Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
File:                     3137302e3233392e302e302f32322d3234203d3e203532383738.roa (raw, json)
Hash identifier:          z5ZitT+NVJP8AIZtnOOGKFCoakCLs2BLPRI4eMtcW/Q=
Subject key identifier:   75:D9:46:44:78:7C:44:00:7A:4A:2E:C0:C4:DE:D4:98:F4:5D:97:BC
Certificate issuer:       /CN=36636C5524467BBA576827BCA72D663FDD92AE4C
Certificate serial:       2BE874BB1410F9400AED147B9B7ABB6372B66520
Authority key identifier: 36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa
Signing time:             Sun 05 Apr 2026 14:22:30 +0000
ROA not before:           Sun 05 Apr 2026 14:17:30 +0000
ROA not after:            Sun 04 Apr 2027 14:22:30 +0000
asID:                     52878
IP address blocks:        170.239.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl
                          rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:74:bb:14:10:f9:40:0a:ed:14:7b:9b:7a:bb:63:72:b6:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36636C5524467BBA576827BCA72D663FDD92AE4C
        Validity
            Not Before: Apr  5 14:17:30 2026 GMT
            Not After : Apr  4 14:22:30 2027 GMT
        Subject: CN=75D94644787C44007A4A2EC0C4DED498F45D97BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:f0:64:fc:ee:1a:a8:e4:78:04:18:8d:92:
                    2b:ea:b3:31:72:64:de:2e:09:6f:ba:c0:37:88:69:
                    57:74:d2:6d:de:8f:4e:21:3a:c1:1d:78:95:81:4b:
                    02:5e:83:5b:99:82:8b:8e:5f:62:cf:5f:1c:1a:ff:
                    dd:c5:77:d0:be:95:3c:9a:3a:c0:a4:37:12:97:ea:
                    c1:62:60:74:4b:fb:ed:49:4a:57:7b:d8:46:4d:d8:
                    30:44:cc:d0:1e:83:1b:77:70:a1:e7:be:8b:0a:b1:
                    08:e5:c6:a8:cb:6e:31:78:7c:24:15:de:29:4e:84:
                    52:ee:cb:31:09:49:b0:14:b7:62:b0:99:ba:da:2c:
                    38:de:b3:87:8a:0f:a1:dd:8b:9d:8c:b9:dd:63:8c:
                    c4:28:26:74:4b:83:7e:d4:4d:97:cc:9d:cc:be:d6:
                    b7:71:f0:62:8a:da:4e:dd:80:5e:7e:b3:cc:b7:c2:
                    d1:75:6e:24:67:c8:b4:5e:01:fd:a0:19:9e:25:01:
                    0e:2b:53:e7:d9:c1:59:18:d4:af:72:da:c2:c7:94:
                    a3:fa:cb:c7:71:1a:af:87:5d:95:de:fe:48:da:54:
                    db:99:d9:ad:8f:94:f2:28:37:dd:bc:f3:c1:6c:f2:
                    dd:8b:7d:3c:dc:15:69:3b:6d:27:a4:c9:89:78:ee:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D9:46:44:78:7C:44:00:7A:4A:2E:C0:C4:DE:D4:98:F4:5D:97:BC
            X509v3 Authority Key Identifier:
                keyid:36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/3137302e3233392e302e302f32322d3234203d3e203532383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:20:36:bd:c2:90:01:0d:ce:c2:d5:d1:d3:e0:dc:a1:b5:
         f5:fd:55:14:ff:f8:4a:5e:20:64:ab:5c:af:a2:44:59:a6:83:
         3b:5c:c6:b6:cd:bc:0a:35:9f:01:50:d2:6d:b4:6e:89:04:d2:
         aa:71:ee:f1:ff:17:fe:b3:36:19:a1:aa:14:6e:44:6f:cb:ee:
         2d:37:a1:b5:18:b7:d1:de:d0:28:4f:61:e2:b1:a1:70:47:7d:
         c9:76:2d:60:9c:bd:09:b3:08:be:88:4f:6a:d6:68:58:96:70:
         d5:51:ec:7b:a1:0b:50:d4:00:e3:d6:34:26:42:9f:3f:fd:48:
         3a:1b:1c:36:3d:27:4f:c7:d2:e0:7f:cc:52:cd:a0:81:b2:80:
         85:85:fd:ae:9a:96:4b:be:ad:7f:3e:31:4a:c6:5b:4b:2e:19:
         49:44:d1:0a:f2:02:ea:0c:27:e3:ae:71:93:b6:ea:4e:10:4a:
         50:e9:16:b9:4e:36:a2:7e:bc:38:f8:e2:84:4a:a2:1b:95:dc:
         92:35:ea:f6:f2:a2:ab:74:d8:08:86:e5:a0:34:bb:c1:99:0b:
         5c:63:c2:78:98:c7:a8:05:12:56:ff:a3:c2:a9:9c:b3:e1:ef:
         b4:08:68:92:71:b8:90:39:10:56:55:fb:fd:23:45:9e:00:7e:
         fc:95:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:48:27 2026 by rpki-client