Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e332e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e332e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          eT1MaF2JX8sE1eqwcbrf2lKldjdcrH7QOTCwctQsWp8=
Subject key identifier:   9A:77:B9:D8:7A:16:3A:8E:DE:2C:5B:D2:7E:DB:85:BA:45:C7:82:EE
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       03F7D3F2AFC675AE5FC967D89E61A607F1755ACD
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e332e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:04 +0000
ROA not before:           Fri 28 Aug 2026 17:01:04 +0000
ROA not after:            Fri 27 Aug 2027 17:06:04 +0000
asID:                     262642
IP address blocks:        177.87.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 12:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:d3:f2:af:c6:75:ae:5f:c9:67:d8:9e:61:a6:07:f1:75:5a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:04 2026 GMT
            Not After : Aug 27 17:06:04 2027 GMT
        Subject: CN=9A77B9D87A163A8EDE2C5BD27EDB85BA45C782EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:c4:8a:ed:c3:d4:1d:fd:3f:77:de:0b:28:
                    ef:d8:3e:2e:0e:2f:f3:b0:9a:3f:e2:b1:00:14:3c:
                    49:82:04:ed:dc:5c:ce:48:fa:63:4a:47:42:d1:0e:
                    e2:71:f1:ab:ac:bb:d0:61:b3:61:28:cc:bb:8c:65:
                    80:eb:21:98:84:1a:5e:45:71:81:4e:cb:92:cf:a2:
                    ff:62:43:95:8d:d6:94:5b:0b:58:3d:00:8d:c6:19:
                    6f:90:fe:2c:15:7a:88:74:6f:f0:db:7b:64:ad:80:
                    fb:6a:45:9e:9b:7e:33:20:38:79:db:23:ac:dc:c0:
                    34:0d:a7:76:1f:29:cf:a2:14:94:60:6b:9e:7a:c9:
                    4a:18:47:51:b4:5c:d6:d3:49:7f:72:b6:2a:d3:6b:
                    77:53:65:07:d9:49:e0:6e:58:4a:fa:d7:9d:c9:87:
                    11:20:12:14:34:de:0b:9b:a9:27:ab:3f:52:e8:14:
                    ce:89:bf:dc:97:73:3d:86:58:48:d8:5f:47:40:ce:
                    23:dd:f6:18:5c:b0:4b:a6:2d:71:19:c9:57:09:d7:
                    db:8e:28:69:90:8f:de:ff:a1:57:64:b3:92:d8:fb:
                    1f:10:0a:dd:74:c7:66:f5:40:65:07:da:08:af:ca:
                    31:63:24:bd:bd:8a:5a:8a:98:b6:88:59:96:f7:db:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:B9:D8:7A:16:3A:8E:DE:2C:5B:D2:7E:DB:85:BA:45:C7:82:EE
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e332e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:23:15:8c:c8:bf:d4:98:49:59:fa:2b:e6:ef:a1:6a:3f:ec:
         22:c6:22:10:a6:1f:b2:5d:0f:20:cb:3d:c6:91:af:5a:09:32:
         ef:43:e9:ec:4d:2a:06:89:45:51:b4:7c:83:b2:1e:79:9e:ef:
         15:ee:21:e1:bf:61:f1:f7:aa:cf:f2:3d:f3:f7:1a:9e:16:c5:
         11:0c:c6:9c:7f:52:25:ef:fc:cf:72:1e:95:48:3d:28:4b:1f:
         d6:db:4e:5c:1f:4e:12:a5:39:41:98:4c:b0:c8:25:cd:ae:53:
         b1:f4:6c:38:b3:18:4b:03:d8:44:74:42:fd:76:f5:4e:dc:42:
         57:67:a5:42:8e:a9:95:f3:81:7b:3e:8e:5a:18:88:90:2a:65:
         12:81:06:ea:a1:f6:68:3d:56:fa:38:cb:c2:f2:ce:7b:b9:03:
         a5:cd:64:e6:7a:6f:5f:dd:8d:0d:c4:9b:ed:49:7d:81:40:ad:
         3d:cf:65:f7:73:32:01:3d:d1:c7:21:1a:70:8f:14:4b:d8:d7:
         74:36:50:09:44:41:b6:87:97:3d:6a:ec:a7:6a:cc:b3:b6:e6:
         26:dc:b2:9d:13:7a:9d:4d:89:85:6e:39:44:48:24:2b:a9:d8:
         24:41:d8:4e:5d:a3:66:76:02:5e:29:76:ed:1d:d3:0e:90:12:
         7d:ff:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:12:31 2026 by rpki-client