Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34332e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          D54yM4PqRxjpa3PHa26CBOg+VyWvhjz7LXBkuBqDO2M=
Subject key identifier:   31:77:91:36:62:A7:95:9F:CF:BB:BA:C4:FA:29:89:2C:A4:BC:66:C9
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4CDDAD14E8785FC8ED5CF7F6E7010E2E9F449D6E
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 23 Jul 2026 20:09:03 +0000
ROA not before:           Thu 23 Jul 2026 20:04:03 +0000
ROA not after:            Thu 22 Jul 2027 20:09:03 +0000
asID:                     52871
IP address blocks:        177.136.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 04:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dd:ad:14:e8:78:5f:c8:ed:5c:f7:f6:e7:01:0e:2e:9f:44:9d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jul 23 20:04:03 2026 GMT
            Not After : Jul 22 20:09:03 2027 GMT
        Subject: CN=3177913662A7959FCFBBBAC4FA29892CA4BC66C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:d1:2a:6c:0e:d1:32:1d:3c:ba:04:02:6e:
                    9b:70:18:5a:57:60:7c:77:f3:4d:a9:a5:7e:f1:c5:
                    17:87:40:d4:15:77:30:dc:a3:a5:d3:94:77:32:86:
                    95:10:fe:ef:fa:3e:a3:48:32:08:71:be:3a:b1:52:
                    46:62:e5:5d:f6:d3:3b:66:ab:b5:54:b8:96:ce:06:
                    f9:81:ae:dd:47:40:59:60:c4:42:f2:be:57:0a:4c:
                    2e:1c:5a:71:77:69:7d:a7:97:e0:fb:66:1d:3e:bd:
                    aa:a1:ea:49:a5:69:6c:e3:a7:59:23:bc:b2:15:3b:
                    f3:ce:c6:f7:03:5d:c1:a9:d1:7e:43:cc:54:71:18:
                    d8:89:da:03:8d:39:c8:ad:03:03:31:36:2d:3d:f0:
                    d0:8f:ef:f5:f7:45:c1:8b:85:5e:a1:eb:6c:2e:2e:
                    98:1a:dd:c4:b1:94:2b:9f:96:8c:8d:a6:b4:f2:33:
                    10:3f:c2:53:57:85:c9:86:ae:56:6c:77:5a:f2:e9:
                    82:54:d5:07:72:2f:fa:e3:8c:16:74:55:13:8e:f7:
                    33:56:9a:0a:b3:9f:12:1a:5f:5b:ad:5f:00:e2:93:
                    23:55:8e:13:86:a2:89:cf:6a:9d:87:02:77:92:4b:
                    9e:6a:36:f7:b0:a9:d6:d2:b0:9b:af:52:82:43:5c:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:77:91:36:62:A7:95:9F:CF:BB:BA:C4:FA:29:89:2C:A4:BC:66:C9
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:65:03:d6:01:47:a8:52:09:6d:78:47:42:fc:d5:35:60:
         7d:fb:19:a6:b7:2e:44:8e:f2:bf:79:47:46:9d:21:ef:2c:57:
         74:3b:71:2f:ad:40:41:b2:49:e4:f8:53:42:2b:d4:3e:97:71:
         9f:b7:a7:ef:c8:8e:b6:c0:0e:28:ce:5f:30:e6:8f:c3:84:6a:
         65:93:c1:33:3e:36:f7:b0:b2:41:e1:74:9d:22:f1:8b:bc:fc:
         3b:79:a3:9c:ce:43:09:ab:a2:4c:0e:15:80:ea:45:22:1e:2a:
         25:29:42:db:a8:2b:f6:d2:56:4a:64:63:e8:7d:ad:59:98:26:
         d0:aa:17:5b:bc:7d:3a:16:b2:33:f9:81:b0:7b:55:12:0b:c3:
         59:11:e1:39:c4:e8:a0:56:c2:e3:38:e2:21:df:5e:56:2c:fc:
         5b:b4:1f:31:22:70:d6:0a:28:b5:a5:2b:22:05:29:89:b1:c7:
         29:ee:32:aa:ef:4a:04:0c:a2:09:c3:b0:96:61:78:59:4e:2b:
         55:72:d8:f0:98:6a:b8:21:a2:37:36:db:a7:fa:bd:1d:5e:57:
         0d:b7:b1:e7:f6:ed:90:bd:ec:31:9c:be:c9:76:5b:9c:9f:39:
         0d:69:23:7e:17:80:d3:f5:a7:6e:11:db:7b:a9:a0:e9:47:c8:
         86:aa:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:03:07 2026 by rpki-client