Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32342d3234203d3e203532373632.roa
File:                     3137372e32332e33302e302f32342d3234203d3e203532373632.roa (raw, json)
Hash identifier:          EWUShqq6NpJAyYbC2/EZ3CFZs7YxNgI4zC0Iv9SeRKw=
Subject key identifier:   30:16:FF:05:33:A3:89:0F:4C:20:CB:64:AB:2E:1C:76:3E:7B:7E:B0
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       0228110D00537EEAC038C283A0EBDE3BEB303675
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32342d3234203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:32 +0000
ROA not before:           Thu 06 Aug 2026 13:31:32 +0000
ROA not after:            Thu 05 Aug 2027 13:36:32 +0000
asID:                     52762
IP address blocks:        177.23.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:11:0d:00:53:7e:ea:c0:38:c2:83:a0:eb:de:3b:eb:30:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:32 2026 GMT
            Not After : Aug  5 13:36:32 2027 GMT
        Subject: CN=3016FF0533A3890F4C20CB64AB2E1C763E7B7EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:f5:a3:88:a0:52:95:dd:45:7d:7e:a0:96:
                    34:36:f3:62:12:ea:38:c7:58:32:59:0e:d4:29:20:
                    69:d9:a4:49:b3:6b:fc:b2:ac:73:46:f4:b2:18:54:
                    6f:34:a6:10:0a:f9:c3:59:1a:4e:35:1e:a9:1f:b7:
                    ca:b2:ea:bf:0d:bb:97:fe:ae:90:7e:37:72:8e:2f:
                    93:80:33:ed:5b:ce:c6:66:74:8f:2f:f1:40:75:9b:
                    07:63:76:83:9f:1a:37:29:30:e9:d0:43:86:e2:86:
                    b9:41:3e:9e:68:79:e0:98:18:b5:a5:fa:f4:f2:17:
                    b3:55:55:ac:7c:e1:84:fc:4b:94:54:e4:b3:d1:86:
                    83:3f:96:55:20:20:b7:84:f6:4a:b9:5f:70:7a:41:
                    69:41:f5:68:ee:94:30:0a:fb:6a:01:7f:12:d6:ab:
                    f0:0f:6f:5d:6f:d9:fd:53:7b:83:84:1f:be:7c:ef:
                    bf:f1:cd:68:42:f8:d0:73:3d:26:6c:79:f4:16:7a:
                    1b:53:48:d8:d3:fb:df:cc:7f:eb:63:a0:88:70:4b:
                    93:dd:26:d0:04:af:2a:51:f0:84:f3:01:a5:40:3f:
                    d0:e8:dd:47:85:e1:bb:53:ec:0b:00:0d:63:da:48:
                    a2:3d:a9:f8:fe:fc:cb:f3:64:5a:51:17:54:89:f4:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:FF:05:33:A3:89:0F:4C:20:CB:64:AB:2E:1C:76:3E:7B:7E:B0
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32342d3234203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:b7:98:54:04:5e:d4:11:8d:50:24:73:3e:e2:e5:09:b5:
         5c:4b:be:2a:7d:e2:c1:33:7d:1c:7c:c1:52:3e:bb:55:40:13:
         80:d9:38:92:b1:dc:c3:f6:6c:f9:f5:0b:16:fd:53:20:73:50:
         71:42:07:5a:da:28:bb:5b:71:4b:d9:0d:73:39:52:6b:87:e4:
         f9:63:64:f1:af:9e:17:11:b5:c5:c3:1f:73:9e:3b:f1:23:6e:
         ef:21:98:13:cd:75:d3:21:8a:f2:6c:fc:e3:21:ba:c2:98:ed:
         21:b3:61:8f:87:dd:54:60:48:27:95:4c:79:f0:09:6d:90:b0:
         62:92:ce:6d:a3:d2:7d:3a:a2:02:40:c7:01:88:d4:ed:20:11:
         6a:62:16:e6:59:e6:16:a5:eb:ef:08:9c:e3:cf:df:dd:4b:65:
         e0:66:3d:a7:cf:c6:2d:24:c6:d3:38:2f:df:65:2f:bf:e5:81:
         64:74:b9:a9:28:9f:ed:24:ce:58:c3:ec:61:e6:13:43:04:65:
         98:1b:26:c4:5e:2b:00:6d:df:c0:d7:05:a5:0e:bf:7d:5e:12:
         5b:de:2d:f4:f6:42:b1:22:82:cc:5f:f8:3a:a5:97:a9:14:f4:
         cb:f1:f9:13:9a:88:76:dc:a7:1e:54:3d:24:49:a1:60:63:21:
         5f:73:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:53:49 2026 by rpki-client