Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa
File:                     3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (raw, json)
Hash identifier:          +4JsBCcsE7rEuzhR9oyHzKUEaZ3+cSjKN2u0aldSpjs=
Subject key identifier:   51:E2:6E:16:2B:CF:E5:E1:DE:9D:DF:2B:D1:F4:B4:E2:F6:4D:4C:E7
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       634453A3EB3CFEE3C608DA9A1E09767A6B06D5F3
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa
Signing time:             Fri 23 Jan 2026 13:49:02 +0000
ROA not before:           Fri 23 Jan 2026 13:44:02 +0000
ROA not after:            Fri 22 Jan 2027 13:49:02 +0000
asID:                     52848
IP address blocks:        177.85.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:44:53:a3:eb:3c:fe:e3:c6:08:da:9a:1e:09:76:7a:6b:06:d5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Jan 23 13:44:02 2026 GMT
            Not After : Jan 22 13:49:02 2027 GMT
        Subject: CN=51E26E162BCFE5E1DE9DDF2BD1F4B4E2F64D4CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:86:9a:08:83:cf:4a:a8:05:d1:b3:5f:db:
                    00:03:33:01:f5:d1:eb:2a:5f:1c:da:37:fe:82:c2:
                    01:bc:a8:60:15:34:d8:37:4e:f9:2f:7d:40:40:d5:
                    d7:aa:32:c0:d1:d7:fd:ab:f6:01:74:dc:b9:99:f0:
                    1a:45:57:a3:d0:10:5c:84:28:94:8c:34:1e:42:6e:
                    3f:18:9d:ba:10:5c:2b:d4:08:30:23:98:b6:0a:33:
                    4b:fb:d9:12:c3:5f:96:ff:43:41:2e:44:23:0e:3b:
                    54:5f:8d:9f:7f:9a:5c:5b:4f:f3:6b:ae:55:49:2a:
                    b3:75:53:c8:aa:ff:68:20:62:63:2f:73:b5:8a:9e:
                    a1:d8:3a:59:20:ab:3f:ee:88:9d:97:20:1d:59:e6:
                    35:5a:82:b1:b9:a0:c8:67:ab:bc:06:6d:b5:cb:c6:
                    63:4f:12:ee:ca:5a:63:e1:89:7e:9c:f0:36:08:a1:
                    8c:36:aa:06:b9:b9:c4:f8:90:61:bf:86:b8:51:ea:
                    30:12:64:ab:72:40:6b:47:0f:a5:5c:01:85:a0:d9:
                    9b:d9:58:44:49:65:d8:bf:9d:0d:83:b0:04:ed:0d:
                    a6:c5:8e:21:1e:f0:a4:e1:06:29:66:f1:54:65:7d:
                    99:fd:ea:95:5a:1f:85:c6:81:98:ef:20:9c:1a:99:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:6E:16:2B:CF:E5:E1:DE:9D:DF:2B:D1:F4:B4:E2:F6:4D:4C:E7
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:5c:da:e5:88:ff:5f:e0:b0:57:bd:40:fc:dc:c7:95:48:
         4e:ba:59:d8:10:63:bd:6e:45:cb:32:af:59:e7:84:b4:cb:eb:
         52:36:e4:81:85:40:a6:18:4b:04:f9:49:a5:eb:8e:0d:56:76:
         eb:73:7c:f2:c2:8e:e0:79:47:5a:05:0b:b5:4b:4f:c8:d5:07:
         55:45:db:40:d1:29:57:43:23:54:e3:84:67:4f:94:e1:a2:ad:
         01:70:3c:dd:3d:a6:61:1b:77:49:09:30:7e:4e:68:b6:8a:6e:
         e6:6c:8c:75:37:e5:b3:fa:d5:6b:98:5f:2e:c3:63:dd:80:d5:
         68:92:f9:c8:02:d8:47:1e:29:d5:94:e1:c7:55:45:1b:ec:4e:
         14:98:2f:25:6a:4f:e6:0c:1c:51:92:de:f8:5f:fd:1e:c6:34:
         0d:a2:df:0d:87:58:11:3a:1b:5c:11:f0:5d:5b:00:d6:49:8f:
         58:91:0f:f5:9b:8e:0c:e5:0a:cd:04:a2:61:1c:8e:43:df:ea:
         6b:78:bd:6d:16:bf:9f:99:51:82:e1:15:2e:74:71:f4:7f:d2:
         a9:56:d1:6c:78:12:84:46:bc:91:ae:7d:98:c7:69:50:7d:a0:
         6e:af:de:c7:3a:b8:ba:57:f5:72:fe:e3:3c:72:98:ec:8d:3e:
         bf:15:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:39:38 2026 by rpki-client