Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa
File:                     3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          fL/QxZhouF050q6DxE8DIZutunrI9ZlO9qizN8xGNIY=
Subject key identifier:   C7:17:AE:90:5F:E9:9C:01:A7:59:48:3F:6D:45:A2:70:FB:0B:C9:90
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       4883126BFDBC8F65541A8CFBC0F6286D9BB528AA
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa
Signing time:             Wed 01 Apr 2026 12:59:55 +0000
ROA not before:           Wed 01 Apr 2026 12:54:55 +0000
ROA not after:            Wed 31 Mar 2027 12:59:55 +0000
asID:                     52540
IP address blocks:        177.129.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:83:12:6b:fd:bc:8f:65:54:1a:8c:fb:c0:f6:28:6d:9b:b5:28:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr  1 12:54:55 2026 GMT
            Not After : Mar 31 12:59:55 2027 GMT
        Subject: CN=C717AE905FE99C01A759483F6D45A270FB0BC990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:e5:79:f9:6d:f4:a3:dc:3f:c9:9a:d7:7b:
                    7d:59:73:ac:3e:0e:5d:14:31:19:c6:c1:64:f4:e8:
                    65:cc:91:b9:f3:aa:0b:fa:f6:03:90:85:2e:aa:ab:
                    a6:bc:ca:12:23:cc:a0:3e:26:7f:ad:ad:6e:2a:da:
                    40:e2:d9:59:96:07:99:c3:55:f2:fd:04:4f:c6:a5:
                    cd:8b:a7:c3:d7:dc:45:02:ad:3b:92:36:b9:0c:32:
                    c8:32:a9:26:5d:05:23:0d:af:72:38:bc:5a:8e:1d:
                    98:f0:ae:a4:83:dd:b4:4d:32:9b:fd:04:5f:7f:50:
                    72:f7:38:62:f8:47:25:fe:9a:99:47:24:19:90:1d:
                    9a:e6:9b:5a:1b:56:58:24:d0:19:d8:1a:7f:43:37:
                    db:a5:30:2d:39:02:4b:d0:3a:f9:fa:9d:6e:a5:26:
                    55:86:cb:26:96:d3:27:23:9c:36:a0:25:2c:7a:7f:
                    51:80:ad:67:a8:25:01:bc:fc:9c:1f:e0:e5:74:21:
                    65:61:9a:46:e0:8f:21:4f:9a:af:4f:f0:33:ac:63:
                    76:85:6b:75:ec:97:b8:f5:17:a2:6e:05:f0:22:c6:
                    97:79:62:a0:c3:79:d8:c1:9d:f0:47:6b:3d:48:00:
                    b1:93:c3:6b:09:1b:f6:46:5d:74:11:2d:ac:10:33:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:17:AE:90:5F:E9:9C:01:A7:59:48:3F:6D:45:A2:70:FB:0B:C9:90
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132372e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:d4:25:f2:9b:ae:bb:4e:7f:ee:37:99:d4:79:78:f5:2b:
         f9:0b:a7:0e:bf:0e:cd:d2:43:b6:2f:53:16:19:de:ee:c0:cb:
         fd:96:ed:8b:7a:6a:e8:11:4b:03:a5:63:2e:27:1a:e9:90:bd:
         3c:7c:3c:68:3d:a6:4f:65:93:35:00:9f:d4:08:aa:a9:2b:f1:
         c6:b2:a4:3f:c8:e9:0d:f6:23:0d:de:42:fc:04:de:e3:72:c3:
         6c:87:2c:a0:71:35:56:a9:df:c4:c3:53:b8:31:7d:b6:af:3d:
         ed:5b:6d:58:36:35:b8:a2:e2:f7:aa:3c:6d:c7:90:0c:12:8d:
         1d:97:bd:35:80:0c:e8:70:76:d1:35:c4:be:00:54:ce:c6:56:
         ab:70:f5:79:0c:38:fd:e7:c5:85:2b:01:f9:42:f9:75:37:03:
         31:47:df:a7:d4:82:2d:de:0c:ac:fc:e0:e9:b0:a1:20:61:5c:
         55:17:c4:04:3f:9c:1d:f7:0a:1e:3d:ad:b1:82:ae:74:ee:29:
         9e:5e:0f:d8:b4:01:66:b7:2c:e5:7b:1a:1b:de:70:e2:2d:90:
         77:a6:10:a1:30:ad:17:3f:e6:84:a7:6e:77:26:93:71:6b:af:
         c6:1b:3d:56:95:d3:b0:ec:6b:33:cd:5f:1c:79:57:04:7b:fd:
         c3:fd:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:24:43 2026 by rpki-client