Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
File:                     3137372e38372e32372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          1KgnVxpWe37wGHxsdsUZayMQjjbnoA8DSLpOT5GXNf4=
Subject key identifier:   2F:CF:F7:16:5C:1B:27:30:6E:1D:BC:19:8F:33:17:18:4F:52:BB:4C
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       7CC1A95D12F23EFBBA0716D983BFEE8A1C19D5A8
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:00 +0000
ROA not before:           Wed 01 Apr 2026 19:55:00 +0000
ROA not after:            Wed 31 Mar 2027 20:00:00 +0000
asID:                     52468
IP address blocks:        177.87.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c1:a9:5d:12:f2:3e:fb:ba:07:16:d9:83:bf:ee:8a:1c:19:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:00 2026 GMT
            Not After : Mar 31 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:c1:b3:a1:d6:2e:9a:bd:bd:d4:38:62:bb:
                    93:d5:f8:ad:bd:b3:50:aa:69:f5:fd:2c:1b:fb:44:
                    3e:fd:a3:02:8a:46:aa:35:73:95:58:98:32:a8:47:
                    7e:d9:26:65:76:31:d9:c3:93:ae:93:19:ff:08:5d:
                    47:a2:e6:c7:87:e1:b2:56:44:82:bd:44:cb:31:67:
                    f8:8f:6c:09:6d:eb:dc:69:d8:31:8a:c7:50:c7:9c:
                    11:60:c0:ca:52:b5:cb:ca:2f:5b:e3:60:49:a6:72:
                    d5:56:40:ef:62:9f:22:26:06:d3:56:cf:c7:36:97:
                    86:b5:ea:c2:32:aa:d1:98:e1:8e:68:34:c4:79:eb:
                    04:c1:c3:9e:9a:a2:46:10:40:17:27:78:0b:fb:10:
                    0e:22:45:84:ab:86:27:b2:7c:6f:9f:1e:ad:d2:f7:
                    b9:44:f4:29:03:15:0b:57:7f:d4:ef:3c:3b:11:b7:
                    f6:d8:da:c0:fe:bb:e3:da:ee:53:f0:20:90:ea:72:
                    26:6f:ca:74:c0:71:3c:e6:8c:19:7d:bf:ab:d7:f5:
                    1c:2c:49:aa:89:f4:77:fc:9b:e0:5c:8c:13:d5:d3:
                    23:98:c9:5b:9a:f8:16:0c:ad:5e:dc:d6:f1:25:50:
                    fc:86:53:7e:49:22:c9:49:dd:2b:8d:24:4e:fd:93:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CF:F7:16:5C:1B:27:30:6E:1D:BC:19:8F:33:17:18:4F:52:BB:4C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:b8:02:9e:dd:53:04:5c:79:e4:4a:99:96:80:25:9d:d4:
         ec:59:27:dc:6c:1c:5d:cc:27:7d:1a:5b:90:cd:af:fb:c7:66:
         fa:2a:f7:6d:6f:48:c3:05:67:e7:c8:7f:14:8c:39:a9:8b:83:
         e2:84:a1:71:65:a2:41:a6:b2:df:68:67:9e:8d:24:ef:29:4c:
         5f:c1:57:15:ee:7e:59:44:69:82:d4:34:a4:b1:cc:d4:6b:a2:
         35:4c:07:ce:cf:cc:27:ef:a5:47:89:df:88:6c:3e:55:8f:cb:
         14:07:a4:73:d0:d9:d5:8e:d0:88:55:1f:35:c8:80:ac:96:9b:
         4a:4b:f6:9b:19:8d:1d:83:16:41:5c:b6:8a:dc:c2:f9:16:fc:
         cc:40:6e:4b:89:fa:f2:2d:19:29:dd:e8:d9:8f:5b:60:d9:d0:
         80:b8:03:6c:51:7a:0d:17:de:c9:01:0a:78:38:99:b7:64:ec:
         70:a6:3e:56:2f:c0:c4:e6:a5:20:37:2e:f8:4c:60:68:50:6b:
         5f:b9:46:ae:66:7d:0b:61:9d:d8:43:90:2d:2b:71:da:c1:c3:
         61:af:3b:e8:a6:80:03:bf:35:74:c8:2f:b8:37:5e:31:6b:85:
         28:98:01:e9:96:4b:d1:68:32:d8:ec:d2:09:2a:d1:71:0b:a5:
         34:30:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:42:47 2026 by rpki-client