Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (raw, json)
Hash identifier:          BgtHd82mla7YM5k/jYNwff+cYiUekMuPwNjBU952X78=
Subject key identifier:   A4:72:E2:8C:29:9D:32:CB:8D:83:DA:10:3C:1E:D9:4A:98:B9:C8:88
Certificate issuer:       /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial:       2262FE7AB2E0C8C568882C34297C74402A58A781
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
Signing time:             Tue 31 Mar 2026 18:53:24 +0000
ROA not before:           Tue 31 Mar 2026 18:48:24 +0000
ROA not after:            Tue 30 Mar 2027 18:53:24 +0000
asID:                     52932
IP address blocks:        177.185.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 18:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:fe:7a:b2:e0:c8:c5:68:88:2c:34:29:7c:74:40:2a:58:a7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
        Validity
            Not Before: Mar 31 18:48:24 2026 GMT
            Not After : Mar 30 18:53:24 2027 GMT
        Subject: CN=A472E28C299D32CB8D83DA103C1ED94A98B9C888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:ed:30:df:d9:49:dc:42:bb:d6:5c:94:62:
                    92:0c:4a:70:b7:81:20:a4:ec:87:70:15:8e:c4:4f:
                    4d:fb:6f:4e:75:66:a7:6b:42:49:fb:97:a9:5b:2a:
                    51:ea:26:bc:66:6a:ab:fa:79:f4:08:8f:83:80:90:
                    4e:84:bb:b6:ca:8d:2c:39:f1:83:0f:96:b1:0e:87:
                    08:f6:5e:01:ee:7a:a3:25:6f:4a:4f:14:43:ed:b7:
                    f0:80:c1:ed:6d:8e:7f:8d:5f:05:e2:8f:17:63:61:
                    fe:7a:da:2f:aa:59:fb:f3:1e:21:7c:65:9b:64:3e:
                    1f:68:23:7f:b2:56:2b:52:7b:4f:33:ca:80:eb:51:
                    18:a5:dc:f0:72:f2:fb:6b:6a:f1:79:e2:4c:d3:aa:
                    8e:00:03:b2:5d:11:fa:cb:f1:23:b9:dc:0f:f3:02:
                    e8:12:5f:72:3c:25:7e:6d:5e:9e:2e:b5:54:88:80:
                    2c:4b:56:0f:2b:ff:46:ac:1a:d8:0a:0c:3a:53:de:
                    3d:a0:59:81:ea:03:e7:ae:ed:03:e5:70:90:4f:00:
                    27:6a:97:93:89:8b:ee:fc:ec:fa:e1:54:01:31:e7:
                    59:0e:e4:be:21:28:b3:7b:0c:ca:a6:b3:cc:d8:4b:
                    15:bb:ef:cc:24:4b:d7:3a:e1:c2:e7:20:cb:7e:79:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:E2:8C:29:9D:32:CB:8D:83:DA:10:3C:1E:D9:4A:98:B9:C8:88
            X509v3 Authority Key Identifier:
                keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:19:d2:41:df:32:b3:8e:f8:ce:1a:30:1a:6b:ed:aa:dc:
         b1:09:73:17:d4:12:a1:a3:2a:e5:bc:09:b7:c0:3d:19:cc:b1:
         99:9a:7f:a3:c5:4b:1f:4c:85:59:f4:20:f1:e7:68:d4:8c:d5:
         8c:b1:09:bc:a0:84:fe:01:64:4a:19:1e:05:0d:14:ed:97:0a:
         95:7e:d5:80:25:3d:03:4e:ec:ad:de:ec:fe:af:57:ae:24:0d:
         f0:e3:34:f0:1c:83:97:b3:5f:bb:4b:65:05:36:c6:dc:bf:9c:
         3f:46:5e:4d:94:5a:d8:40:c0:ab:02:bc:de:07:97:79:11:cd:
         f2:1f:6f:06:c1:b4:02:76:9a:65:28:ba:fa:18:6e:ec:8c:03:
         13:88:56:76:32:ce:80:79:0b:9d:57:d6:c9:1f:66:90:fa:e4:
         ea:0c:5b:08:b2:7f:0f:4e:59:c1:8b:9e:50:9f:48:e5:f9:80:
         b1:7d:08:a0:0f:5b:b6:bc:40:e4:bc:94:a6:06:cb:6b:9e:37:
         0d:77:25:c5:b4:d1:84:53:aa:b4:f9:3e:3e:d5:2a:86:43:9c:
         07:44:d7:24:0c:3a:99:99:67:52:40:63:6c:0c:db:af:40:97:
         14:dc:2b:01:9d:59:82:2a:e3:c7:51:67:70:ef:ba:c5:11:f4:
         8e:a3:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:26:25 2026 by rpki-client