Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131302e302f32342d3234203d3e203532373231.roa
File:                     3137372e38342e3131302e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          vaz+t015yrfMbBIXJ6EEv61VovgCcCKwW4TxNdmd7A8=
Subject key identifier:   5D:CA:D8:63:15:46:53:7F:2E:42:6A:BE:A5:86:47:DF:15:AF:C2:7E
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       40547C4795701775F88F78021D36212CD7E1AC77
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131302e302f32342d3234203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:11:55 +0000
ROA not before:           Tue 22 Sep 2026 17:06:55 +0000
ROA not after:            Tue 21 Sep 2027 17:11:55 +0000
asID:                     52721
IP address blocks:        177.84.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:7c:47:95:70:17:75:f8:8f:78:02:1d:36:21:2c:d7:e1:ac:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:06:55 2026 GMT
            Not After : Sep 21 17:11:55 2027 GMT
        Subject: CN=5DCAD8631546537F2E426ABEA58647DF15AFC27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:80:81:58:12:0e:65:77:0a:af:e9:90:0c:
                    48:09:52:c8:81:86:41:02:76:9f:53:a2:2e:84:d9:
                    bd:60:5a:60:c2:29:90:7d:73:94:bf:86:0e:7d:d5:
                    29:c4:54:1f:1c:a9:2d:2f:6c:64:ac:88:8f:26:e5:
                    67:77:78:53:9c:8c:9d:7d:42:a4:2d:0b:da:03:7f:
                    ee:cc:a9:09:7a:f3:5c:5b:ec:31:76:f7:ed:26:dc:
                    21:ff:56:ae:37:e2:e9:ac:a9:6b:fe:c2:15:c5:50:
                    7c:31:68:e5:1a:16:50:aa:87:22:c4:78:27:d7:db:
                    82:83:a0:eb:90:3e:e7:d2:50:89:52:b3:d6:35:80:
                    bc:53:e6:48:f2:9d:de:b5:27:4b:8d:f3:25:70:38:
                    d3:3a:92:01:7c:fb:6f:d5:e3:74:8d:dc:56:9b:1f:
                    b0:dd:72:c0:5d:67:9a:7d:e6:4d:0a:08:ff:51:fd:
                    31:c5:07:6c:db:a3:42:7f:c2:0d:63:b4:40:d5:e5:
                    88:6d:9c:d0:de:a2:90:4e:8f:cc:a8:00:8a:69:c7:
                    bd:2a:89:f7:52:7e:ff:78:41:96:af:15:c2:62:c1:
                    9b:04:07:fb:5d:1b:70:96:82:67:f6:a2:fc:8c:a4:
                    37:00:c4:91:8d:a6:26:5e:2f:41:ca:75:2f:d9:a9:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CA:D8:63:15:46:53:7F:2E:42:6A:BE:A5:86:47:DF:15:AF:C2:7E
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131302e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:a9:95:ef:d9:44:2a:8e:a8:2c:60:76:d0:2d:81:04:3d:
         21:ed:af:2b:ee:88:24:dd:ca:ea:11:ce:8c:7d:67:17:6f:a5:
         e1:da:c7:51:b6:81:b4:db:95:f8:c6:f1:70:a1:23:f5:72:a3:
         01:90:f4:4e:66:a1:33:a5:f6:9f:50:29:29:8a:53:8f:00:93:
         70:eb:b8:66:fb:36:6e:0e:20:c7:26:26:46:e4:ff:a6:3d:8f:
         eb:0b:19:70:3f:63:58:73:69:8d:39:f5:20:7a:cf:2d:29:32:
         4e:fe:da:02:0f:0a:98:3c:36:22:94:3e:0f:d4:bf:a8:e1:2b:
         0d:79:94:38:64:4b:e1:ae:2e:36:9f:9f:b2:f5:3a:2c:69:29:
         75:79:bc:a4:a8:88:78:e8:2d:79:4e:89:40:ed:03:05:66:59:
         9d:8d:af:d3:41:6f:09:7f:9d:3f:b2:bd:ac:eb:0c:33:af:15:
         58:8a:06:af:b2:df:d0:74:16:5e:84:3d:7a:33:fb:0b:53:4b:
         51:26:e4:e5:8a:2e:4d:a8:57:95:cf:a2:3d:d5:9b:d7:ed:a5:
         93:68:08:0f:89:4d:35:6d:a0:fc:72:19:85:cb:77:95:b2:e6:
         d5:ab:67:eb:90:f0:5a:30:a8:97:13:da:b1:cb:7f:d1:df:38:
         f2:18:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:29:28 2026 by rpki-client