:95:39:56:1d:b4:58:
         a9:6b:99:a4:59:0f:73:1d:63:c9:dc:e6:d7:f5:bf:bf:38:73:
         df:15:d0:5f:ae:a6:5d:3e:c2:b7:8a:64:f9:a5:24:83:fc:dc:
         54:b8:84:b3:36:a7:2e:05:9e:e0:5c:30:95:99:82:4c:b3:a2:
         8b:cb:07:12:94:0a:f0:cf:0f:d4:c6:27:31:ac:e5:83:10:54:
         80:d1:50:0b:5f:65:32:91:f1:ec:72:7e:6c:31:12:4b:0e:35:
         dd:92:77:d6:d4:a0:7c:51:00:96:91:47:65:b8:3b:d1:35:30:
         9e:3b:95:a1:68:24:ce:84:96:12:b3:d8:45:01:91:5c:b9:44:
         c2:7e:c6:19:f6:10:29:64:34:2b:fb:15:8a:4c:fc:4d:88:b7:
         95:f1:2b:3c:81:f0:b6:9c:5e:71:a9:a3:0a:03:40:25:dc:51:
         09:28:b7:6c:85:8f:c3:4d:ee:e5:73:33:7c:ba:f2:98:c6:bb:
         1f:b0:5a:7f:03:d3:3c:a6:39:32:be:60:24:e1:b5:7e:78:07:
         5f:08:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:38:31 2026 by rpki-client