Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39332e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e39332e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          OReV8ObOPdxz9LGW8QCSKZ5q+OfnD5paUEgx39l/G3c=
Subject key identifier:   17:06:D1:3B:E5:78:6D:B2:B9:5B:28:71:A2:72:9D:46:03:38:48:5F
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       16C131A43D88B03FC549E3091603862B6B928813
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39332e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:23 +0000
ROA not before:           Fri 28 Aug 2026 19:01:23 +0000
ROA not after:            Fri 27 Aug 2027 19:06:23 +0000
asID:                     262369
IP address blocks:        177.130.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:31:a4:3d:88:b0:3f:c5:49:e3:09:16:03:86:2b:6b:92:88:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:23 2026 GMT
            Not After : Aug 27 19:06:23 2027 GMT
        Subject: CN=1706D13BE5786DB2B95B2871A2729D460338485F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:a7:fb:49:99:ee:20:42:2a:03:61:a4:8d:
                    c4:25:8c:f1:02:5a:cf:fb:b3:dc:24:da:a5:63:34:
                    ab:e1:78:12:28:36:85:72:0e:34:6f:50:85:04:27:
                    eb:b9:51:53:af:e2:3a:f2:8a:b2:fd:0a:5a:45:43:
                    6d:59:2c:95:57:af:fa:f7:12:d7:33:13:94:3d:3d:
                    28:6a:be:66:66:96:bd:48:ec:03:5c:0f:c7:39:05:
                    c1:ed:fc:a0:9e:9f:5d:bb:5f:71:6d:34:dd:be:60:
                    96:85:19:d2:b1:06:d7:57:b1:ec:19:d9:fe:d7:bd:
                    40:ab:4b:c6:b2:ca:05:e1:77:83:79:5d:25:de:1a:
                    2e:f1:87:cc:4b:86:7f:02:a2:d0:51:28:f0:d1:5c:
                    6b:8b:a8:b3:a8:dd:77:57:57:3c:f5:35:b0:80:ca:
                    b3:7e:62:4b:8d:48:0a:c5:0f:12:80:11:d4:e6:40:
                    fd:d7:3d:b7:7c:ca:98:ab:52:7d:bc:9f:36:28:22:
                    0c:8f:ce:55:ed:78:f5:b7:20:0b:5f:77:bb:dc:aa:
                    22:10:96:96:b3:f9:5e:f9:0e:44:b1:4f:b7:48:d0:
                    56:21:dd:76:3b:07:73:b5:0c:92:f4:99:2f:7f:1b:
                    9e:ef:55:da:aa:be:ea:e1:55:76:ef:19:90:7a:19:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:06:D1:3B:E5:78:6D:B2:B9:5B:28:71:A2:72:9D:46:03:38:48:5F
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e39332e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:1a:5a:fc:ba:22:9f:8c:8e:f4:7e:b9:77:f3:0a:d6:93:
         d5:6a:42:bd:22:54:a8:59:26:74:d7:34:55:0f:9b:ea:7a:9d:
         06:d6:63:03:03:a7:36:77:f4:ec:f7:5f:c1:6d:47:ae:f5:86:
         d3:be:91:1c:59:58:ac:e8:a0:ce:ca:2b:da:20:42:2d:86:91:
         21:37:fd:1d:36:6f:6b:a7:3b:40:1b:a6:d0:69:79:f8:f3:21:
         4d:2e:15:57:24:35:ce:4c:88:61:72:31:ae:9f:65:c5:a6:80:
         98:b3:9f:a3:67:78:a6:ab:63:ab:82:43:48:8b:a7:a7:f9:4d:
         92:25:4c:d6:ea:da:ff:47:67:2c:f2:b1:26:b1:22:36:97:9d:
         65:0a:10:0f:5e:a7:64:79:54:b7:1c:46:69:1c:68:89:ce:75:
         98:a2:a2:81:d1:99:75:10:54:c1:ec:c8:e7:c5:60:d0:3f:e9:
         be:c6:60:7b:d1:ab:ba:b3:15:3e:ab:86:ec:a8:d5:a7:47:ce:
         e2:f4:59:20:c6:3e:db:78:50:fa:96:05:80:2b:b7:8a:ee:da:
         00:dc:d7:1a:5c:ed:01:cd:e4:0b:01:42:50:6f:70:f4:c0:ee:
         ad:6b:4d:7d:2d:a8:95:30:85:83:32:0d:80:df:9b:93:9d:c7:
         8e:86:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:45 2026 by rpki-client