Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          S3ewVcTqBF7vhrBF9KfCqfmpKXUSo9nxXCElzizxxbg=
Subject key identifier:   6F:4F:CF:B0:F0:4C:19:AB:41:87:F0:04:CC:AC:A5:8D:84:0B:51:32
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6124BE5D694A24D9C2536E6214A1F7EDDDE0EC7C
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 12 Sep 2026 14:33:39 +0000
ROA not before:           Sat 12 Sep 2026 14:28:39 +0000
ROA not after:            Sat 11 Sep 2027 14:33:39 +0000
asID:                     263347
IP address blocks:        177.23.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 05:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:24:be:5d:69:4a:24:d9:c2:53:6e:62:14:a1:f7:ed:dd:e0:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 12 14:28:39 2026 GMT
            Not After : Sep 11 14:33:39 2027 GMT
        Subject: CN=6F4FCFB0F04C19AB4187F004CCACA58D840B5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:2d:83:10:c0:4e:db:ba:ab:f3:94:a5:53:
                    03:b5:c5:a2:ca:2a:b6:30:b6:80:ef:bf:ff:46:35:
                    2c:93:ba:88:89:8a:0a:e2:82:9f:13:c3:cd:d5:8e:
                    3b:95:d0:80:6e:8e:ca:cc:ea:46:43:9a:bf:bf:b6:
                    78:bc:13:45:6f:9e:85:f7:11:e1:61:db:27:1d:50:
                    ea:b8:0d:c4:bc:b6:96:2f:4a:4a:b8:37:f0:9d:9e:
                    5d:31:71:54:c4:95:af:88:d5:7a:ab:bb:55:6b:49:
                    d8:9e:ca:8d:46:7d:ef:a4:3a:57:11:a7:9c:4a:1d:
                    20:05:7a:0d:4d:67:39:9c:b8:9f:1b:14:16:6d:6e:
                    87:12:07:28:3b:56:93:63:79:ea:7e:db:2a:f2:41:
                    91:8a:dc:4e:c4:04:86:ec:e6:0b:de:24:8d:3f:d6:
                    1e:22:5d:19:d7:bf:53:d9:67:7c:16:35:4b:02:30:
                    e3:5b:c9:32:8f:d3:6b:39:89:0a:e5:a4:5b:d1:33:
                    a0:dc:44:02:d3:05:b4:f7:38:3c:bf:65:c1:57:ac:
                    a7:62:f6:63:06:94:6d:f6:50:8a:91:0c:41:1d:84:
                    cc:70:4a:7c:01:99:51:50:f6:6a:7c:d7:0f:63:3d:
                    d2:3f:8b:de:a5:a6:a6:76:12:c7:d2:85:1f:1b:e4:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:CF:B0:F0:4C:19:AB:41:87:F0:04:CC:AC:A5:8D:84:0B:51:32
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130312e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:f0:f5:a5:4b:b1:47:52:bd:4f:97:f1:99:fa:0e:2b:09:
         61:dc:41:d0:77:66:53:11:6b:59:ec:7c:35:51:e4:81:f1:6b:
         b8:9d:88:9b:a5:a7:3e:3d:dd:47:eb:cb:65:97:c4:b3:12:0b:
         bb:02:ad:1d:61:0e:33:bb:a1:de:c1:72:c1:25:23:d3:13:1a:
         ef:16:e3:a2:90:28:86:76:53:96:24:62:ce:ef:8d:98:8d:36:
         d6:78:46:91:5e:a9:b6:ba:9e:82:ed:11:12:e2:8a:9b:c2:a3:
         91:9c:6c:2f:25:e7:ce:df:92:cc:99:f0:5d:5f:82:fd:c2:fe:
         b5:5b:7d:98:3a:47:9a:67:b6:45:3c:a5:c2:8c:67:f6:d9:07:
         2e:2f:54:11:f4:47:e0:be:3d:9d:f7:d7:e8:04:48:05:ac:e9:
         60:5a:ec:fe:ef:87:85:db:c6:fc:86:04:9f:c5:02:f4:4e:94:
         f8:13:80:96:26:b4:eb:ab:3c:28:60:0d:17:b7:d8:15:55:94:
         03:50:4d:74:dd:bf:e4:65:ec:7d:bc:9b:dd:be:20:4e:e3:1c:
         ba:b4:20:ab:dc:b3:fd:2b:7b:0b:96:3d:70:17:57:4b:3e:16:
         f7:27:7d:dc:67:ca:1b:e5:b6:c1:24:16:98:c3:c6:8d:4b:a4:
         40:6a:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----