Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa
File:                     3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          OtPsZlvVjToqkhU6uVNlL6Ww+RjZhFkI3IMt6+1EGig=
Subject key identifier:   E7:1A:62:F7:FC:02:02:41:06:ED:B3:5A:95:1D:6E:50:26:E5:4E:26
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       6204E2CC90CECB44531A3011E93D2AD26EA5A995
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa
Signing time:             Fri 30 Oct 2026 13:41:27 +0000
ROA not before:           Fri 30 Oct 2026 13:36:27 +0000
ROA not after:            Fri 29 Oct 2027 13:41:27 +0000
asID:                     52573
IP address blocks:        177.125.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:e2:cc:90:ce:cb:44:53:1a:30:11:e9:3d:2a:d2:6e:a5:a9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Oct 30 13:36:27 2026 GMT
            Not After : Oct 29 13:41:27 2027 GMT
        Subject: CN=E71A62F7FC02024106EDB35A951D6E5026E54E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:86:ab:1b:55:3d:56:8b:13:1a:4b:7a:f0:
                    6f:0b:a2:a2:7a:c8:47:09:2a:eb:92:6b:43:f2:2f:
                    e5:61:8c:83:6a:72:f7:03:2f:86:7d:4f:06:a8:4f:
                    82:15:ab:88:c3:ef:0d:e0:29:9f:05:42:40:92:b0:
                    9a:4b:af:e8:ac:20:95:ef:9b:f8:9e:fb:5d:9e:97:
                    56:ec:fb:ec:a2:15:44:44:f4:0e:bd:16:02:3a:6c:
                    1b:fb:a7:f9:93:38:87:7a:f1:c0:7f:23:7c:09:a3:
                    f2:f2:da:70:6b:0b:26:e4:d3:33:cc:3b:31:9d:93:
                    12:d0:ef:fe:68:eb:15:a1:11:b4:10:a3:52:c9:b2:
                    e1:63:3b:3e:50:d4:98:63:bd:ae:96:e1:6a:2c:83:
                    be:59:ee:95:48:36:27:30:b0:6e:b4:c3:bc:26:36:
                    9d:3f:e8:1f:60:7c:cb:8d:9f:3e:50:ec:ab:67:64:
                    59:fe:5a:a6:d8:e7:8a:86:9a:c1:06:cc:6a:31:c7:
                    97:89:e0:f5:5a:84:72:28:ae:59:db:65:ae:8e:d8:
                    35:00:ba:8a:7b:db:85:95:a9:2c:cc:15:b2:73:21:
                    2d:3a:52:04:02:01:bd:b1:d2:39:23:6c:85:b6:5a:
                    2d:20:4d:4b:61:3d:cf:79:7a:a9:b9:96:da:23:53:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:62:F7:FC:02:02:41:06:ED:B3:5A:95:1D:6E:50:26:E5:4E:26
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:23:c0:89:eb:0d:1b:ff:fa:3b:8b:ea:50:0e:c2:8b:9e:
         8f:bd:9a:60:1c:c7:a1:ec:21:54:09:43:82:0c:16:89:f2:81:
         5d:0d:0b:62:e3:1d:a6:ce:b6:4a:bb:d7:dc:1f:0c:0a:3a:37:
         56:94:61:00:ae:9b:b8:f3:38:92:af:51:a7:19:9f:ec:cd:e6:
         e2:fd:b6:99:48:e0:10:a3:17:d6:61:be:2e:1a:f4:cb:8f:84:
         59:f8:e4:97:4a:7f:cf:8c:fd:40:75:af:c6:6a:71:4b:f6:a9:
         ed:12:6e:ee:11:72:b9:61:dc:83:97:93:c5:31:f2:0a:1d:ee:
         40:51:d1:6e:d3:64:e3:fd:b3:ee:ae:fc:94:9c:9f:2a:15:9a:
         35:b4:4c:e6:cb:47:93:37:73:b7:71:a4:dd:48:ef:1d:08:07:
         4a:4b:ca:2b:34:d1:0b:6e:c8:ae:07:0f:51:30:66:6d:fa:d1:
         0c:f1:0a:65:e7:26:9a:04:dd:c7:ca:b9:80:da:39:02:e4:23:
         ff:1d:ee:35:4e:2b:8e:22:e0:4d:e9:09:00:5c:58:51:1e:83:
         d5:5e:bc:57:07:02:09:32:06:2e:13:ee:43:87:d2:ea:08:09:
         21:55:2d:dc:49:94:0a:ff:c4:ef:30:41:62:cf:3a:0b:e3:ec:
         1a:fd:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:38:45 2026 by rpki-client