Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa
File:                     3137372e38352e36342e302f32312d3332203d3e20323632363030.roa (raw, json)
Hash identifier:          1ciKKGR0cCzp3wCTnrhraPE+GF62qCiQLyCZwCZHkI0=
Subject key identifier:   D3:C1:90:CF:49:90:2F:4F:59:F0:FF:97:81:F9:8A:6B:2F:59:E5:B8
Certificate issuer:       /CN=2C026C533949466083DC24DD87078E6D8F21B1EA
Certificate serial:       27D3B626529A0D2CE77F502D7450B3E28A5C2AE4
Authority key identifier: 2C:02:6C:53:39:49:46:60:83:DC:24:DD:87:07:8E:6D:8F:21:B1:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa
Signing time:             Mon 03 Aug 2026 16:11:28 +0000
ROA not before:           Mon 03 Aug 2026 16:06:28 +0000
ROA not after:            Mon 02 Aug 2027 16:11:28 +0000
asID:                     262600
IP address blocks:        177.85.64.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.crl
                          rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d3:b6:26:52:9a:0d:2c:e7:7f:50:2d:74:50:b3:e2:8a:5c:2a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C026C533949466083DC24DD87078E6D8F21B1EA
        Validity
            Not Before: Aug  3 16:06:28 2026 GMT
            Not After : Aug  2 16:11:28 2027 GMT
        Subject: CN=D3C190CF49902F4F59F0FF9781F98A6B2F59E5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:cd:4f:6a:1a:57:51:26:19:e4:c0:51:d0:
                    40:e2:c0:85:42:72:83:1f:8c:85:3b:61:cd:d8:31:
                    02:55:43:c8:15:06:92:9d:98:52:26:2a:ff:9e:b9:
                    d0:a1:60:bd:b6:f7:8f:75:f7:f2:28:02:17:c5:63:
                    b1:b3:8c:96:55:13:1c:65:bc:b2:b3:b2:67:ed:14:
                    31:19:85:c6:4a:7b:3f:1b:5a:8e:06:2a:cf:c7:0c:
                    08:c3:52:75:b5:e5:ca:2a:8f:9f:f5:42:46:25:88:
                    48:c5:71:ef:70:68:33:49:48:1a:48:18:c3:93:a0:
                    f2:30:1b:2c:85:20:11:be:f3:41:63:c9:8f:33:4e:
                    0f:3d:b0:67:0c:1b:91:9c:26:4f:2e:9b:71:cd:fa:
                    55:58:65:97:d3:c6:bc:ea:d2:ac:fa:27:ac:d0:74:
                    27:ff:81:ed:f2:30:a7:69:74:d2:d2:fc:97:19:2c:
                    28:80:69:70:be:ba:36:06:6c:af:22:39:33:e6:d1:
                    3a:04:98:50:1a:0c:21:fb:48:35:54:d7:38:9b:34:
                    c9:6e:cb:a5:fa:35:96:1f:b6:c1:76:b6:d1:06:c3:
                    1e:8f:9e:53:9a:6b:03:78:21:b8:50:d1:e4:80:6c:
                    f6:c5:14:22:e6:0c:39:89:2c:4a:cd:dc:b8:27:c3:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:90:CF:49:90:2F:4F:59:F0:FF:97:81:F9:8A:6B:2F:59:E5:B8
            X509v3 Authority Key Identifier:
                keyid:2C:02:6C:53:39:49:46:60:83:DC:24:DD:87:07:8E:6D:8F:21:B1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:86:8c:7f:1f:dd:91:16:cc:a2:c7:c7:b3:21:60:45:72:6e:
         93:c6:a3:80:39:05:c3:4c:10:9b:74:a1:bd:f4:c8:4d:9a:8e:
         ca:ee:6b:cc:6c:ec:7f:6b:70:d6:27:4c:70:53:7f:8b:2c:58:
         63:5b:81:9e:9f:9a:ff:86:ac:f9:6a:3e:74:95:e1:e8:92:80:
         85:82:d0:1d:88:21:ba:8f:f0:e0:9c:bb:4d:7f:48:00:98:f2:
         65:f9:7d:c9:18:cb:79:87:bc:d4:5b:26:d6:98:49:a6:f3:ed:
         98:71:9d:29:e6:67:02:49:b1:a9:ab:d5:05:56:35:03:35:45:
         69:d7:c6:dc:ff:2b:80:e7:12:ae:17:ed:d6:cc:37:a5:ce:75:
         4b:a6:d0:e1:90:f5:ec:cf:7a:81:72:3c:59:7e:d2:77:c2:c6:
         21:6c:74:dc:83:ad:87:f4:fa:75:60:74:0e:b5:a7:91:5e:86:
         ff:76:f3:e6:23:2a:fa:66:35:c7:79:cf:5f:e4:5a:a0:ff:37:
         83:b3:4f:69:94:86:85:31:ea:2f:37:51:6b:02:55:64:ff:21:
         9b:83:32:f2:05:21:24:55:8c:e0:ba:f4:0e:8e:d5:ef:7f:e6:
         4e:f6:20:0d:82:e6:17:bb:a0:24:14:3f:be:4a:cb:51:77:01:
         d6:5a:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:38 2026 by rpki-client