Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3235352e302f32342d3234203d3e203133333335.roa
File:                     3137372e3133362e3235352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          JXfpgHsL5+fDDaIBEqMiv6UmPxgIxEqIU4aQ3O/d8W0=
Subject key identifier:   0D:B9:D7:4C:5C:CE:F7:20:EF:D6:44:77:99:D5:80:69:F1:FF:4F:84
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       7669407BCEE91A29C2FD6DE93D658FB445846001
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3235352e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:07:10 +0000
ROA not before:           Mon 30 Mar 2026 23:02:10 +0000
ROA not after:            Mon 29 Mar 2027 23:07:10 +0000
asID:                     13335
IP address blocks:        177.136.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:69:40:7b:ce:e9:1a:29:c2:fd:6d:e9:3d:65:8f:b4:45:84:60:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 23:02:10 2026 GMT
            Not After : Mar 29 23:07:10 2027 GMT
        Subject: CN=0DB9D74C5CCEF720EFD6447799D58069F1FF4F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:02:58:cd:9e:14:58:ec:cd:e6:05:7a:19:c9:
                    91:c7:8f:82:a1:b7:26:d1:6a:f6:0e:9b:39:1d:09:
                    81:f0:f3:5b:be:41:1f:73:f4:c1:0a:41:d7:14:16:
                    f5:32:39:7e:fb:c5:f1:4e:f6:bc:b0:17:de:db:fd:
                    2c:03:23:d1:de:6a:15:0c:22:c4:5c:c0:ce:37:2a:
                    1e:39:97:f8:6d:7a:a0:0f:3f:7c:6a:62:cf:94:e3:
                    c9:92:c5:e8:a5:0c:20:8e:f8:99:39:ea:ee:2d:10:
                    0d:c8:0d:9c:4d:a3:47:09:37:bc:98:d9:1d:98:10:
                    05:ce:4d:29:f7:26:ec:79:d0:53:d1:5c:c3:4f:d2:
                    32:f1:ff:4e:c9:c3:f5:09:96:48:08:d5:25:88:c1:
                    e5:d5:a4:ac:12:dd:4a:92:8d:54:62:a8:0a:d1:cb:
                    d4:45:f7:9a:2d:4e:ce:b0:64:78:9d:33:1e:97:71:
                    eb:59:e3:16:ba:63:dc:b0:f1:9b:07:1c:dc:9b:20:
                    f9:46:66:ed:e7:31:8e:2e:cf:9d:ea:fd:de:72:6f:
                    a7:58:52:93:74:ba:88:f6:a5:09:d7:28:a4:8a:df:
                    19:a8:45:88:7f:c3:10:20:71:d7:84:0b:b0:d0:db:
                    a7:ee:2b:d9:24:90:7b:f0:1c:2c:df:aa:79:a5:92:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:D7:4C:5C:CE:F7:20:EF:D6:44:77:99:D5:80:69:F1:FF:4F:84
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3235352e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:21:1e:1f:ca:85:81:c6:ec:1b:aa:45:eb:d8:4a:9d:f0:a0:
         36:fb:bc:84:54:c9:40:83:bc:d6:7d:a6:fc:33:2e:8c:be:9d:
         95:aa:32:36:54:3c:0c:d4:17:0b:af:27:bc:45:7d:0d:91:9d:
         bf:46:46:95:56:ec:61:9a:65:f7:01:af:d3:8c:1c:a1:10:f4:
         ff:65:a9:9e:f7:46:d7:2b:00:2c:0d:d6:c8:dd:06:3b:d8:8c:
         e1:8d:37:ea:4b:16:08:08:e3:c7:32:2f:54:6c:3c:88:81:8a:
         55:57:c6:ce:e2:3e:cb:fa:2c:80:76:f6:23:32:71:85:6d:2a:
         ca:68:a8:03:3b:74:91:3a:9b:0e:52:cb:b5:fb:71:10:73:f1:
         5f:eb:23:90:67:fe:7f:55:51:34:d6:25:fa:f0:fc:b8:b9:ae:
         fc:21:92:f8:94:db:27:c5:07:bc:fb:93:89:49:4d:98:71:3f:
         22:0b:75:24:39:c4:b0:28:9a:9a:f9:2b:02:cb:28:1b:24:31:
         09:f8:28:99:c8:73:86:41:88:82:d6:b4:59:d1:ff:5f:19:e4:
         6b:e3:49:e9:7a:fd:1d:e2:40:39:51:2b:28:27:56:a2:24:3e:
         14:12:23:14:1d:e7:91:a7:10:bd:dc:fb:dd:20:16:f9:71:b0:
         82:62:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:40:58 2026 by rpki-client