Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
File:                     3137372e382e3134322e302f32342d3234203d3e20323730353833.roa (raw, json)
Hash identifier:          ixcWNulBxDFLxVnbYVDsKFzYSa2loxsKdrYnmLRs3bo=
Subject key identifier:   AA:11:5D:6F:0D:F6:5D:B8:ED:39:2D:49:BE:A0:8A:FC:0F:71:3E:D4
Certificate issuer:       /CN=0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F
Certificate serial:       3FC3619E8127AE37FEADB1238A0F2C7013679281
Authority key identifier: 0E:C1:34:D9:F0:B5:5F:BB:DB:CE:B1:1F:F7:67:EE:4B:93:3F:9C:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
Signing time:             Thu 30 Jul 2026 01:56:24 +0000
ROA not before:           Thu 30 Jul 2026 01:51:24 +0000
ROA not after:            Thu 29 Jul 2027 01:56:24 +0000
asID:                     270583
IP address blocks:        177.8.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.crl
                          rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c3:61:9e:81:27:ae:37:fe:ad:b1:23:8a:0f:2c:70:13:67:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F
        Validity
            Not Before: Jul 30 01:51:24 2026 GMT
            Not After : Jul 29 01:56:24 2027 GMT
        Subject: CN=AA115D6F0DF65DB8ED392D49BEA08AFC0F713ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:ca:9c:5c:97:cd:b7:71:53:3f:89:28:19:
                    b8:d6:2d:7b:2d:3e:98:17:b6:1d:27:48:b8:66:eb:
                    af:f3:55:48:d5:7d:58:08:40:32:f8:6e:e8:15:5b:
                    0b:db:a8:6b:34:d4:4b:04:42:12:9d:a8:52:a1:43:
                    40:b0:b6:94:67:75:9a:be:ff:ba:33:ed:89:c1:d1:
                    a5:ce:38:82:9c:68:2e:37:18:e1:95:b6:5a:0f:56:
                    67:a7:33:f9:f0:98:ec:d9:bd:70:97:e7:e2:45:b7:
                    b3:f0:0a:47:09:0d:fa:4a:45:ef:97:ed:29:cf:3b:
                    55:4f:26:e8:5f:c8:a3:7e:6e:9e:44:62:73:87:84:
                    17:8e:a5:5b:58:86:01:0d:32:e5:c2:44:18:4a:71:
                    06:d6:9c:7e:f9:1d:28:6a:1b:89:e9:28:bd:ae:a2:
                    5d:c2:e1:6a:96:62:fe:7c:1c:54:0a:33:6d:34:35:
                    77:30:b8:20:a1:7b:49:b9:30:65:0c:73:da:e5:57:
                    3b:3a:6b:f6:8d:2a:11:99:e2:6b:8d:f1:71:29:d6:
                    cb:e2:14:fa:d3:4c:25:c1:a3:4e:17:3e:b7:93:4b:
                    97:51:48:70:b7:cb:e9:c0:50:fc:21:ac:0d:49:d5:
                    4d:da:47:b3:15:71:35:53:8d:ee:db:48:90:fe:67:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:11:5D:6F:0D:F6:5D:B8:ED:39:2D:49:BE:A0:8A:FC:0F:71:3E:D4
            X509v3 Authority Key Identifier:
                keyid:0E:C1:34:D9:F0:B5:5F:BB:DB:CE:B1:1F:F7:67:EE:4B:93:3F:9C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC134D9F0B55FBBDBCEB11FF767EE4B933F9C8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:6d:3c:88:1c:b9:70:64:c5:b3:a8:2d:68:ab:16:51:5a:
         cd:b2:17:d3:6a:47:43:a4:ba:f4:46:5a:16:5d:93:ea:58:4c:
         2b:9f:fd:bd:02:0a:07:09:0d:fc:c6:ce:2c:8d:8f:ed:fd:2c:
         8b:8c:08:3b:66:16:4d:33:1b:16:a8:39:8a:85:25:3f:ed:79:
         24:26:8f:2a:94:f5:92:1a:91:fd:90:27:2a:b0:f8:ce:9c:0f:
         ea:f8:d7:ce:05:19:94:0b:71:cb:5a:c2:ac:25:14:3d:a4:0e:
         90:44:47:51:2c:8a:a2:07:95:54:bb:29:96:45:ac:7b:2d:93:
         fc:48:30:3e:c2:4d:a6:e6:74:5c:dc:a4:58:25:83:d5:e4:4a:
         71:80:e4:0c:08:f4:28:a3:16:d6:f4:71:70:ac:1f:bf:10:8c:
         bc:fb:b8:31:a8:13:ab:82:73:1b:45:47:2b:4b:18:bd:39:5e:
         a4:43:a2:c3:54:74:62:53:ff:23:23:82:42:63:20:dc:42:46:
         1e:db:3e:0b:ff:ce:d1:85:88:88:26:93:09:24:f9:ee:de:ac:
         df:56:b7:8d:c8:ec:a3:cb:c4:3d:6a:14:d7:f3:5e:42:b9:8c:
         f5:b5:20:41:5a:b2:71:5a:24:35:6b:50:5d:5a:1d:03:c3:9c:
         15:50:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:35:08 2026 by rpki-client