Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa
File:                     3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          su7rL/uX8aA7C1VJdjeqEGZTY5cctReN57JGuJEcAYk=
Subject key identifier:   56:72:14:11:D5:2C:CF:76:DE:E8:65:48:43:86:D4:B2:B0:B6:43:3D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       617877029F459E75DFDA1FC9E070013693E6D3FD
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa
Signing time:             Mon 30 Mar 2026 19:28:39 +0000
ROA not before:           Mon 30 Mar 2026 19:23:39 +0000
ROA not after:            Mon 29 Mar 2027 19:28:39 +0000
asID:                     266539
IP address blocks:        177.223.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:77:02:9f:45:9e:75:df:da:1f:c9:e0:70:01:36:93:e6:d3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar 30 19:23:39 2026 GMT
            Not After : Mar 29 19:28:39 2027 GMT
        Subject: CN=56721411D52CCF76DEE865484386D4B2B0B6433D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:45:b8:35:fe:a2:51:04:f9:75:24:c6:44:
                    b1:a5:ff:e1:b2:4a:f1:7f:cb:94:6a:14:b1:68:60:
                    e3:42:ca:db:61:da:48:5d:bf:a2:ca:b9:fd:c1:84:
                    bb:90:33:18:f8:70:ea:ec:58:e3:d4:86:6f:8d:00:
                    8a:bb:4a:22:a6:e8:83:f8:9c:e5:e6:ea:47:0b:04:
                    82:d3:9b:9b:07:04:c5:ad:aa:49:3c:03:89:83:8b:
                    80:47:a3:20:93:67:e3:cc:c8:41:44:23:f4:a6:d0:
                    1d:c8:45:57:81:98:9a:4c:3c:d9:90:64:90:74:4f:
                    3d:01:f6:eb:00:b0:55:66:39:64:0e:50:9b:19:cf:
                    b7:d6:82:e1:64:4f:a3:4b:64:d3:89:83:e5:8c:31:
                    2b:19:36:ba:a9:da:79:78:d2:27:30:f3:a3:fa:48:
                    fb:34:75:57:ed:41:e9:cf:46:51:ee:48:aa:67:ca:
                    38:f0:2f:37:48:7a:9c:e1:c1:de:57:19:09:da:1b:
                    b7:a7:23:58:73:69:5f:34:73:ab:18:9a:15:b2:1d:
                    10:88:22:82:5a:37:8f:bd:9b:35:68:71:b3:1b:5f:
                    89:51:f1:0d:df:98:0b:d0:56:5d:45:77:6d:0a:df:
                    5f:03:d5:c0:3c:63:0a:e3:6c:6f:a7:ad:0b:63:15:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:14:11:D5:2C:CF:76:DE:E8:65:48:43:86:D4:B2:B0:B6:43:3D
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:de:b2:32:3a:df:83:0c:01:e9:f4:d5:92:bb:dc:1b:e5:05:
         77:3b:a0:02:4b:36:35:af:e2:b6:fc:52:07:38:52:e8:d4:01:
         c8:73:10:71:ef:46:f6:d6:33:69:c0:1f:1e:4e:11:2d:aa:9f:
         87:47:6e:d0:44:d8:b8:ad:0a:e6:93:ee:de:27:db:39:4f:12:
         be:dd:1e:d4:a6:7d:f2:23:19:02:67:eb:ce:86:e1:59:cb:18:
         4c:61:3f:64:e1:70:00:96:00:2c:94:12:fd:ba:86:30:18:fd:
         f2:fc:cc:de:ae:63:f4:1e:01:62:a4:03:87:37:ef:6d:ae:d6:
         23:50:ae:02:57:fa:e6:05:5e:e7:43:ec:1b:d8:c4:f5:fa:8a:
         c9:0f:7a:69:19:a5:52:c2:0f:fb:e5:51:04:9b:db:bf:fa:6e:
         85:b2:ec:94:77:56:fd:e3:a5:1a:7e:67:70:8f:1f:f7:ea:35:
         05:ba:03:39:a9:b7:27:7d:11:46:fb:b6:68:07:89:42:ae:6e:
         4d:ca:c0:65:c2:b6:e4:ba:6e:ef:c5:14:80:e6:63:e8:84:97:
         da:38:92:81:b4:10:f8:b2:e1:b9:14:9f:e6:b5:5c:f1:95:b0:
         f3:03:d4:07:24:c9:c7:41:e2:bb:78:1e:2b:3a:52:ed:e7:78:
         80:d0:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:04:06 2026 by rpki-client