Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35332e3135362e302f32322d3332203d3e20323638393736.roa
File:                     3137372e35332e3135362e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          SPT/Bugtj80OO7IqyjVxi+8mlZ+B9jkc3x60A39L+YY=
Subject key identifier:   60:EF:43:69:85:08:79:CB:B7:1B:6E:5C:F9:42:8B:AE:E0:02:CB:96
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       3BCD6B70B5DE88990807DD58C3D8D8B433D93295
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35332e3135362e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 18:00:46 +0000
ROA not before:           Mon 06 Apr 2026 17:55:46 +0000
ROA not after:            Mon 05 Apr 2027 18:00:46 +0000
asID:                     268976
IP address blocks:        177.53.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:6b:70:b5:de:88:99:08:07:dd:58:c3:d8:d8:b4:33:d9:32:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:55:46 2026 GMT
            Not After : Apr  5 18:00:46 2027 GMT
        Subject: CN=60EF4369850879CBB71B6E5CF9428BAEE002CB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:c0:57:ff:c5:73:f1:65:39:a8:1f:69:5d:
                    3c:dc:9b:ad:d4:a7:81:d7:47:32:f9:49:a6:98:60:
                    7d:a7:8f:7a:78:f2:1c:38:d7:6b:0f:e8:86:2c:ee:
                    04:b8:8c:c1:51:22:0c:3c:b6:6a:f2:26:27:ab:83:
                    bb:7d:3c:a6:6b:f4:1b:6e:0c:61:bf:08:8f:64:45:
                    b3:66:7b:11:85:b7:41:a3:56:d9:66:77:74:17:ec:
                    ce:11:19:a8:8e:42:05:3d:03:f9:71:d3:d5:f0:c2:
                    b4:a1:c5:89:1f:63:3d:ed:4f:99:21:2b:1f:b2:a0:
                    e6:02:99:27:12:e1:99:77:d6:52:5c:a1:05:34:64:
                    a5:c1:21:57:76:ac:bf:29:8a:d6:95:42:0c:87:2e:
                    39:ee:71:95:88:db:8b:04:9b:f1:68:72:8e:d9:e2:
                    99:16:2d:0b:e9:2a:35:93:d8:f8:2c:c5:a6:7f:96:
                    03:f4:b4:43:0c:d4:57:45:1e:f2:70:b4:72:4a:b2:
                    84:c5:45:03:0b:71:e9:30:3c:35:d4:f2:8e:7c:88:
                    81:e9:fd:37:96:a7:f8:5d:6b:b5:be:41:28:c3:19:
                    0f:24:c3:dc:f6:22:84:6b:aa:d7:34:3d:05:d7:36:
                    57:93:92:cc:e2:45:a4:c8:56:32:9c:f6:33:27:07:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:43:69:85:08:79:CB:B7:1B:6E:5C:F9:42:8B:AE:E0:02:CB:96
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e35332e3135362e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:c3:3c:f6:6d:d6:71:41:8c:a1:18:37:af:4f:83:a1:b7:
         b9:17:fb:9a:d1:50:a4:c2:71:70:47:bd:33:53:77:bc:33:aa:
         71:f6:62:f9:70:23:56:51:1d:36:99:0d:38:41:0f:15:ab:36:
         eb:2e:6b:d0:6a:cf:7c:2f:f4:54:6c:75:90:20:7b:40:cc:84:
         28:18:d6:7b:12:a8:58:e3:04:b8:43:08:79:fa:20:cd:87:fe:
         eb:ea:13:f8:53:df:c6:29:6e:a2:c1:28:15:4c:9b:41:45:e5:
         3e:ef:e8:27:5a:4a:1d:d7:52:e0:a4:2e:1c:cf:ca:3c:23:0b:
         2b:9c:f8:8c:3e:ab:ed:0f:ec:3c:5a:79:53:c0:09:97:14:26:
         e2:ac:c6:b2:84:a3:37:f7:fa:47:07:83:cd:cc:df:8c:24:a8:
         3e:d2:5e:78:d6:85:9c:ef:a0:3d:5d:b4:8e:fb:6a:55:c6:2a:
         d4:21:a6:7e:dc:bc:e3:91:66:c7:2a:84:11:6c:e0:ec:d9:e2:
         29:80:06:16:ff:7b:82:ea:19:72:86:c5:6c:23:f2:a1:e7:fc:
         98:6e:fc:01:db:9f:5e:59:67:eb:88:01:6c:50:08:27:45:5a:
         45:6c:64:86:63:cb:fd:61:8a:fb:72:36:15:6f:f2:6a:80:af:
         18:09:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:20:07 2026 by rpki-client