Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32332d3233203d3e20323632393935.roa
File:                     3137372e37302e3234382e302f32332d3233203d3e20323632393935.roa (raw, json)
Hash identifier:          4UTXw9nOs/0Rb3MEjDazckG7oXgUwkkvATZTLHcYAe4=
Subject key identifier:   37:E9:D2:F4:D5:1C:4D:6A:69:18:F3:C9:A7:E4:2A:03:A4:90:8D:D2
Certificate issuer:       /CN=8132D5957E193240246C2622115FA8F1706B3CE2
Certificate serial:       2B1CAC58851D3552E5BDCF3351788FD078087392
Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32332d3233203d3e20323632393935.roa
Signing time:             Wed 29 Jul 2026 20:44:13 +0000
ROA not before:           Wed 29 Jul 2026 20:39:13 +0000
ROA not after:            Thu 29 Jul 2027 20:44:13 +0000
asID:                     262995
IP address blocks:        177.70.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl
                          rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1c:ac:58:85:1d:35:52:e5:bd:cf:33:51:78:8f:d0:78:08:73:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2
        Validity
            Not Before: Jul 29 20:39:13 2026 GMT
            Not After : Jul 29 20:44:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:9f:98:37:98:3c:cf:46:87:e6:24:a5:b9:
                    2f:6b:74:22:08:64:58:70:a7:39:0f:09:99:39:1d:
                    f2:fd:e2:d7:1f:42:b4:65:f6:0b:67:53:66:20:a9:
                    07:99:07:e3:b0:b6:74:c2:a0:31:a9:7d:b1:a1:8e:
                    86:59:00:d7:2d:e7:a0:18:e2:e9:6a:88:fb:ab:72:
                    dc:76:7b:24:d0:e1:55:55:d7:3b:f2:ea:ed:46:58:
                    97:e2:b7:63:0a:c4:1d:e6:7b:5a:d6:a5:0f:2d:93:
                    54:c4:46:9e:33:2e:8c:26:58:cf:92:fa:d3:7d:ca:
                    84:66:bb:5c:5c:61:52:32:af:4c:85:e7:22:36:1b:
                    94:a8:e9:e1:42:10:16:06:2b:61:7c:77:8b:c5:59:
                    97:85:63:26:e2:fe:fb:74:89:c5:38:7e:13:d1:cb:
                    6c:0b:af:9f:f4:35:80:e2:0b:9e:44:bd:88:75:a9:
                    0a:45:67:09:dd:44:81:d4:c7:b7:57:08:55:8c:e2:
                    5b:86:70:ce:95:75:62:7f:27:76:28:31:cc:7e:8c:
                    81:81:70:92:79:a0:7d:d2:79:81:20:da:43:72:11:
                    d2:80:7e:cb:64:dd:1b:d2:5e:58:86:5d:46:cc:08:
                    10:78:bc:dc:84:ac:54:80:d0:d8:c0:f5:c1:11:d4:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E9:D2:F4:D5:1C:4D:6A:69:18:F3:C9:A7:E4:2A:03:A4:90:8D:D2
            X509v3 Authority Key Identifier:
                keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3137372e37302e3234382e302f32332d3233203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:95:fb:3b:b8:8f:a1:fb:e5:93:45:85:56:9b:f7:83:b0:97:
         82:b1:32:65:7c:b8:07:3e:f5:cf:96:c5:29:83:f4:fd:bb:7e:
         b6:10:58:e7:9e:30:47:ca:d0:d4:c9:84:49:65:29:2b:cd:cd:
         48:01:98:1a:46:6d:0e:5f:e5:07:08:e3:ed:6b:7f:d0:9c:75:
         25:e1:d3:97:86:55:9d:0b:ce:09:49:2c:34:df:2d:3a:3a:de:
         a5:8a:13:d8:c9:7d:ac:bb:e6:83:d7:02:e8:11:33:67:99:48:
         33:8d:e6:01:60:a2:2f:af:f2:0c:4a:93:25:58:98:00:99:ef:
         42:af:d7:e2:cb:fa:18:94:a3:9d:97:69:91:19:60:ae:b2:c5:
         9a:24:95:57:dc:f4:d3:73:2f:0c:51:f3:6f:b7:da:f7:c5:b0:
         0f:3a:6c:97:8d:25:a4:84:19:0f:f7:12:82:cc:4c:c2:c4:f5:
         15:74:54:f4:dc:21:c7:f8:4f:e5:48:62:62:bd:e0:e1:3d:b6:
         70:c1:9a:83:a3:47:31:cf:4b:ea:a6:90:02:ef:1a:06:42:6d:
         36:68:7a:47:e4:41:12:f0:4c:c7:3f:19:90:f0:00:11:47:3d:
         10:07:0e:d9:83:7d:9a:0f:17:0c:9d:fe:bb:0e:d0:6d:cd:2f:
         86:ed:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:29 2026 by rpki-client