Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137372e38342e3232342e302f32322d3332203d3e20323632353933.roa
File:                     3137372e38342e3232342e302f32322d3332203d3e20323632353933.roa (raw, json)
Hash identifier:          FjizWYaTzEG7WkHyov16aNSbRkm8sEdqr1nmklWNHXI=
Subject key identifier:   7A:C1:61:CF:D4:D5:3F:1F:BB:11:62:77:82:A9:38:4B:9C:76:F2:8E
Certificate issuer:       /CN=DB1151FCAAB88186E460D045F58E61DEF333046D
Certificate serial:       1720BC076D837EC22862D59FC8B377F8A2D37A73
Authority key identifier: DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137372e38342e3232342e302f32322d3332203d3e20323632353933.roa
Signing time:             Fri 18 Sep 2026 22:20:55 +0000
ROA not before:           Fri 18 Sep 2026 22:15:55 +0000
ROA not after:            Fri 17 Sep 2027 22:20:55 +0000
asID:                     262593
IP address blocks:        177.84.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl
                          rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:bc:07:6d:83:7e:c2:28:62:d5:9f:c8:b3:77:f8:a2:d3:7a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1151FCAAB88186E460D045F58E61DEF333046D
        Validity
            Not Before: Sep 18 22:15:55 2026 GMT
            Not After : Sep 17 22:20:55 2027 GMT
        Subject: CN=7AC161CFD4D53F1FBB11627782A9384B9C76F28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:39:db:fb:29:55:32:34:61:6e:69:66:e1:
                    1d:b6:08:91:60:5a:d5:41:c8:28:89:51:03:97:42:
                    be:2b:56:17:ed:3d:1c:46:d7:ed:ac:16:9d:92:bc:
                    13:cf:79:35:41:4a:a3:3b:0f:09:12:e3:f9:b8:ef:
                    14:3b:70:8a:b2:99:2e:d8:eb:18:9f:eb:b7:27:3e:
                    6d:5f:d6:37:51:49:5a:d2:61:b7:a9:83:ff:bb:c0:
                    9a:48:b6:bf:e4:8b:58:f1:1b:35:fb:0e:ca:97:79:
                    dd:92:a3:fa:a7:76:14:69:42:04:2f:c9:52:62:b0:
                    ec:68:7c:d3:bd:23:ba:5c:4c:3f:cf:7c:31:4d:bb:
                    82:03:f6:bc:38:4f:73:aa:60:21:2c:6c:70:f0:95:
                    24:87:f2:3b:5c:3e:b4:e0:91:7f:10:77:73:8e:e0:
                    e1:2d:e8:6f:f0:1f:29:4c:29:2f:4f:53:48:08:8c:
                    d1:61:78:c0:31:c3:86:56:28:db:fb:7d:e2:8a:aa:
                    7d:6c:9d:0b:7c:08:34:3e:c2:89:75:c7:48:e1:d8:
                    2f:01:75:fa:a1:8a:42:82:07:ea:61:58:20:f3:9d:
                    9f:2c:da:9b:fd:10:6a:15:3e:46:3b:f2:1f:5b:a8:
                    4e:bf:cb:bb:f5:11:92:e0:2d:f1:ad:96:50:fa:df:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:61:CF:D4:D5:3F:1F:BB:11:62:77:82:A9:38:4B:9C:76:F2:8E
            X509v3 Authority Key Identifier:
                keyid:DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137372e38342e3232342e302f32322d3332203d3e20323632353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:df:05:b9:71:96:f7:7b:e5:cb:1d:5b:12:d0:09:60:25:
         37:0a:bc:13:60:ec:b8:56:01:99:e7:a7:3f:78:aa:a8:1f:ab:
         a2:78:6a:11:f4:6c:09:db:68:92:83:07:e2:77:c4:28:03:a1:
         df:10:e2:dd:af:50:3a:49:74:48:74:5f:e1:32:53:99:ae:fe:
         65:cf:ca:c6:08:6b:d3:4e:57:26:b8:eb:1e:80:f6:43:f4:c0:
         f3:20:ad:83:23:7a:a4:78:3b:ad:33:7f:68:ca:95:ab:36:c7:
         d2:e0:38:bc:4f:28:f0:0e:79:05:af:d7:cd:fd:6d:73:37:ee:
         5a:bd:5e:85:18:98:dd:4a:21:b3:1c:4e:51:f3:b7:bb:b3:48:
         b3:eb:50:61:cc:34:2c:74:a4:3c:e6:fd:d3:0e:d0:ae:29:9d:
         51:2d:b0:dd:b9:05:95:de:3f:da:aa:91:cd:15:bb:6e:c4:f2:
         70:b7:ad:b6:b4:c2:38:fd:43:79:2c:1e:09:fb:5d:b3:57:09:
         92:40:f5:4c:c0:b3:79:a3:91:b5:ba:44:b9:cb:5b:3d:20:04:
         29:62:f5:fc:96:2c:20:99:87:ca:b0:51:2f:19:b0:e9:b4:5b:
         d7:a7:9c:4f:6d:e3:56:00:11:a8:c3:82:f2:cd:d3:cc:9c:fc:
         84:99:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:39:04 2026 by rpki-client