Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130392e302f32342d3234203d3e203532373231.roa
File:                     3137372e38342e3130392e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          9eNcWHE06XmE0PFsGIKwgNhyOz3/bhjT4eTYYI3JclQ=
Subject key identifier:   4F:8E:A0:1C:4B:5C:6B:94:1D:5F:38:80:A8:E6:BA:46:5F:B7:CD:49
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       38DBC984F0DA33A1F8929C2AB7B4B816A1753F30
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130392e302f32342d3234203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:12:01 +0000
ROA not before:           Tue 22 Sep 2026 17:07:01 +0000
ROA not after:            Tue 21 Sep 2027 17:12:01 +0000
asID:                     52721
IP address blocks:        177.84.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:c9:84:f0:da:33:a1:f8:92:9c:2a:b7:b4:b8:16:a1:75:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:07:01 2026 GMT
            Not After : Sep 21 17:12:01 2027 GMT
        Subject: CN=4F8EA01C4B5C6B941D5F3880A8E6BA465FB7CD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:9f:d9:8c:8a:7a:8a:f2:87:f0:a2:8d:52:
                    c5:11:b4:fe:99:da:a3:80:07:95:fa:13:83:c9:fd:
                    c1:1f:cb:aa:f7:5e:fb:a3:08:46:86:13:19:2f:e6:
                    c1:22:72:e7:86:3e:0e:38:10:cd:53:43:c8:28:7e:
                    62:9b:6b:d0:64:e0:97:d4:eb:88:56:ae:55:2e:03:
                    db:87:96:85:47:8d:7c:de:7a:b3:dd:59:7b:bb:b7:
                    3b:3b:fb:94:83:c9:e3:f8:d6:d8:f7:f0:cb:d7:b6:
                    af:8e:c8:42:e8:91:7e:2e:bf:52:46:6b:4d:06:e1:
                    88:a3:0c:16:32:b1:83:d8:b7:e4:f2:d3:0f:79:b4:
                    29:d7:34:e7:34:d1:7d:6f:96:65:52:6e:50:05:38:
                    5c:6c:0c:02:75:6b:3f:49:5a:7e:2d:a7:b5:b3:af:
                    06:49:ae:1b:b6:bc:47:73:9b:fd:42:b1:0d:02:82:
                    b4:17:72:98:e5:71:17:2f:58:fc:77:8e:0d:53:af:
                    09:e8:11:2a:3e:24:51:f7:d8:60:5e:f0:81:d8:66:
                    22:13:5d:f1:c3:5c:89:e1:e9:4b:01:cc:46:dc:34:
                    a0:6b:b5:42:ad:83:c8:44:97:1c:b0:6a:9e:df:57:
                    16:b0:83:0a:4d:cc:e6:c7:8d:40:7b:19:b0:dc:97:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:A0:1C:4B:5C:6B:94:1D:5F:38:80:A8:E6:BA:46:5F:B7:CD:49
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130392e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:2e:4a:62:a5:4b:91:b1:1f:42:ff:47:3f:0a:8e:c6:d0:
         2a:73:fd:5a:d4:02:16:5f:30:0d:48:e3:65:63:b5:36:5a:02:
         c0:f4:44:51:79:1c:30:95:52:55:3a:ae:75:cf:42:eb:0e:01:
         99:e2:df:40:6d:f0:d2:72:dd:47:80:8d:4a:7b:1d:5a:c1:93:
         1b:b3:88:b1:59:02:bd:33:15:91:2f:d8:71:0d:f5:09:d8:fd:
         8e:45:6e:8a:73:fc:93:3c:54:38:32:23:76:61:89:93:b5:db:
         1d:c4:6d:6d:ac:f1:b3:fd:9c:f3:6f:6c:12:96:17:f0:0f:c7:
         68:be:7f:91:6a:36:e8:a2:a5:7c:bf:ea:3a:3d:ff:10:4a:f2:
         94:61:bc:aa:63:74:44:1e:a9:e1:3a:99:09:dc:93:97:95:0d:
         be:b1:fe:51:47:8b:46:df:a3:92:b3:da:3a:d3:7d:36:d6:54:
         dd:87:f5:d4:46:01:6c:8f:88:1a:3a:0b:b8:b4:fe:3b:fa:3e:
         a4:63:d1:eb:a5:12:ed:5f:83:b3:72:5e:0e:62:66:4f:4e:1d:
         31:62:2f:5d:73:24:8a:b6:b0:8b:d5:6f:4d:d7:40:83:58:03:
         55:fe:7b:01:5b:92:ef:0b:d7:9a:f8:73:87:e5:84:fb:5c:2f:
         39:2a:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:17:38 2026 by rpki-client