Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
File:                     3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (raw, json)
Hash identifier:          pA0rH+702UOTH3SGOgoYdMGRoNAV5DlNt0Aaai9UD7s=
Subject key identifier:   F0:39:67:90:DB:5D:49:06:10:E9:79:85:D7:DF:AC:28:DC:E7:1B:E0
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       6D16E65D93E67C4448667F973D3A81BAF3DDE290
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
Signing time:             Tue 07 Apr 2026 15:27:31 +0000
ROA not before:           Tue 07 Apr 2026 15:22:31 +0000
ROA not after:            Tue 06 Apr 2027 15:27:31 +0000
asID:                     53046
IP address blocks:        177.93.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:e6:5d:93:e6:7c:44:48:66:7f:97:3d:3a:81:ba:f3:dd:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr  7 15:22:31 2026 GMT
            Not After : Apr  6 15:27:31 2027 GMT
        Subject: CN=F0396790DB5D490610E97985D7DFAC28DCE71BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:fc:21:72:5b:2c:33:de:3d:c5:97:c3:7d:
                    6c:ac:d1:93:5a:66:f5:98:36:b3:3e:85:c4:58:75:
                    88:e4:b3:33:25:8e:bb:b6:fd:b4:12:7a:99:cc:23:
                    8f:50:a8:b7:43:d6:6a:ab:ef:b5:61:c8:bd:54:36:
                    19:07:89:58:20:2f:05:86:8f:ac:b1:89:83:fd:15:
                    b6:b0:fb:a7:16:18:f9:c1:aa:20:2f:eb:8c:c9:b0:
                    c8:88:20:bc:13:b5:52:fc:8c:6c:ea:d6:06:6c:48:
                    78:c7:f2:1c:02:0c:db:d7:3f:82:a8:6d:85:6a:2e:
                    b8:ec:90:bd:64:ba:59:2f:c7:0b:cf:c0:50:b1:ee:
                    a1:61:da:3f:8a:24:0d:ed:0e:cd:e4:76:b4:68:bc:
                    f3:51:a7:07:b2:7f:2b:0c:26:9b:f6:b9:7c:69:ac:
                    6f:f9:39:42:b4:fa:61:06:0a:b9:54:46:4a:61:1f:
                    12:fb:9c:5a:cd:b6:38:3a:cb:aa:99:60:7b:06:79:
                    17:35:1b:2e:9d:f5:60:45:73:3d:d2:a7:bd:d8:5c:
                    55:d5:d4:43:18:05:02:3f:9b:cb:61:d4:6d:77:fd:
                    33:de:b6:bf:d3:85:e4:69:75:3d:b5:3f:38:31:a1:
                    31:7c:e6:32:4e:13:63:fb:41:52:85:30:84:91:9b:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:67:90:DB:5D:49:06:10:E9:79:85:D7:DF:AC:28:DC:E7:1B:E0
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:0d:05:fe:17:74:c5:15:de:30:20:83:56:c0:31:e1:c5:
         d9:6b:2d:84:55:ba:7d:9c:b2:05:32:1d:be:88:23:cb:59:f5:
         31:c0:45:66:8e:ac:d6:5d:ea:5a:1e:d0:63:cf:50:71:30:98:
         89:c8:19:94:d9:cd:29:d5:bb:6b:5e:ce:d7:91:e9:b4:fd:4f:
         21:4f:70:54:69:d5:1c:4f:67:76:76:08:f6:b6:bf:d9:48:4e:
         62:82:f0:1c:b4:aa:2a:e2:87:73:7b:e9:6e:0b:53:7c:0f:ac:
         1b:24:ea:9a:e4:d3:e3:78:a4:5c:1b:be:fb:3b:3d:f4:14:e8:
         40:c6:c0:02:8b:95:49:56:de:07:14:a5:4a:bd:04:62:90:a7:
         cf:b7:16:bd:3c:49:d8:83:e9:5f:4e:9b:46:7c:9c:15:c7:db:
         fc:b4:2c:d0:42:7f:01:16:f9:82:4a:73:a8:9f:ee:34:bd:8d:
         cb:5f:df:90:d1:a6:a6:5c:7a:67:7a:2f:ac:d0:69:1c:58:99:
         db:62:18:24:e9:cc:f1:a8:ae:6d:fc:5f:57:0e:3a:ff:89:44:
         5c:70:5f:dd:dd:ba:f7:04:f2:b2:0a:d2:be:85:c5:af:50:d6:
         57:dd:69:37:d0:79:8b:f0:2f:30:a2:00:06:0f:55:47:75:9c:
         d4:76:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:14:33 2026 by rpki-client