Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37352e302f32342d3234203d3e203532373635.roa
File:                     3137302e3233392e37352e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          KctZ287xiz/94HRP3mhaNCQUg9eP56FlDBMPptquDac=
Subject key identifier:   28:41:03:7C:3F:48:83:6D:F1:D8:88:7A:9D:94:DF:E9:1C:D8:20:6A
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       63FFEA21E7E7353A17B14EAC35338E4864642CF5
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37352e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:04 +0000
ROA not before:           Wed 26 Aug 2026 02:02:04 +0000
ROA not after:            Wed 25 Aug 2027 02:07:04 +0000
asID:                     52765
IP address blocks:        170.239.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ff:ea:21:e7:e7:35:3a:17:b1:4e:ac:35:33:8e:48:64:64:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:04 2026 GMT
            Not After : Aug 25 02:07:04 2027 GMT
        Subject: CN=2841037C3F48836DF1D8887A9D94DFE91CD8206A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:69:dd:59:f5:85:4f:09:23:be:84:61:9d:
                    85:40:e8:c4:47:a1:a7:4b:1f:a4:78:bb:df:75:f3:
                    a2:e3:84:53:e6:b8:82:00:5f:03:ac:bc:a5:69:83:
                    e2:80:26:30:fa:2b:4e:3d:58:17:78:a6:5c:6e:72:
                    d3:3f:57:b4:70:4d:af:d5:18:34:5b:0c:f8:18:12:
                    87:7f:6b:c8:31:67:6e:ee:00:e4:be:41:94:9a:21:
                    55:50:15:93:75:ac:19:0b:10:d1:68:72:cc:1f:d0:
                    cb:80:f4:14:12:5d:0b:06:a4:85:5f:e2:07:67:a9:
                    ba:81:77:c8:7d:e5:c8:45:ac:29:2d:7c:ea:a0:38:
                    14:c2:79:09:b8:a7:ed:7f:de:94:1b:33:af:fc:09:
                    27:95:84:88:99:4e:52:04:73:39:50:03:90:d0:0a:
                    00:cf:11:36:90:c6:6c:a8:e9:08:ac:34:8d:b7:e2:
                    1a:9d:27:63:06:d0:ee:02:b7:de:15:76:03:9a:73:
                    22:75:67:44:2a:0f:0c:65:7a:eb:05:82:da:79:0e:
                    bc:58:76:a0:38:1b:a4:e8:fa:08:f0:f8:71:44:78:
                    df:74:6a:ec:aa:1a:97:35:8b:47:12:be:b2:18:84:
                    21:07:88:6c:3e:47:14:03:e3:1b:e0:d6:57:96:a7:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:03:7C:3F:48:83:6D:F1:D8:88:7A:9D:94:DF:E9:1C:D8:20:6A
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37352e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:11:d0:27:41:8d:fb:2c:40:ab:b9:e7:2b:cb:03:26:2b:e7:
         a9:36:2c:4a:ca:01:1c:1f:fd:ad:e1:a8:3c:4e:fb:42:13:fb:
         34:1a:a1:ad:01:55:76:45:67:2c:80:95:49:56:e9:d8:b5:73:
         dd:c2:7f:6a:2a:fe:ba:cd:a0:58:43:4e:8e:7a:3e:5d:73:51:
         fc:6e:60:d2:7c:74:3e:ad:4e:4a:e1:43:17:f0:c5:ac:c9:b3:
         f8:43:5e:05:24:d1:1f:6e:c7:de:7b:10:95:18:86:98:5e:96:
         fd:6f:14:d3:7a:59:83:86:76:6a:4f:9c:fc:b8:79:aa:b0:1c:
         6d:9f:52:b2:8c:87:69:e8:bf:cb:36:c0:19:0b:30:33:b3:87:
         a1:c6:42:96:c9:58:97:a1:90:2b:66:6a:9f:b0:39:61:3e:f1:
         84:9d:06:b3:1f:eb:1c:83:fa:e1:4d:04:af:6a:0a:ff:fe:7a:
         c2:e6:a0:67:26:71:39:e4:62:09:e3:b8:54:2b:14:d8:31:a4:
         f6:58:ac:e1:aa:80:9f:1c:8d:4f:84:2b:eb:d1:67:16:d9:4e:
         b5:a4:a1:53:66:a7:d8:44:f0:ff:df:fc:bd:61:d5:f4:3a:26:
         c5:cb:56:f9:2b:ba:60:96:0d:7b:c8:3d:16:83:50:83:c7:9b:
         11:a2:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:00 2026 by rpki-client