Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          qQi35WvmgXtjb+iQBy0ElyT6z3CglwmJb9ZG59wAe+E=
Subject key identifier:   CE:45:DD:18:C7:68:8E:C7:0F:0C:0A:7C:28:BC:11:D9:DA:79:27:B9
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2BDFF3CF0D119DA175C98195D9CC84EAA1A2C306
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 12 Sep 2026 14:33:40 +0000
ROA not before:           Sat 12 Sep 2026 14:28:40 +0000
ROA not after:            Sat 11 Sep 2027 14:33:40 +0000
asID:                     263347
IP address blocks:        177.23.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 07:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:df:f3:cf:0d:11:9d:a1:75:c9:81:95:d9:cc:84:ea:a1:a2:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 12 14:28:40 2026 GMT
            Not After : Sep 11 14:33:40 2027 GMT
        Subject: CN=CE45DD18C7688EC70F0C0A7C28BC11D9DA7927B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:6b:58:64:7a:91:a2:35:0f:57:06:e7:6c:
                    e4:fc:80:2d:8f:9d:6e:d0:85:f4:5c:02:7e:d3:72:
                    ed:d3:b5:f1:18:52:97:85:c9:c6:a4:e3:fe:96:7c:
                    94:62:de:a2:4e:a3:f1:e6:83:07:36:8c:09:de:19:
                    2c:28:85:fa:f2:fe:be:ad:82:6a:85:3e:c6:e1:b2:
                    f5:f3:ee:2f:83:8d:04:10:f1:8b:61:d1:70:61:ea:
                    07:cd:f3:60:86:ec:27:f8:06:09:96:a6:c3:00:b4:
                    70:fa:e6:c1:cc:b0:4d:54:41:57:5e:a4:51:8b:5e:
                    46:66:4a:38:13:b6:16:15:09:ac:2e:27:b6:83:e0:
                    30:56:7f:01:68:24:0d:cf:23:58:48:2f:f5:90:cf:
                    61:66:02:78:f9:b4:fa:a6:33:6b:0e:88:ae:35:7d:
                    54:19:60:24:4c:7c:d1:c5:b6:1d:d1:7e:da:50:fa:
                    fa:f6:4e:41:2c:12:c5:7c:0f:42:a0:55:3d:5d:e3:
                    34:29:0d:31:29:45:27:4a:84:c7:71:d5:e7:f4:c5:
                    61:3f:f4:02:00:82:d6:73:69:36:16:91:88:d3:bf:
                    ca:04:c7:8b:19:2d:86:b5:ae:d4:2a:21:05:8c:ba:
                    63:6c:93:d8:83:b5:6e:7c:ad:54:37:5a:dc:a9:0d:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:45:DD:18:C7:68:8E:C7:0F:0C:0A:7C:28:BC:11:D9:DA:79:27:B9
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:01:56:36:0f:99:f7:44:fd:34:8a:b3:96:54:da:87:6c:91:
         c0:be:31:45:29:d3:12:8e:42:39:a5:00:cc:55:6e:30:78:45:
         ab:6c:07:ae:4d:ad:b0:c8:ca:b2:0f:af:df:5d:bb:a7:69:da:
         79:2d:b4:48:76:64:b4:31:41:8e:00:f4:ec:d2:f3:83:ef:25:
         83:29:be:cf:ec:86:07:e1:a5:ce:f5:86:a7:75:b6:df:cd:9b:
         a5:f3:17:a7:13:8e:04:f3:6c:3a:01:5c:a3:68:46:d9:74:ab:
         b3:74:0d:79:f4:58:15:34:25:cc:69:12:9c:e7:9d:1b:7c:13:
         c1:f3:2a:27:6f:43:cb:92:1e:06:1b:88:3e:ac:10:b4:be:a8:
         78:be:f6:f4:90:a3:21:54:d8:4f:c8:41:35:c9:56:bd:41:2e:
         d0:e8:c0:b8:a4:95:3f:ce:06:06:56:5e:44:18:66:ab:1f:40:
         43:5e:ae:92:cf:c7:cb:74:4c:9d:3e:7b:e8:e6:31:19:a8:dd:
         ca:4b:94:87:95:bf:fe:0d:0e:29:35:d5:f7:ee:d4:b2:98:0c:
         3f:3b:ca:d0:1e:db:1e:a5:90:6d:c9:ea:04:2a:36:32:d2:6d:
         92:99:1b:26:34:67:63:93:fa:b0:29:b2:b2:e8:c5:ee:68:88:
         f5:dc:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----