Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/3137372e33382e39322e302f32322d3332203d3e20323633333035.roa
File:                     3137372e33382e39322e302f32322d3332203d3e20323633333035.roa (raw, json)
Hash identifier:          RJBWLnHOqOmS26OCH9FtUrHMdXh/7btoMckvgSfJd98=
Subject key identifier:   85:3E:E2:BB:5D:95:99:F4:E0:F0:2E:39:D6:BF:A5:46:FB:73:37:F4
Certificate issuer:       /CN=10C95EFEF43982334E05F987C6B1F476980914C2
Certificate serial:       3F4D7CDAD3796BB10CCA00D58ABA672EFC0D3697
Authority key identifier: 10:C9:5E:FE:F4:39:82:33:4E:05:F9:87:C6:B1:F4:76:98:09:14:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C95EFEF43982334E05F987C6B1F476980914C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/3137372e33382e39322e302f32322d3332203d3e20323633333035.roa
Signing time:             Wed 08 Jul 2026 12:43:57 +0000
ROA not before:           Wed 08 Jul 2026 12:38:57 +0000
ROA not after:            Wed 07 Jul 2027 12:43:57 +0000
asID:                     263305
IP address blocks:        177.38.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/10C95EFEF43982334E05F987C6B1F476980914C2.crl
                          rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/10C95EFEF43982334E05F987C6B1F476980914C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C95EFEF43982334E05F987C6B1F476980914C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4d:7c:da:d3:79:6b:b1:0c:ca:00:d5:8a:ba:67:2e:fc:0d:36:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C95EFEF43982334E05F987C6B1F476980914C2
        Validity
            Not Before: Jul  8 12:38:57 2026 GMT
            Not After : Jul  7 12:43:57 2027 GMT
        Subject: CN=853EE2BB5D9599F4E0F02E39D6BFA546FB7337F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:0c:2c:74:a0:70:f5:a3:78:87:3f:8d:69:
                    8a:23:57:60:ce:ae:ef:4d:45:1f:2d:27:1f:2e:aa:
                    83:f8:74:25:c9:fb:e1:14:e3:55:48:58:d1:0f:bd:
                    a2:4a:b2:04:5c:5e:91:d0:92:d8:bb:2a:37:e2:9d:
                    c0:55:8b:63:14:25:a5:70:b4:4f:6b:11:40:aa:8d:
                    e9:2e:09:6b:5f:ab:5f:00:60:46:be:a0:18:e1:84:
                    4c:d8:b3:cc:94:61:97:48:72:a8:e5:97:ed:d1:e7:
                    db:12:3e:a5:41:1e:3b:e9:38:4c:de:45:95:5a:e3:
                    bf:6e:58:c6:24:27:5f:68:dd:72:3f:75:7f:07:68:
                    e8:b8:b3:d9:36:75:87:5b:11:00:af:51:5a:87:8f:
                    e0:6c:cf:e6:3e:6f:f0:3a:65:b0:1c:92:c3:5e:7d:
                    6e:e0:06:be:56:03:cf:8d:24:a1:74:1f:9b:11:ff:
                    d8:98:a2:47:f2:10:59:ad:1f:30:6d:f3:83:2a:90:
                    40:a2:8b:67:dd:c9:c5:93:86:05:19:07:a7:a3:cb:
                    70:d8:3a:53:07:ee:9f:d3:e6:35:d0:83:4d:4b:9d:
                    77:9f:1b:fd:cb:97:ce:90:70:31:7a:fa:17:e9:ab:
                    5f:23:67:d8:a4:2a:fa:0e:fc:f4:33:64:80:bb:e8:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:E2:BB:5D:95:99:F4:E0:F0:2E:39:D6:BF:A5:46:FB:73:37:F4
            X509v3 Authority Key Identifier:
                keyid:10:C9:5E:FE:F4:39:82:33:4E:05:F9:87:C6:B1:F4:76:98:09:14:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/10C95EFEF43982334E05F987C6B1F476980914C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C95EFEF43982334E05F987C6B1F476980914C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/3137372e33382e39322e302f32322d3332203d3e20323633333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:63:f6:d9:96:1e:5b:83:45:e3:6f:21:96:dd:aa:5f:c4:92:
         08:a6:b8:f5:a0:e4:be:43:c3:4d:ed:eb:b7:95:5b:d5:2b:19:
         00:a6:77:b7:f8:41:f2:25:a1:59:1d:ab:26:91:49:92:a5:53:
         24:57:16:0e:fe:8c:c5:8f:d6:f9:9b:ec:cf:7d:4f:8e:b0:7e:
         52:04:36:df:8c:51:5d:31:6a:81:66:2e:69:44:81:d9:1d:8a:
         16:d6:5a:59:0a:1e:14:d6:c9:d6:b7:45:32:10:2d:22:15:cb:
         8a:02:25:9f:ac:b2:4f:3f:98:8e:33:90:ee:92:d5:cd:3a:64:
         64:0d:b1:da:64:26:68:4a:ed:54:b8:f9:88:c0:66:87:ff:bc:
         e7:3c:72:7d:8b:2e:3c:47:72:e4:f0:6e:88:c8:04:69:92:63:
         c1:13:49:75:70:e3:10:dd:67:c2:7a:ec:af:b2:3c:10:9c:a1:
         28:90:1d:2d:34:29:f8:08:11:f3:55:d7:b8:cd:ec:b8:09:d4:
         da:0f:a8:36:5f:f8:92:fd:bf:26:8b:83:d6:3f:ea:f7:48:aa:
         0d:b6:62:c7:52:a2:97:41:8e:8d:0c:70:00:25:85:b4:e1:6e:
         a4:cf:39:a4:a9:34:cc:2a:fd:44:d1:c9:a3:30:a4:72:e5:c2:
         d0:5d:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:00:52 2026 by rpki-client