Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
File:                     3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          BSSMF4kIZH7iJCDZT/4BqruD5KvAkjXLbxAhHC2swiU=
Subject key identifier:   3C:23:A0:A2:B6:D3:38:B2:09:71:01:9C:DD:F2:56:09:5A:51:86:53
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       78D6897AE9EA2DA50BE0B572D7E8182BAEA42C45
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:19:24 +0000
ROA not before:           Fri 28 Aug 2026 19:14:24 +0000
ROA not after:            Fri 27 Aug 2027 19:19:24 +0000
asID:                     262369
IP address blocks:        177.130.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d6:89:7a:e9:ea:2d:a5:0b:e0:b5:72:d7:e8:18:2b:ae:a4:2c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:14:24 2026 GMT
            Not After : Aug 27 19:19:24 2027 GMT
        Subject: CN=3C23A0A2B6D338B20971019CDDF256095A518653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:08:c2:6d:55:b9:b0:c1:5f:b2:4a:f9:06:ef:
                    60:bc:18:5f:d5:56:ba:d6:51:d6:9b:db:1d:4e:35:
                    da:28:8c:b8:e9:04:dd:ed:63:94:ae:56:20:26:9f:
                    35:10:5a:3c:b3:c7:3f:0b:3a:86:8b:c5:0c:70:81:
                    02:1a:b3:d3:05:e8:6d:56:81:50:33:6f:06:53:b9:
                    2a:7c:05:08:3e:27:08:ce:59:17:f5:4a:15:b8:0e:
                    ea:79:38:fc:b0:ab:04:ce:f6:3f:0c:eb:34:26:0f:
                    7a:72:99:ef:61:b3:a3:51:2d:dc:8a:70:e9:18:07:
                    5a:3f:73:3b:f6:6a:2d:b2:2c:d7:69:1d:64:c7:e6:
                    3a:49:4a:5b:b9:62:d3:55:ac:50:49:c4:9b:00:0b:
                    ff:18:d5:17:4e:99:ca:79:84:ca:72:9d:4e:cd:5d:
                    4e:5d:be:71:4c:55:04:81:0c:d8:47:c8:fb:21:bd:
                    a5:8d:60:12:07:81:da:f3:7b:6c:8b:9e:97:8e:91:
                    45:25:80:19:23:8f:11:ed:4a:a3:ea:1c:8c:6d:58:
                    c1:48:50:e3:09:0c:d9:b0:77:4e:48:53:5d:cd:ac:
                    03:45:71:24:7c:10:e3:cc:5b:1a:23:69:15:e4:f1:
                    fc:c7:cb:be:69:a3:b5:88:88:4b:d8:b7:cc:c2:ff:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:23:A0:A2:B6:D3:38:B2:09:71:01:9C:DD:F2:56:09:5A:51:86:53
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:3d:a1:04:e5:87:cc:45:0a:bd:83:f2:fa:aa:9a:bd:66:
         d2:27:50:fa:a0:fb:4b:38:cd:9d:3f:ff:0c:67:c6:3c:b5:62:
         8a:41:0a:2f:c4:f1:45:bb:95:32:d7:e3:a2:f0:b3:71:34:c7:
         4d:73:ce:27:32:a5:86:c3:ca:ed:3c:85:06:5f:f7:fa:c8:fb:
         e2:a2:fe:1e:fb:be:c4:eb:7f:6e:73:eb:f1:27:56:6d:3b:77:
         d5:9f:7f:99:1f:2f:23:27:ed:9b:f8:75:b6:a2:be:4e:ab:47:
         22:9a:96:b7:a8:bf:86:ba:27:5c:3b:f8:ec:2b:c3:6d:52:10:
         b8:52:14:0e:a4:ec:2c:4f:98:a1:14:ae:93:5c:09:b2:e3:d1:
         1f:8f:46:16:9c:96:55:44:9c:00:c7:40:60:22:b8:a4:a6:28:
         16:29:3d:fc:97:e0:d7:4e:0f:9d:7f:81:fd:a8:6f:58:88:d6:
         98:e8:24:9f:28:0f:7f:3e:47:c0:1f:c4:23:15:33:30:0e:a2:
         c9:4f:50:33:6a:80:61:05:ff:5d:32:ce:15:fc:51:44:bf:fc:
         85:30:7b:c0:19:5a:c5:a8:f6:6f:23:57:95:32:7c:5f:7d:39:
         58:90:07:a6:25:aa:f8:bd:54:8f:f6:f7:62:94:38:e2:73:e0:
         3d:36:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:04:29 2026 by rpki-client