Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39312e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e39312e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          YSuous6NF8IWWTXHHIEKaAesBOKO7iQP0jPK3L1ccdI=
Subject key identifier:   2C:94:9D:68:AC:F7:B7:FE:7F:BF:6E:FA:47:CB:2A:92:AC:6B:A0:73
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       59C8C91A7E8AD286AEAE80BFE27F9B940ED07A7B
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39312e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:25 +0000
ROA not before:           Fri 28 Aug 2026 19:01:25 +0000
ROA not after:            Fri 27 Aug 2027 19:06:25 +0000
asID:                     262369
IP address blocks:        177.130.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c8:c9:1a:7e:8a:d2:86:ae:ae:80:bf:e2:7f:9b:94:0e:d0:7a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:25 2026 GMT
            Not After : Aug 27 19:06:25 2027 GMT
        Subject: CN=2C949D68ACF7B7FE7FBF6EFA47CB2A92AC6BA073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:79:c6:46:a9:54:bc:11:d0:c9:38:e2:2b:
                    fc:0b:83:61:c2:6a:b1:30:a9:5b:bd:c1:f8:3b:94:
                    32:40:61:42:bf:ec:ce:4e:63:f2:41:8d:e1:c5:56:
                    66:ff:8f:a4:6b:a2:8a:5b:2e:79:c4:fb:79:13:24:
                    dd:9a:8d:24:58:c2:db:55:c7:d9:5b:07:45:da:5f:
                    2b:22:02:8b:89:e5:4e:c4:ee:e9:e2:78:eb:e4:b2:
                    18:8f:26:18:25:96:15:63:f5:ec:17:fe:3b:cd:63:
                    7e:dc:da:f0:b3:1e:90:d1:55:b6:29:82:c0:a2:4e:
                    24:a4:40:3a:0e:08:49:e8:18:19:89:d6:42:db:d9:
                    50:b6:c2:d8:bf:e9:f2:71:f8:75:25:83:e1:39:2a:
                    22:9f:a1:9f:00:db:7a:b9:d1:04:2c:8b:e8:08:18:
                    88:dc:7d:d6:15:c0:5f:b9:1d:3b:b5:49:39:a7:34:
                    23:14:b8:36:9b:9a:6c:b6:0e:5c:b6:88:96:03:94:
                    ca:51:a9:10:5a:ee:2a:12:67:ba:2e:e3:7b:cb:b9:
                    c0:70:12:d4:94:c9:b3:72:32:2c:2a:df:7d:0f:9a:
                    56:79:f0:6c:3e:45:35:12:94:4e:2c:b1:0e:3f:73:
                    1a:e6:e8:16:6f:af:e0:b5:0b:df:b9:2e:a9:38:6e:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:9D:68:AC:F7:B7:FE:7F:BF:6E:FA:47:CB:2A:92:AC:6B:A0:73
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39312e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:f3:19:8e:c9:f3:47:7c:d4:93:77:50:23:22:b5:95:97:
         86:28:f4:ec:94:d7:86:f5:af:2c:da:0a:a6:ed:df:51:e1:47:
         e3:56:15:bf:a7:ac:6a:26:41:a4:43:aa:94:8e:1d:58:62:cb:
         c0:e1:30:2d:3b:5e:b2:e3:c9:25:be:1a:0a:40:96:78:30:59:
         a4:54:7b:b5:9a:67:2b:ae:68:a4:fa:15:99:58:e6:d9:6f:10:
         96:7c:2f:66:1e:1c:83:62:66:81:6d:43:ca:a0:60:ec:68:01:
         0a:1d:10:18:ae:9f:dc:87:4b:aa:7a:cf:93:9b:5b:c4:4d:4f:
         e7:ce:33:0c:49:8c:e0:6e:8c:05:3d:68:6e:47:1b:4a:45:ff:
         29:5a:ec:72:2b:3d:74:9c:c3:14:ae:0d:69:c8:bd:fa:ad:85:
         c4:23:8d:c6:5e:c1:b3:89:7e:c4:89:7a:e4:74:c5:77:15:4f:
         a3:ec:67:b5:6e:a5:c0:10:4d:1e:ba:b8:94:2a:72:d7:c4:89:
         1b:d2:a7:41:6d:1e:ba:1a:54:41:9a:65:32:53:ef:d8:ea:40:
         9e:7b:3c:d8:43:4b:fe:7b:b8:78:f6:06:9f:20:14:69:f9:0c:
         9d:f2:9b:41:0d:7d:45:87:97:e8:ed:36:db:5b:07:12:aa:ca:
         4d:75:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:52 2026 by rpki-client