Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
File:                     3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (raw, json)
Hash identifier:          XeKeh/HXn8FB8QDMP1ug5GX7BgcIiLNirOtKtjjLDpY=
Subject key identifier:   FA:BD:71:09:2D:C6:60:B1:85:56:CA:91:A9:BA:9F:FE:39:70:D5:9D
Certificate issuer:       /CN=4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239
Certificate serial:       1C94E18EC0BABB1761CC840022B42A573F3AA940
Authority key identifier: 4B:74:4C:8C:5D:0B:2E:B2:85:0C:01:D9:2C:5C:AE:84:EE:8E:B2:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
Signing time:             Thu 27 Aug 2026 17:32:09 +0000
ROA not before:           Thu 27 Aug 2026 17:27:09 +0000
ROA not after:            Thu 26 Aug 2027 17:32:09 +0000
asID:                     262452
IP address blocks:        177.52.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.crl
                          rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:94:e1:8e:c0:ba:bb:17:61:cc:84:00:22:b4:2a:57:3f:3a:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239
        Validity
            Not Before: Aug 27 17:27:09 2026 GMT
            Not After : Aug 26 17:32:09 2027 GMT
        Subject: CN=FABD71092DC660B18556CA91A9BA9FFE3970D59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:d2:94:49:82:05:39:c8:79:d4:25:cf:81:
                    68:7e:8d:d2:88:71:dd:67:97:c1:03:64:7b:30:94:
                    59:e8:0a:7f:22:56:69:d5:a2:39:a8:aa:6b:7b:74:
                    39:45:d3:58:27:14:6c:e0:e0:80:ae:00:3d:49:dc:
                    43:dd:a4:5a:57:04:f1:e2:af:21:60:7c:43:e4:ac:
                    02:9c:77:da:01:8e:a2:ed:c1:25:e8:31:ce:ef:7a:
                    7b:7c:58:f1:b2:d1:35:ab:b0:a9:69:af:46:89:89:
                    5b:8a:85:1e:70:17:6e:a5:93:4e:2c:ef:69:5c:b8:
                    8a:a7:63:6b:c4:94:dc:31:37:1a:0c:43:76:e5:5c:
                    02:e6:41:ff:59:57:67:24:56:c0:6e:d5:48:74:4d:
                    38:f0:f6:df:9d:9c:06:a2:83:0c:c0:07:29:d5:a8:
                    14:d5:e0:cf:03:38:98:00:64:0d:b0:96:33:4e:55:
                    21:ec:a5:80:92:56:7c:9b:45:96:4c:a9:62:b0:bf:
                    f1:04:16:b0:99:52:64:2f:b7:c3:ad:8b:77:0a:d4:
                    ca:61:93:51:5c:89:86:7f:81:b2:4d:22:bb:1e:94:
                    f6:b2:f8:ce:47:31:ff:65:81:cb:86:72:b7:b0:c2:
                    c6:05:a5:82:37:44:bc:47:9b:43:a8:01:59:26:84:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:71:09:2D:C6:60:B1:85:56:CA:91:A9:BA:9F:FE:39:70:D5:9D
            X509v3 Authority Key Identifier:
                keyid:4B:74:4C:8C:5D:0B:2E:B2:85:0C:01:D9:2C:5C:AE:84:EE:8E:B2:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B744C8C5D0B2EB2850C01D92C5CAE84EE8EB239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:2d:f6:c4:01:25:96:02:49:1c:b6:c6:c2:d5:a3:49:1c:
         01:03:fd:3b:44:35:1a:99:1c:c0:d0:06:0c:66:21:a2:2a:f2:
         8c:a6:95:1c:af:89:fd:35:7c:26:2f:b7:d1:cd:de:d7:28:86:
         22:a1:0c:ca:21:d8:b7:99:64:6f:d4:47:59:a6:26:ad:cd:f5:
         59:2f:5a:d7:5a:1d:c6:d4:69:d4:82:2a:1f:fc:d6:4c:fc:5a:
         ec:c7:20:31:7c:af:15:ce:51:19:4b:d8:aa:10:94:d2:6b:e5:
         52:f7:30:02:9c:4c:d9:5a:2c:2e:db:7d:31:85:c4:33:59:d5:
         99:54:3d:80:be:55:6d:e8:5f:0c:e2:78:44:4f:a3:34:0f:e9:
         de:07:86:d6:43:b0:e4:3d:1f:0b:cf:d7:56:08:6e:ee:5b:a8:
         4c:51:57:11:b9:b8:c9:ec:95:4f:cf:d5:e5:60:86:23:d6:7f:
         02:9e:5b:76:2f:00:0d:7b:1e:94:20:31:81:f3:09:7e:4c:9d:
         4e:95:98:e0:63:08:57:6a:99:b1:19:b5:1f:8a:c4:87:24:ff:
         3e:21:70:b1:37:12:4a:18:56:dc:21:4e:d1:57:52:f4:cf:e6:
         27:19:a0:2f:8c:2d:28:1d:27:d0:44:aa:83:f5:2c:a3:e3:af:
         17:5e:44:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:02:26 2026 by rpki-client