Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32392e302f32342d3234203d3e203532373632.roa
File:                     3137372e32332e32392e302f32342d3234203d3e203532373632.roa (raw, json)
Hash identifier:          2gZNwa8lmZzJMPuBgu68j3YaYc7eNXg7qtro+xaUoJw=
Subject key identifier:   8E:9C:1E:2A:ED:18:6C:3C:36:13:07:48:CB:E5:19:92:95:17:65:0F
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       04B5D4EBE7BEB75F9451F013A924F00FB573990F
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32392e302f32342d3234203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:33 +0000
ROA not before:           Thu 06 Aug 2026 13:31:33 +0000
ROA not after:            Thu 05 Aug 2027 13:36:33 +0000
asID:                     52762
IP address blocks:        177.23.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:d4:eb:e7:be:b7:5f:94:51:f0:13:a9:24:f0:0f:b5:73:99:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:33 2026 GMT
            Not After : Aug  5 13:36:33 2027 GMT
        Subject: CN=8E9C1E2AED186C3C36130748CBE519929517650F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:3b:9e:9a:b7:49:e1:e8:55:b0:e3:d5:ca:
                    d9:8f:e8:48:82:6c:12:eb:14:9d:48:af:e5:a4:97:
                    26:f8:45:9d:42:0e:5d:9c:35:4c:ab:61:55:30:13:
                    9e:9c:0c:25:03:bb:3f:e0:a3:3a:cc:1c:fb:27:36:
                    9b:ee:9e:35:47:77:91:66:56:61:b1:3b:9b:a0:47:
                    d0:0a:49:a6:f7:81:4a:6e:f7:8e:1c:59:50:14:1a:
                    0b:60:33:23:c1:39:9f:f4:81:93:e7:95:60:67:8b:
                    dd:f9:3f:8a:fc:7e:82:e4:38:14:4a:35:62:c4:be:
                    a2:20:4e:ce:82:12:e6:16:73:aa:ec:22:b2:f9:d5:
                    d2:25:2c:e6:2e:1b:a3:e4:8e:7c:7b:03:f4:6e:aa:
                    3c:2b:74:4b:b2:4f:61:23:4f:bc:57:ce:30:da:0b:
                    75:34:6d:dd:bf:5c:40:67:9f:72:ea:c5:87:34:ec:
                    5b:3f:b6:0d:c8:5d:c9:84:29:d0:00:25:70:1f:1c:
                    5a:64:1d:62:fa:10:80:af:96:5f:e8:36:07:42:c1:
                    88:ef:04:65:c9:5f:14:c0:6c:91:4a:9a:e6:f8:e0:
                    cf:87:c5:0f:ac:a9:6a:be:59:ed:6e:42:0e:b4:25:
                    a3:29:6f:6e:83:66:c1:44:7b:84:dd:29:42:37:db:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:1E:2A:ED:18:6C:3C:36:13:07:48:CB:E5:19:92:95:17:65:0F
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32392e302f32342d3234203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:22:c3:15:20:c0:05:2b:22:bf:cf:ea:dc:d4:5b:bc:d0:38:
         a6:2c:d1:e5:78:ba:af:a3:f4:13:24:58:bb:69:da:f4:df:4b:
         6a:ae:0e:11:df:10:0f:2d:df:8a:7f:eb:de:9f:cd:fe:db:45:
         0e:95:15:bc:ff:86:55:11:cd:dc:d6:b3:a1:de:f5:6f:17:68:
         a2:cb:16:af:54:d4:24:f9:2d:a7:41:42:c0:2f:b5:9d:f8:d3:
         09:c4:2a:ea:7b:ea:74:3c:25:cb:e9:c7:66:26:45:97:11:ec:
         d0:ec:86:e0:eb:a6:1b:7e:44:fe:f0:d1:d2:73:7b:8d:3a:0e:
         46:38:72:ed:31:f0:c5:f6:3e:67:6d:c7:dd:33:f3:80:38:16:
         77:58:89:f2:cb:4e:1d:0e:51:65:14:39:00:73:b9:77:79:f9:
         86:90:74:fa:50:99:eb:f7:7c:87:f0:65:5e:cc:fc:25:a4:c4:
         ce:ec:d4:cf:78:b9:56:3f:84:74:f6:e4:73:b6:2c:12:91:02:
         39:98:0d:65:dc:d1:90:52:a0:96:c4:fe:d4:a0:4b:9a:4a:62:
         18:b6:7b:c5:a9:b0:c4:b5:b4:58:5c:7d:3b:5a:ba:21:d0:28:
         50:b3:91:53:f9:43:ef:8d:82:4f:61:e9:1e:40:c5:10:79:70:
         38:e2:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:44:36 2026 by rpki-client