Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa
File:                     3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa (raw, json)
Hash identifier:          Jwr7OCefgERs35lFelbuKxslGr/l8RiRqIvPYKLQgPI=
Subject key identifier:   54:18:3C:0C:FF:6A:92:C4:26:D9:12:0F:55:21:69:33:91:14:4C:2F
Certificate issuer:       /CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
Certificate serial:       413BF225EF43B2FECCED42795A31F376DD0195FB
Authority key identifier: 4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa
Signing time:             Tue 07 Apr 2026 16:23:53 +0000
ROA not before:           Tue 07 Apr 2026 16:18:53 +0000
ROA not after:            Tue 06 Apr 2027 16:23:53 +0000
asID:                     263295
IP address blocks:        177.91.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3b:f2:25:ef:43:b2:fe:cc:ed:42:79:5a:31:f3:76:dd:01:95:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
        Validity
            Not Before: Apr  7 16:18:53 2026 GMT
            Not After : Apr  6 16:23:53 2027 GMT
        Subject: CN=54183C0CFF6A92C426D9120F5521693391144C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:6a:44:47:e6:45:fd:86:2c:fb:97:12:86:
                    48:22:2c:9e:1d:94:d9:f2:71:ba:38:c0:2c:79:45:
                    cd:bf:7e:d9:ff:31:04:ab:95:43:ce:3e:8e:c3:26:
                    f8:0c:75:be:b3:98:3c:9a:20:73:dc:50:3f:88:b4:
                    d9:1a:eb:29:ff:7f:2c:a7:b7:13:cb:f6:66:49:17:
                    c6:95:a5:17:cb:c2:83:af:3e:48:eb:f4:cf:dc:cc:
                    d9:13:2d:40:24:3c:32:c1:70:ca:70:9b:26:09:26:
                    05:f9:79:c6:d5:71:a2:9a:bc:a9:33:ad:d8:fe:14:
                    60:4b:cd:29:aa:62:8e:a4:f9:ca:76:a3:25:c3:7d:
                    37:17:b4:46:5d:62:e3:f0:94:8b:1a:79:22:d4:9e:
                    48:e7:7c:41:df:37:5e:fe:12:28:0c:ed:6e:09:db:
                    d3:79:1d:22:cb:03:65:07:f2:81:f2:7b:7b:7f:8c:
                    c3:19:59:ed:02:f9:b0:b0:98:7e:97:85:f1:3f:f8:
                    fa:68:db:3e:4a:0c:21:b4:e4:fc:c9:13:73:90:d8:
                    80:59:b4:5f:d3:9d:4f:ee:35:78:a1:51:ee:71:94:
                    df:76:0c:cd:49:19:2a:ad:c0:cd:95:64:f9:3f:7f:
                    fe:b5:8a:3e:9a:c7:0d:6b:1d:fa:2c:d4:40:36:18:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:3C:0C:FF:6A:92:C4:26:D9:12:0F:55:21:69:33:91:14:4C:2F
            X509v3 Authority Key Identifier:
                keyid:4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134302e302f32342d3234203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:fa:99:c8:b8:01:03:be:be:5b:6f:9b:8d:6f:67:92:5d:a5:
         21:e1:c9:48:79:4e:4b:0f:78:e1:13:22:f2:16:da:af:cc:77:
         15:c4:e8:47:1c:e0:63:90:d0:e8:6f:39:41:55:e4:29:fe:a6:
         57:eb:78:1d:c3:62:47:45:69:f1:7f:ed:cc:ea:ef:78:80:9c:
         32:ea:e5:3a:9d:45:d8:ea:96:71:ba:60:e2:5c:b5:3f:c7:cd:
         2b:4a:ad:49:e5:c1:43:53:e1:32:b4:2b:64:40:4e:51:ed:10:
         f6:38:61:2c:c6:de:74:61:e9:65:ca:a5:0c:ab:a3:2f:c4:c3:
         b6:ec:6f:8a:6e:f9:3f:92:e1:d0:01:4a:e6:8e:37:19:fd:7a:
         08:a6:ac:d4:a0:0f:ac:4e:34:f6:f9:d2:93:73:d0:1a:60:51:
         fb:fb:c5:b8:58:4a:1d:8d:e0:79:c0:56:22:c8:e4:18:b2:37:
         25:1b:90:f9:ef:cc:98:68:91:51:b6:8e:f1:89:be:46:83:09:
         04:af:8c:f8:bc:5f:cf:7c:f4:a7:86:3d:56:c8:c4:a9:33:f4:
         d5:3e:79:81:73:2b:2c:9f:1f:99:c5:42:44:e9:dd:e5:12:d4:
         30:bb:0f:a8:3e:f7:82:1c:4f:cb:09:76:e7:91:8e:da:1a:4a:
         5b:47:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:47 2026 by rpki-client