Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa
File:                     3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa (raw, json)
Hash identifier:          Afsnf0MY2JDJSFS8HSs7W7juoG1Ujo5CXnzqkkx4yjk=
Subject key identifier:   A6:A4:B5:76:E1:A0:C4:06:2D:F2:20:46:88:35:49:55:FF:4A:AB:5A
Certificate issuer:       /CN=65885412A2FFF672C397D2A2E7C55EBA77DBABA0
Certificate serial:       314D458503E73F307D3036E825134AB6606DF911
Authority key identifier: 65:88:54:12:A2:FF:F6:72:C3:97:D2:A2:E7:C5:5E:BA:77:DB:AB:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa
Signing time:             Fri 23 Oct 2026 18:24:20 +0000
ROA not before:           Fri 23 Oct 2026 18:19:20 +0000
ROA not after:            Fri 22 Oct 2027 18:24:20 +0000
asID:                     262608
IP address blocks:        177.85.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 11:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4d:45:85:03:e7:3f:30:7d:30:36:e8:25:13:4a:b6:60:6d:f9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65885412A2FFF672C397D2A2E7C55EBA77DBABA0
        Validity
            Not Before: Oct 23 18:19:20 2026 GMT
            Not After : Oct 22 18:24:20 2027 GMT
        Subject: CN=A6A4B576E1A0C4062DF2204688354955FF4AAB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:90:bf:e5:65:84:da:1c:41:bf:ab:ec:c0:
                    fe:4f:99:c5:84:cd:8e:92:91:c9:71:f8:cc:22:c3:
                    fd:f5:21:dd:b2:4b:24:e5:71:91:b8:c1:9a:03:94:
                    0c:4f:1b:a6:98:e2:61:6e:93:d2:72:f6:68:6b:27:
                    0b:d5:81:cd:e0:f1:24:13:27:33:06:88:48:41:c1:
                    09:c4:45:0a:0c:d8:e7:61:7d:95:1e:62:d3:4f:02:
                    4d:21:43:e5:81:4c:47:b2:83:90:2f:35:c5:e4:71:
                    f2:8c:aa:98:b9:64:06:1b:27:c3:44:0e:ab:c5:46:
                    80:55:3d:ee:62:1a:30:ce:24:89:e3:bb:5c:36:91:
                    06:04:59:31:9e:80:9a:dd:a3:a4:7c:90:95:85:0d:
                    1c:47:1a:29:61:a8:4c:02:13:d9:63:c4:d3:75:5b:
                    10:ce:46:63:67:5e:fd:27:57:7f:dc:ce:8f:f0:61:
                    97:02:b8:ef:75:ab:b9:92:e9:82:9f:0b:2d:a9:37:
                    78:0c:21:bf:9e:2a:6e:0b:61:23:d2:29:65:aa:ee:
                    f9:77:97:65:71:7c:63:81:44:08:db:bd:02:71:fb:
                    8c:c0:61:c0:b7:1f:cc:29:40:aa:a6:32:c3:22:0a:
                    82:69:53:c8:13:6b:13:7e:bb:39:4f:76:26:42:66:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A4:B5:76:E1:A0:C4:06:2D:F2:20:46:88:35:49:55:FF:4A:AB:5A
            X509v3 Authority Key Identifier:
                keyid:65:88:54:12:A2:FF:F6:72:C3:97:D2:A2:E7:C5:5E:BA:77:DB:AB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65885412A2FFF672C397D2A2E7C55EBA77DBABA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:c8:40:ac:a8:59:5d:8d:10:4a:28:e4:b3:57:03:f1:c4:
         03:99:18:b2:2a:5d:3e:04:a4:d4:e9:b6:0b:ed:fe:9f:b6:d8:
         d3:34:4a:85:e3:b0:e9:df:91:49:51:19:8c:4d:68:ec:ff:be:
         31:29:d9:f0:ed:d5:7d:fc:ae:49:46:d7:95:cd:43:1c:50:6e:
         a7:dc:83:57:6d:b8:96:ee:da:2f:b9:0d:82:bd:c4:d8:3b:ad:
         10:7a:e2:b8:20:20:ca:32:23:7f:1e:b2:23:46:cc:66:35:50:
         e7:75:d1:32:71:e5:a6:04:9e:08:b4:53:f3:8d:c7:64:2c:74:
         ed:6f:f6:91:5d:e0:58:cc:9f:80:c2:c3:42:65:cd:3c:82:5e:
         3d:1d:ac:80:85:f9:b2:5f:a5:5d:8e:38:24:19:87:04:2a:ae:
         be:dc:54:54:61:bc:f9:10:3a:7e:a6:52:6b:c8:32:09:fd:2a:
         b7:46:d3:2c:9f:d5:df:30:46:8a:1d:21:ad:6e:31:f5:dd:4e:
         19:5d:24:d0:7b:ce:77:4a:f0:fa:dd:61:95:4b:d1:a1:04:bc:
         40:fe:8c:7a:7d:cc:45:0f:95:ea:64:3b:b4:d4:06:81:30:54:
         c5:9e:1b:d2:01:b7:10:91:8d:e1:51:e9:66:e3:aa:79:25:1f:
         15:6a:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:14:53 2026 by rpki-client