Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          kzSYvxUI4Fhhzj9Px6kCbwDLgscdt29rsjpldEBjWso=
Subject key identifier:   51:0F:34:9F:94:D0:2C:DB:8B:1F:C9:48:41:0F:24:88:27:23:C0:AE
Certificate issuer:       /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
Certificate serial:       3A0D6E06A9982EF10DE823D80BFB29AE2A644205
Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
Signing time:             Mon 18 May 2026 21:01:43 +0000
ROA not before:           Mon 18 May 2026 20:56:43 +0000
ROA not after:            Mon 17 May 2027 21:01:43 +0000
asID:                     262505
IP address blocks:        177.55.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl
                          rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0d:6e:06:a9:98:2e:f1:0d:e8:23:d8:0b:fb:29:ae:2a:64:42:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
        Validity
            Not Before: May 18 20:56:43 2026 GMT
            Not After : May 17 21:01:43 2027 GMT
        Subject: CN=510F349F94D02CDB8B1FC948410F24882723C0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:4f:ea:61:f4:a0:02:ed:5a:91:4b:55:28:
                    81:55:b4:f9:e3:7f:32:51:aa:4a:37:f3:a8:21:cf:
                    25:1e:f5:02:8e:fb:b3:a0:74:a1:65:88:fd:1f:66:
                    1d:c8:05:6a:74:ff:bc:a9:86:a5:1c:73:20:2e:9c:
                    0c:ac:5d:b9:73:27:6a:a3:89:b1:a9:53:1b:20:5f:
                    4d:5c:61:20:58:6a:50:e9:40:27:0e:ce:ef:cc:30:
                    5b:a3:97:61:7a:ec:8f:bc:28:43:96:23:c1:18:0a:
                    d6:b8:7e:b0:db:5a:9a:87:47:4e:6b:7b:bf:4d:0c:
                    06:20:c4:b0:34:f5:1e:57:ab:37:0d:11:e0:b2:a9:
                    da:fb:c9:7a:b5:48:26:1c:69:b0:ee:8f:b0:a4:c5:
                    41:5e:4e:33:3e:d4:a6:4a:f8:87:4a:28:a3:82:c9:
                    14:5f:19:4b:bc:c6:1d:f9:5f:a0:bb:48:5e:30:eb:
                    29:99:0b:25:5e:df:d8:01:dc:36:4c:6e:a4:0e:4e:
                    ea:15:07:98:2b:eb:c8:07:8b:1d:3a:35:5f:47:52:
                    d2:fd:d9:96:75:d3:8a:a8:03:f6:b3:6b:6a:6c:c5:
                    ae:e8:1f:1e:cd:d8:53:63:47:47:db:99:b7:b4:b8:
                    b7:7f:35:48:55:13:65:02:3a:5e:b0:2c:76:7f:70:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:34:9F:94:D0:2C:DB:8B:1F:C9:48:41:0F:24:88:27:23:C0:AE
            X509v3 Authority Key Identifier:
                keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:a3:b6:7d:ef:73:8f:19:60:d0:f6:ec:9f:e7:89:3d:6f:a4:
         00:48:d0:23:de:31:ff:4b:7e:57:34:1f:3e:27:e0:d5:ec:34:
         3f:90:3c:9e:e7:0c:52:f4:0a:9f:5e:cf:65:bd:f7:67:ec:b1:
         58:09:ce:10:1c:b8:26:55:c5:8e:f0:21:48:c8:f5:b6:44:4d:
         3d:17:a7:e7:da:f1:03:4a:94:83:30:31:41:25:5d:47:8e:98:
         fc:be:8d:d2:01:44:f5:e0:f2:72:e0:2b:b0:42:9e:ee:ef:e2:
         81:4e:e0:87:1b:41:1f:5e:c3:cd:53:64:56:40:f4:95:7e:f6:
         26:08:8f:bc:3c:e3:a9:e3:4e:58:67:8d:d4:f5:ca:dd:a3:d9:
         3b:83:7a:0a:c8:bb:e0:01:49:8c:67:f1:b1:83:24:8c:db:79:
         f4:a8:4d:6e:a9:25:48:74:71:1c:80:0e:f4:1d:11:ff:0b:87:
         9a:db:d0:32:24:3b:13:c2:39:3e:98:99:63:7d:b7:3a:e0:cc:
         32:01:76:16:33:a3:ad:d7:43:cf:74:7f:29:6b:27:d3:d2:c9:
         1f:75:56:b9:83:ef:35:4c:9e:3a:46:72:0e:3d:a2:ba:5d:74:
         af:d7:e1:7d:6e:2a:61:12:03:08:d1:f7:f2:90:b6:2a:73:30:
         36:c0:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:24:09 2026 by rpki-client