Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa
File:                     3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          ZYl1ScGlpAtkGM3OOxOQvK7sio5jeal8BTLcGqalvmI=
Subject key identifier:   37:19:82:B2:1F:D9:0D:43:60:8D:AE:E0:F3:45:72:42:88:E3:E7:B8
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       29DF0A8D17C340A1CC4DD5C8B0D7FC5C1DA0F8A7
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa
Signing time:             Tue 04 Aug 2026 23:08:15 +0000
ROA not before:           Tue 04 Aug 2026 23:03:15 +0000
ROA not after:            Tue 03 Aug 2027 23:08:15 +0000
asID:                     265093
IP address blocks:        179.191.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 01:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:df:0a:8d:17:c3:40:a1:cc:4d:d5:c8:b0:d7:fc:5c:1d:a0:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Aug  4 23:03:15 2026 GMT
            Not After : Aug  3 23:08:15 2027 GMT
        Subject: CN=371982B21FD90D43608DAEE0F345724288E3E7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:c8:8e:3e:2f:d7:9f:d6:bc:43:24:6e:46:
                    e6:f6:02:73:c1:0b:bf:8c:5c:3c:fa:36:ab:f8:fa:
                    2e:2f:7e:aa:df:ef:b1:7b:08:1a:bd:78:99:ad:47:
                    69:ad:1d:bb:5c:f1:9b:ba:2d:ec:25:40:0b:8d:7f:
                    ef:9e:9a:45:68:c2:4b:0d:88:26:a0:bc:37:f0:4c:
                    17:ff:0b:fc:8e:c0:fe:03:08:47:8e:50:62:49:83:
                    ac:82:2d:f6:a8:87:f0:82:74:b0:dc:da:ce:65:50:
                    36:fd:c6:15:02:fd:5d:5d:54:ee:e3:c1:0b:57:eb:
                    12:a5:16:77:17:74:f5:96:18:05:b8:ab:6d:12:f6:
                    e1:ec:bc:29:b5:8d:8b:5f:88:62:bc:b4:e8:d4:ad:
                    68:5c:1b:31:32:d7:a1:8b:61:af:6d:5d:26:af:7a:
                    65:f5:91:19:f4:bd:ac:6c:1a:c8:31:7c:20:3f:27:
                    e6:05:20:c5:88:37:15:08:75:77:b8:e4:d0:95:3b:
                    0c:84:5d:9f:71:47:5a:f3:0e:02:7a:04:2e:40:44:
                    1a:37:7e:e7:f6:72:9e:a4:86:b8:30:cb:9f:ba:99:
                    e4:5d:37:74:98:ff:35:08:f3:e2:a4:79:1e:0b:cc:
                    08:5a:60:be:49:04:ad:5f:87:b1:00:dd:91:53:de:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:82:B2:1F:D9:0D:43:60:8D:AE:E0:F3:45:72:42:88:E3:E7:B8
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:a8:73:1b:f0:d8:48:1c:7c:93:3d:3b:cf:03:b5:26:d3:
         0d:ea:2c:cc:1c:f8:72:48:65:e4:6b:b8:66:ee:24:25:9b:d8:
         79:7b:28:d4:20:8e:98:70:2b:77:f3:d2:89:c3:16:1e:bd:68:
         e0:0c:8a:06:d6:10:67:d6:0b:81:1c:91:04:fa:84:f8:bf:d3:
         a3:b8:bd:93:11:da:3b:6f:53:1e:7a:c8:6e:ac:ac:21:16:db:
         ab:bb:6d:1e:4c:9b:6f:d5:7f:37:48:cc:a8:f8:a0:4c:08:f8:
         75:fb:ed:0c:f9:37:76:4c:09:ff:cf:44:aa:9c:43:e3:10:63:
         d6:e4:02:56:78:e0:77:1f:da:9d:ea:7c:00:84:b1:f7:77:fd:
         ea:3f:0f:05:44:e6:fa:b5:06:76:4a:39:54:28:88:32:1f:1a:
         8e:3b:36:2e:82:09:fe:a7:cd:b8:d9:cc:e5:e3:4e:db:b0:22:
         c2:e3:d4:ed:b9:17:f9:97:d7:3b:c6:9f:8f:4f:2f:a3:70:b3:
         f5:b6:42:27:1d:34:6c:f0:fa:67:40:51:37:f0:42:b2:c4:80:
         dc:97:2d:18:0b:c0:e0:c6:85:12:73:44:1c:98:4a:f5:66:64:
         84:ba:b3:f4:90:2f:5a:a8:42:ec:2b:13:e6:4f:e8:9c:80:60:
         5c:3a:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:57:56 2026 by rpki-client