Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e302e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          3R29aDlIju0AIqJ/N7CorzTZ6ZcV+qetxXFgMV+F1fo=
Subject key identifier:   60:6C:06:5C:93:D0:17:D2:47:05:05:66:3D:20:66:D7:6D:D2:80:4D
Certificate issuer:       /CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Certificate serial:       5F878CFD5A5BCA3EDE81E460EB84BB86E8B508C2
Authority key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 07 Aug 2026 19:37:36 +0000
ROA not before:           Fri 07 Aug 2026 19:32:36 +0000
ROA not after:            Fri 06 Aug 2027 19:37:36 +0000
asID:                     262642
IP address blocks:        177.87.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:87:8c:fd:5a:5b:ca:3e:de:81:e4:60:eb:84:bb:86:e8:b5:08:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
        Validity
            Not Before: Aug  7 19:32:36 2026 GMT
            Not After : Aug  6 19:37:36 2027 GMT
        Subject: CN=606C065C93D017D2470505663D2066D76DD2804D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:eb:09:ba:00:75:52:2d:67:20:99:27:f3:
                    17:bb:22:c7:d7:b2:4a:24:fd:56:ff:3a:57:d4:e1:
                    30:fa:81:76:92:d2:56:86:8b:7b:1f:78:20:6e:e2:
                    94:bc:86:0f:67:be:cb:31:4f:ee:7c:f0:23:af:65:
                    a0:e7:c8:2f:ee:c3:43:f0:df:45:29:98:14:92:b4:
                    96:a6:47:1f:73:9f:dc:5f:e8:1e:ae:5a:27:69:87:
                    11:49:a6:30:6b:13:37:5c:e1:dd:50:31:ef:c5:6e:
                    72:14:dc:88:c5:2c:42:bc:46:5b:47:92:c8:e6:78:
                    26:79:f4:62:22:4a:3e:08:b3:7e:60:51:68:25:78:
                    47:b1:31:10:6b:04:6b:1c:b0:cc:0e:95:71:db:97:
                    8d:ba:a0:6e:27:8a:61:a6:24:05:b0:ec:5a:a5:18:
                    44:24:fd:8f:84:69:b8:db:63:c9:41:26:c9:e4:27:
                    e4:4b:76:da:7b:6d:b1:f8:44:63:4a:1c:39:e8:da:
                    61:30:b2:04:ab:bd:51:a2:74:24:43:32:3b:0e:e4:
                    2a:fd:c1:aa:ea:f5:6b:e4:72:b6:2a:b2:41:9b:b8:
                    2e:a1:f9:6c:99:1a:3a:d3:41:c3:3c:73:53:3e:1d:
                    15:38:a5:49:91:58:b7:54:57:d4:34:48:3d:c7:4e:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:06:5C:93:D0:17:D2:47:05:05:66:3D:20:66:D7:6D:D2:80:4D
            X509v3 Authority Key Identifier:
                keyid:28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e302e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:05:b6:52:e9:78:8b:6f:8d:40:52:99:21:c4:a7:20:2b:c6:
         cd:10:d7:f0:c7:c3:21:e5:62:98:08:cb:88:c8:e2:b4:66:d6:
         0c:6a:18:b6:6f:11:1c:7c:c1:5e:a7:e8:78:cd:27:dc:eb:83:
         1c:99:3f:46:69:69:51:6f:37:b6:74:00:88:17:27:49:d5:65:
         b5:f1:c5:05:84:37:f9:ca:03:08:9c:15:a8:f9:1f:d5:dc:b4:
         f2:90:56:fa:b0:56:12:a3:e1:11:7f:1f:99:81:fe:be:c7:7a:
         82:6a:d4:2c:e7:be:94:82:d8:56:1b:77:88:71:1e:94:80:0e:
         3a:8f:ab:6a:f3:45:be:73:25:f3:47:66:66:1e:56:0b:a3:54:
         80:00:f1:c4:93:ce:5f:aa:c5:0a:a1:de:f4:fa:c4:ce:ca:49:
         dc:da:60:58:e0:96:41:c7:80:db:b6:96:3a:42:bc:19:f3:ac:
         e4:12:e6:1d:97:c1:8f:e4:86:65:e3:00:ab:f8:38:42:94:2c:
         4a:c6:37:91:3c:e6:47:81:9f:c2:28:bc:40:20:1c:e3:2f:d1:
         40:9e:8d:d8:ed:8d:fb:f1:19:e9:50:17:22:10:05:e6:57:0d:
         70:ea:1b:6e:0d:d5:62:5f:32:85:8b:cd:bd:af:c9:7f:82:b5:
         5f:c8:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----