Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          1yBYoxCbqyRTtwE3OTkKLoD4VPiB+/lQT8QL1rj4Mzc=
Subject key identifier:   F9:FD:BB:84:BF:A4:A1:34:B7:21:D2:D4:EB:71:F8:7C:6F:34:86:99
Certificate issuer:       /CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
Certificate serial:       730B06EEF4B992BF41C2556F5803D30381220CD5
Authority key identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
Signing time:             Mon 06 Apr 2026 11:50:21 +0000
ROA not before:           Mon 06 Apr 2026 11:45:21 +0000
ROA not after:            Mon 05 Apr 2027 11:50:21 +0000
asID:                     53209
IP address blocks:        177.11.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0b:06:ee:f4:b9:92:bf:41:c2:55:6f:58:03:d3:03:81:22:0c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
        Validity
            Not Before: Apr  6 11:45:21 2026 GMT
            Not After : Apr  5 11:50:21 2027 GMT
        Subject: CN=F9FDBB84BFA4A134B721D2D4EB71F87C6F348699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:fd:4c:f8:12:e7:dd:23:ee:cf:66:57:66:
                    c3:e9:e3:da:5e:b4:9a:9c:06:79:6d:dd:b0:b9:5d:
                    58:ee:19:e8:99:c8:f6:1e:ff:13:c6:db:58:98:e6:
                    3d:f0:38:c2:eb:3f:02:2a:7c:7f:a7:74:d2:ee:ed:
                    1c:1e:00:68:04:fc:59:13:e3:b2:09:06:1d:7c:d7:
                    a6:d4:4e:0d:89:c0:cc:95:67:64:02:99:6a:50:6c:
                    cd:45:c9:d9:b1:9e:3e:5a:23:b7:ec:41:26:00:83:
                    e6:77:a8:d8:9b:8e:99:e3:19:ce:4f:85:c1:31:a7:
                    a1:47:e0:d4:78:57:7c:5f:62:db:69:b7:f0:32:8f:
                    d9:15:75:7a:a2:07:26:af:c1:28:ce:5f:fb:59:09:
                    dd:29:ee:e0:aa:96:a0:8d:e2:73:14:65:b3:5a:23:
                    63:c8:d9:05:56:ee:11:39:95:0f:b4:fa:5e:89:4f:
                    8e:a9:28:90:d0:58:ee:ca:57:fb:a5:13:37:60:60:
                    0d:62:7b:50:3d:ac:9f:d5:94:b4:70:ef:23:17:7b:
                    cc:09:cb:b1:0b:91:b7:e2:91:6f:03:d4:cc:b3:b5:
                    90:5d:b1:50:09:2e:31:96:a0:4a:bb:e7:e7:e4:4c:
                    2e:7a:36:aa:f0:76:ff:c1:43:53:f5:4c:4d:aa:fb:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:BB:84:BF:A4:A1:34:B7:21:D2:D4:EB:71:F8:7C:6F:34:86:99
            X509v3 Authority Key Identifier:
                keyid:8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:13:a3:c0:5d:72:1d:a5:29:1b:03:fb:3b:fe:7f:b5:41:82:
         3d:b9:bf:42:33:9f:0b:dc:d3:13:6d:85:bc:22:4c:b7:8c:b1:
         87:c8:d4:89:99:d8:76:4f:50:c0:87:aa:f2:97:dc:3d:f1:83:
         c4:11:b4:35:14:cc:d6:60:bd:ee:69:d0:57:0b:8c:4d:62:49:
         8c:f7:e0:05:4e:81:a6:ef:1b:31:17:2b:39:97:04:42:17:b4:
         84:85:18:a1:dd:b1:b6:10:2d:c0:c6:ca:42:37:71:24:12:7d:
         2e:d1:1d:82:56:f4:7d:60:ef:57:03:04:72:e4:eb:fb:ad:8c:
         d6:f9:dd:e8:f2:77:7d:15:25:db:03:bd:d3:8d:9e:be:49:ef:
         f4:90:81:e1:81:38:dc:80:61:7f:c3:1f:5b:79:47:66:9b:aa:
         03:23:a6:34:53:16:6e:d4:fd:6d:0f:a6:3f:50:10:73:fe:7f:
         e7:4f:4c:43:e7:79:7f:6a:3f:5a:bf:5f:08:40:35:ab:6e:6f:
         fb:71:6e:5e:7e:ca:28:c8:e0:3a:6b:6f:3e:0e:bf:d1:68:05:
         b1:c6:58:02:32:ee:c8:0d:ad:23:c6:78:3b:06:e9:c7:ae:df:
         78:c8:7a:21:f6:1b:9a:55:0d:b3:0f:93:a2:cf:8b:09:c0:9f:
         ff:fb:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:52:25 2026 by rpki-client