Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38362e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e38362e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          zGgju3GvYVTLLO5dliHGdS6BqgjdJVN+38GXqErEvXk=
Subject key identifier:   14:BB:79:20:F2:63:7D:1D:8D:6D:21:8C:FC:F9:F3:70:75:3F:E0:C4
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       10A60E3F590CBFA83FE138FDD320E0BE7A9B1ECF
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38362e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:24 +0000
ROA not before:           Fri 28 Aug 2026 19:01:24 +0000
ROA not after:            Fri 27 Aug 2027 19:06:24 +0000
asID:                     262369
IP address blocks:        177.130.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a6:0e:3f:59:0c:bf:a8:3f:e1:38:fd:d3:20:e0:be:7a:9b:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:24 2026 GMT
            Not After : Aug 27 19:06:24 2027 GMT
        Subject: CN=14BB7920F2637D1D8D6D218CFCF9F370753FE0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:7b:0d:07:11:52:21:72:ae:31:e3:a4:eb:
                    1a:02:f5:82:79:eb:d5:0e:8f:37:14:00:d9:a8:06:
                    07:99:93:4d:19:73:19:4f:7f:82:95:90:97:82:f2:
                    78:05:76:6f:11:70:ea:2a:ea:73:55:38:ad:3b:1b:
                    96:3b:39:f2:04:f5:39:63:e7:c8:72:44:05:59:2a:
                    43:e0:a6:44:d0:62:52:4f:b9:ad:be:a6:12:ae:67:
                    88:5d:7c:33:dd:96:30:3c:bd:90:c9:27:66:d9:b5:
                    82:0f:9c:ea:fd:e5:7f:71:78:07:28:a5:79:22:42:
                    23:f0:30:ee:f3:35:27:e9:63:00:43:6f:0a:22:f6:
                    d6:73:2d:ca:a2:0b:5f:af:82:10:49:ee:d6:eb:0e:
                    c7:b1:ed:47:6d:c7:cf:ff:34:72:c0:38:5d:7c:25:
                    5c:69:20:66:37:15:ee:56:e8:c2:bf:9a:59:fc:81:
                    e8:10:05:ed:e4:67:ed:d7:de:e6:a8:a5:ce:0e:b2:
                    30:f2:d0:27:f2:e5:75:fe:86:85:db:dd:cc:36:8c:
                    d1:11:00:34:29:58:86:ac:06:3c:47:93:a1:b1:e4:
                    b5:eb:a0:df:18:bf:ee:8f:d0:0a:8d:81:8f:85:41:
                    8c:15:28:6f:8c:e2:08:b2:bd:79:cd:b6:13:f2:dc:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:79:20:F2:63:7D:1D:8D:6D:21:8C:FC:F9:F3:70:75:3F:E0:C4
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38362e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:38:b2:4f:83:c3:ce:0c:6c:7e:e8:fb:e7:8e:67:ae:b3:de:
         d3:8e:21:80:3c:ce:b8:58:dd:77:47:ca:99:0a:5b:98:1d:20:
         e9:dd:0a:b8:29:78:6a:a8:56:27:b0:3f:d5:c9:4e:88:89:b6:
         e4:61:b6:fd:fd:ff:81:d3:eb:a0:b1:c6:bd:64:fb:e3:23:4d:
         c9:74:3a:67:a2:e2:3c:8c:f4:e5:9b:2a:5f:af:8d:ec:88:ea:
         73:e2:9c:4f:68:98:4f:a7:2a:8a:2e:ea:b0:7b:41:df:5c:c1:
         7d:74:bd:9b:58:f7:9d:7c:ee:b3:be:63:c5:3f:43:0e:fc:2b:
         7f:17:a3:dc:b3:32:9a:3f:0d:9a:f4:ca:2a:ef:cd:6e:6d:20:
         95:f8:8e:85:87:a0:f5:c2:42:a9:63:cb:f6:c1:c3:56:fb:9a:
         1f:f9:63:26:b8:f7:47:28:0e:66:03:be:19:0e:bf:35:e5:ba:
         23:2b:d6:a3:d5:46:6f:b7:a7:41:93:67:72:0a:9f:dc:6a:96:
         6a:cf:c3:99:60:56:97:d8:86:b4:14:3b:05:09:17:9c:0d:d8:
         11:26:af:60:ba:9f:19:0b:dd:75:f4:4d:50:ac:e1:c0:e8:f7:
         0b:a9:5c:0a:92:f2:7c:7f:eb:c1:c3:6f:97:69:e8:ae:45:bd:
         93:df:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:47 2026 by rpki-client