Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3137372e3130372e3230382e302f32312d3231203d3e203533313031.roa
File:                     3137372e3130372e3230382e302f32312d3231203d3e203533313031.roa (raw, json)
Hash identifier:          nHSRQQUzuiwvFdg9fzzKw4ZYmvN8Qc+0yXgugcLTcc8=
Subject key identifier:   84:79:1E:A3:4D:CF:00:DA:AA:44:35:E1:37:85:3B:3A:56:E4:51:5F
Certificate issuer:       /CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
Certificate serial:       26CB7CE717FF4FF7EF172BA2C67B40FE6BF61007
Authority key identifier: C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3137372e3130372e3230382e302f32312d3231203d3e203533313031.roa
Signing time:             Thu 17 Sep 2026 21:24:02 +0000
ROA not before:           Thu 17 Sep 2026 21:19:02 +0000
ROA not after:            Thu 16 Sep 2027 21:24:02 +0000
asID:                     53101
IP address blocks:        177.107.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl
                          rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cb:7c:e7:17:ff:4f:f7:ef:17:2b:a2:c6:7b:40:fe:6b:f6:10:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
        Validity
            Not Before: Sep 17 21:19:02 2026 GMT
            Not After : Sep 16 21:24:02 2027 GMT
        Subject: CN=84791EA34DCF00DAAA4435E137853B3A56E4515F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:1c:6c:3d:3e:56:81:9d:70:34:59:8e:05:
                    a5:46:a5:73:ac:a8:b5:94:e7:97:56:85:28:a6:a8:
                    a0:e8:15:e6:34:07:67:bd:77:cd:54:0a:d1:4b:79:
                    10:bf:d8:69:23:d5:2d:48:2c:bc:c9:00:9b:29:7c:
                    c3:71:52:9e:fe:2a:ed:51:8e:59:08:21:12:c1:9e:
                    d9:e5:91:21:55:49:a8:24:bd:f2:bd:e0:a4:85:e2:
                    0e:97:27:35:44:6c:98:5b:ef:b0:65:5e:a9:4e:b0:
                    e0:35:86:0b:af:94:ff:ce:6f:0b:f3:39:11:7e:c8:
                    0d:7c:d1:df:16:4f:ec:ee:b0:83:06:b6:e8:05:74:
                    5e:64:c0:19:2f:6c:6d:62:c8:fc:74:8e:f9:2a:8f:
                    6c:de:c5:8a:e9:25:a0:06:ef:85:33:d4:33:44:36:
                    4a:38:cb:5a:be:1b:30:33:ca:a2:a9:5c:6c:4f:44:
                    81:2f:0d:8e:24:50:2f:15:09:cd:29:1c:f1:07:5d:
                    73:31:36:83:0d:77:c5:af:f9:7c:5f:a9:b6:9b:94:
                    b4:8a:97:ff:49:14:79:18:bc:5c:a6:cc:3b:6e:f0:
                    a6:66:56:48:45:be:d1:f7:56:6b:f4:09:4e:a4:90:
                    93:98:1b:d8:2b:46:08:b5:6c:45:54:0c:ed:f2:90:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:1E:A3:4D:CF:00:DA:AA:44:35:E1:37:85:3B:3A:56:E4:51:5F
            X509v3 Authority Key Identifier:
                keyid:C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3137372e3130372e3230382e302f32312d3231203d3e203533313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:3e:50:8f:9d:0f:bc:f4:c0:1b:02:e3:90:a3:25:47:1e:
         4b:f3:3d:27:98:aa:1c:28:c5:9e:ab:7c:05:80:e5:3c:45:f4:
         33:10:7c:60:d4:a5:25:e0:38:f1:0b:1f:48:d6:92:04:ca:45:
         04:22:87:72:60:8a:28:6c:85:6e:08:71:cf:76:db:d5:aa:cd:
         5a:47:74:16:fe:95:92:4f:13:c8:43:f9:ec:26:e5:c6:c2:1f:
         ae:8b:84:97:aa:9f:82:6d:fb:5b:d3:8a:41:70:bd:04:2a:f1:
         27:f7:db:13:3f:a2:08:4b:66:ed:7d:35:a8:68:fa:f5:fd:6b:
         03:6b:21:fd:90:10:b8:ca:eb:f9:1b:00:f9:84:49:6b:63:7c:
         91:4b:69:9a:8e:fc:f6:32:62:05:79:84:78:e7:38:77:cb:26:
         2f:df:34:67:71:bb:43:93:d1:27:b7:c9:7a:93:3c:2f:36:34:
         36:c8:a4:d8:82:fe:e7:82:4b:25:70:4d:2c:52:a5:5f:6f:98:
         ec:09:0d:b5:c6:dc:ba:be:af:92:32:59:60:69:8f:8a:e5:77:
         9f:1a:97:d5:25:6c:cc:57:8a:ff:e5:60:b3:30:9b:d0:0d:4e:
         1f:c9:49:63:90:cf:f5:73:69:d6:f0:6c:6d:95:9d:a5:27:0f:
         32:64:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:07:24 2026 by rpki-client