Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa
File:                     3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa (raw, json)
Hash identifier:          nD7gQjSC1z9MvqZeJN+6N8bDrZhMTfUZjhczEBfs9FA=
Subject key identifier:   28:E8:AF:26:50:20:3F:E4:93:E5:CE:65:70:39:59:03:A0:4B:29:A9
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       1F1A077B3C77F79B0909EBA5AEEA5488294105F0
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:16:53 +0000
ROA not before:           Mon 15 Jun 2026 22:11:53 +0000
ROA not after:            Mon 14 Jun 2027 22:16:53 +0000
asID:                     263047
IP address blocks:        177.129.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1a:07:7b:3c:77:f7:9b:09:09:eb:a5:ae:ea:54:88:29:41:05:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:11:53 2026 GMT
            Not After : Jun 14 22:16:53 2027 GMT
        Subject: CN=28E8AF2650203FE493E5CE6570395903A04B29A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:cd:fc:db:51:94:2f:e6:79:87:a4:ff:2e:
                    d9:b6:64:08:f9:db:97:ec:a1:7e:36:38:99:f9:27:
                    50:02:e4:83:50:bd:c5:46:17:3b:66:3a:00:82:13:
                    cf:f1:1a:39:13:44:04:84:bc:11:dd:63:98:2a:b5:
                    06:13:56:31:9c:bc:1a:a4:4c:9e:e6:54:bc:4e:8e:
                    83:a0:1c:24:e8:9b:71:4e:75:1a:24:3e:e1:ce:ae:
                    e4:94:d9:85:ae:ed:25:41:6e:33:a5:03:d3:7f:e2:
                    b6:a3:dd:0b:34:e0:74:f6:b0:0d:ab:c8:62:79:65:
                    39:cf:77:65:28:14:08:bd:a5:13:a5:dd:df:f1:65:
                    09:15:a1:07:c9:0e:9a:a6:a4:f1:ef:79:fb:34:f2:
                    50:e3:7d:85:c1:85:d1:0d:4a:49:58:7b:f4:a6:2a:
                    96:3d:fa:26:ad:a3:b3:54:c5:1f:5b:b4:05:4b:a8:
                    f8:c2:32:5b:e2:5d:c8:d1:7b:a7:03:a2:63:f0:11:
                    43:39:9e:8a:a2:d2:df:4c:3c:18:69:d6:0a:cd:26:
                    1c:5a:07:77:2f:d8:26:c0:32:94:f6:1a:cb:1f:e8:
                    09:2e:00:7c:a2:9c:b6:c5:59:8d:11:4d:71:80:de:
                    d1:38:03:0e:0d:2a:95:69:20:a4:02:8b:86:1a:bf:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:AF:26:50:20:3F:E4:93:E5:CE:65:70:39:59:03:A0:4B:29:A9
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:d0:c1:0e:9b:2e:e5:62:35:cb:73:aa:00:17:55:e7:3e:
         43:a9:7c:db:16:62:34:0c:1a:c0:b9:d5:a6:10:2e:cb:12:03:
         1e:28:60:d8:b3:e5:08:0d:cd:76:96:7d:13:b5:c6:72:07:29:
         06:54:63:79:16:5f:52:69:10:fa:a6:60:1e:10:58:ae:01:ce:
         66:76:a4:ee:15:f5:fa:fd:60:fa:ca:5d:c4:13:b4:89:b9:69:
         98:b7:29:33:82:a9:04:f7:bc:4a:8f:97:50:59:c3:60:ff:17:
         65:2d:d0:c0:7a:d3:54:df:13:f5:24:2d:be:a5:55:a5:61:be:
         ca:df:40:21:e2:d9:07:a6:94:b7:39:4b:fd:c6:d0:f7:00:13:
         53:21:e5:84:79:83:e0:2e:ee:4c:56:41:fa:d3:20:0a:b8:07:
         9e:52:8d:a0:1d:7a:c6:24:12:2f:6c:41:1b:84:aa:8f:8d:38:
         44:c0:a6:b4:2f:30:b0:6b:58:c6:9b:0c:43:38:67:b9:5d:ea:
         fe:e4:0a:27:fa:69:95:ab:bb:49:88:18:c5:ce:19:02:44:21:
         b0:b4:f0:99:01:e3:17:82:16:d6:88:02:78:bb:b2:17:f9:94:
         fb:30:61:ef:5e:30:a0:a0:80:27:f6:d3:04:be:d1:55:1c:30:
         41:5b:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:11 2026 by rpki-client