Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa
File:                     3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa (raw, json)
Hash identifier:          gRc4Au2wn2gFWzpVa0p1JoyQL9a96RjGm13NMfY1cGU=
Subject key identifier:   7E:2F:56:DF:E2:62:24:92:61:91:8B:B8:6F:EB:52:1E:10:13:03:35
Certificate issuer:       /CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
Certificate serial:       0793FFD36ABFCC8248E77B69746FEBA8EB90B06A
Authority key identifier: AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa
Signing time:             Fri 18 Sep 2026 11:56:36 +0000
ROA not before:           Fri 18 Sep 2026 11:51:36 +0000
ROA not after:            Fri 17 Sep 2027 11:56:36 +0000
asID:                     263129
IP address blocks:        177.155.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl
                          rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 19:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:93:ff:d3:6a:bf:cc:82:48:e7:7b:69:74:6f:eb:a8:eb:90:b0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
        Validity
            Not Before: Sep 18 11:51:36 2026 GMT
            Not After : Sep 17 11:56:36 2027 GMT
        Subject: CN=7E2F56DFE262249261918BB86FEB521E10130335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bd:7e:1e:3f:ac:23:17:32:77:25:4a:94:14:
                    6d:2f:b7:aa:cd:45:e9:fd:c2:c1:76:57:f8:d4:01:
                    51:e5:c8:1b:15:cc:08:63:61:1c:b7:9d:3f:05:b4:
                    19:aa:19:97:a2:94:57:9f:5b:08:2c:8a:3a:2e:55:
                    ea:54:60:9d:3c:99:bc:37:65:9d:d4:0b:42:80:d1:
                    cb:9b:34:f1:57:b1:79:6c:50:ff:36:0a:6f:ce:16:
                    c9:0f:91:a0:7f:8e:e3:b2:67:b3:85:79:1e:84:d6:
                    f1:61:ef:4a:42:eb:9d:1f:c1:23:4a:fe:76:61:96:
                    b2:73:44:9e:c4:45:38:ca:9d:ce:a3:e1:bc:89:65:
                    a7:06:d0:14:93:10:8c:fc:db:e5:62:e1:92:c1:ad:
                    f4:c7:04:75:f8:0d:88:85:f6:46:44:65:12:b6:5e:
                    55:14:6b:00:65:f8:b4:8b:e6:15:b4:78:cb:6d:c7:
                    41:8d:ad:c8:ab:06:9c:b9:78:48:d2:19:7a:41:44:
                    ed:09:99:9a:5f:6e:24:f9:3a:88:13:37:bc:ae:43:
                    f1:c3:b7:39:4c:e9:f8:ea:d0:7a:54:15:49:36:33:
                    26:db:b4:9e:8e:66:c6:a9:57:ee:68:bd:d2:14:3c:
                    86:3d:33:bc:60:1a:c3:f1:80:65:07:18:9e:cc:cb:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:56:DF:E2:62:24:92:61:91:8B:B8:6F:EB:52:1E:10:13:03:35
            X509v3 Authority Key Identifier:
                keyid:AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38342e302f32332d3233203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:40:3d:65:57:fa:75:17:6d:81:08:c4:4d:fa:02:d4:29:6e:
         71:69:d2:db:81:da:26:11:48:58:9f:8d:5d:c2:e6:5f:33:55:
         b1:38:6f:f1:9b:48:dc:d1:11:23:43:d1:1c:15:b8:ed:51:d0:
         a5:17:a3:d4:98:81:ce:ba:e8:4c:5f:77:ef:fe:d0:19:7d:04:
         1b:98:21:d8:42:1c:56:ee:6b:c9:ba:e4:96:82:67:07:1d:54:
         6f:91:92:51:87:1c:1e:3f:2c:bf:e7:ec:2b:1e:58:51:0c:f4:
         f2:e9:6a:53:10:2d:2f:ad:12:7e:37:bc:25:3d:7e:21:c6:a7:
         07:41:bf:ff:66:ee:5c:b1:37:c0:f1:38:f6:18:b1:23:cf:5b:
         8a:5b:48:ce:08:ac:10:6c:91:72:0e:9a:e0:ef:04:5c:0a:40:
         61:f6:b8:b1:06:af:72:33:15:81:9b:53:f6:0c:a7:48:9a:35:
         2a:f1:c5:5f:14:c8:f6:a0:e3:3c:c1:38:0d:d2:7e:e7:7d:55:
         df:71:46:b4:a9:4a:a1:00:38:ab:f2:3b:cc:ed:a4:a0:b1:26:
         25:08:03:90:3f:99:72:33:de:af:e0:b3:11:c0:d9:71:fd:76:
         89:88:30:77:44:6e:85:7e:63:5d:94:4f:de:c5:fd:c3:90:65:
         98:1a:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:26:38 2026 by rpki-client