Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32342d3234203d3e203532373635.roa
File:                     3137372e33392e3132302e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          jhUHHyTk64Z368Jg7mNDbNMvwCXa6puVvNgqEZdxB/Y=
Subject key identifier:   81:6C:63:46:B0:14:27:0D:F8:7E:AC:A5:31:E9:31:3F:67:17:84:13
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       4824218E5E4A8035F2529E2B72444020CFA9C4C9
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:05 +0000
ROA not before:           Wed 26 Aug 2026 02:02:05 +0000
ROA not after:            Wed 25 Aug 2027 02:07:05 +0000
asID:                     52765
IP address blocks:        177.39.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:24:21:8e:5e:4a:80:35:f2:52:9e:2b:72:44:40:20:cf:a9:c4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:05 2026 GMT
            Not After : Aug 25 02:07:05 2027 GMT
        Subject: CN=816C6346B014270DF87EACA531E9313F67178413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:9e:77:c2:71:63:73:f6:fb:4e:4b:ad:86:
                    55:90:ea:d9:69:0a:62:81:bc:b6:ad:72:f0:5b:a7:
                    9e:8a:b0:c2:19:fa:bf:01:36:78:ab:61:9c:1a:a6:
                    0f:bb:f5:29:eb:fa:ae:1e:7a:8d:06:30:0d:7a:6b:
                    a0:09:32:49:c0:c9:08:80:6b:43:bf:21:2a:86:8f:
                    11:a3:d4:b3:7e:9b:6e:87:8b:f2:30:f7:e3:ce:c9:
                    68:48:ca:25:cf:ba:8d:ac:12:8b:26:75:65:67:1c:
                    e0:15:fc:db:07:55:0a:26:4d:5d:5d:88:8e:ea:6a:
                    da:e0:3b:7f:7c:58:74:8e:30:1c:68:51:e2:e6:1b:
                    b4:45:2f:86:a4:7f:de:6e:b2:26:41:6f:68:9c:f4:
                    43:ba:1f:76:72:6d:7e:19:42:df:6d:33:e7:2d:fb:
                    53:a2:ce:a4:4a:d9:76:54:58:f5:d6:47:3e:9c:5b:
                    51:28:5f:a6:8b:10:84:a1:27:67:c8:ee:07:e5:34:
                    0d:fa:2d:ad:d4:1e:41:e0:8f:c8:2e:66:f0:3c:72:
                    45:3d:34:0f:44:8d:5a:45:9f:49:7b:95:73:b5:42:
                    52:af:33:9f:19:07:a2:b5:f9:5d:33:01:17:05:6d:
                    5f:60:4a:3f:c5:a3:74:a0:b6:cd:e9:34:b9:1f:dd:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:63:46:B0:14:27:0D:F8:7E:AC:A5:31:E9:31:3F:67:17:84:13
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:27:18:12:cb:d8:c6:6e:84:9a:9a:3b:6b:cb:db:bf:a2:8d:
         1d:ab:54:7c:63:59:81:69:49:5e:50:e9:d4:0c:5d:70:42:d3:
         d4:34:6a:53:6d:b3:cf:f6:05:35:67:59:6c:1b:1c:34:5d:ea:
         d6:03:10:4a:0a:03:4f:1c:0e:bb:2c:bf:76:97:6e:b5:1e:ae:
         9a:da:89:ba:6f:77:d0:ab:fb:6a:99:99:af:04:75:f3:53:58:
         29:6a:77:63:c8:70:73:86:f5:43:0b:91:ff:f4:dc:a7:57:54:
         0f:3e:e5:f0:54:ed:d6:3f:28:dc:e6:17:29:5e:73:14:5f:d5:
         96:aa:65:c5:50:dd:39:f4:b3:28:1c:06:ca:e9:f0:99:ae:7a:
         de:dc:d7:3e:75:63:d5:d3:d2:cc:de:b0:72:2d:a0:47:8a:f9:
         77:c7:40:6d:fa:cb:b1:8d:fc:8d:bd:06:a8:72:5f:24:a5:04:
         c9:66:19:f6:1f:6f:f9:1c:70:8d:1e:9f:5e:19:6a:cd:e9:92:
         18:ea:d2:c5:a6:45:f5:20:c7:5e:a6:f5:cf:ef:e7:e4:58:ec:
         36:a3:37:be:ea:ea:e5:66:9a:e4:05:00:a5:d4:89:25:43:78:
         eb:73:11:f7:7b:09:04:71:6c:00:7e:e3:d1:ca:a8:e7:6e:a9:
         13:a5:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:02 2026 by rpki-client