Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
File:                     3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (raw, json)
Hash identifier:          Coor+T1VbuCVG7JsXd3qES7qggCRwsnruuGPQOa4fmw=
Subject key identifier:   2A:28:48:A6:41:92:9C:FF:C1:A3:CE:4E:85:39:ED:D0:3C:01:03:0D
Certificate issuer:       /CN=03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E
Certificate serial:       569AA7C2FB3F31BC53A3044FEB6454C356D531FF
Authority key identifier: 03:DE:6C:B0:B2:D4:A7:A0:57:6B:30:F2:51:8B:E6:8F:32:AD:AF:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
Signing time:             Thu 14 May 2026 18:25:05 +0000
ROA not before:           Thu 14 May 2026 18:20:05 +0000
ROA not after:            Thu 13 May 2027 18:25:05 +0000
asID:                     271310
IP address blocks:        177.53.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 03:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9a:a7:c2:fb:3f:31:bc:53:a3:04:4f:eb:64:54:c3:56:d5:31:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E
        Validity
            Not Before: May 14 18:20:05 2026 GMT
            Not After : May 13 18:25:05 2027 GMT
        Subject: CN=2A2848A641929CFFC1A3CE4E8539EDD03C01030D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:fc:b1:f4:1b:bc:4c:ff:f9:e2:80:6c:a2:
                    e2:6f:2d:73:63:19:db:ca:59:3d:d9:89:0a:80:f7:
                    68:c3:65:60:a6:a1:28:55:77:bd:ea:e2:fe:79:0a:
                    8e:5e:bf:74:5e:25:d2:03:16:66:59:4b:7c:4f:81:
                    87:bc:b4:50:49:7c:31:ca:9e:8b:35:e3:00:8d:e2:
                    59:74:b9:61:0c:72:0c:4d:c5:51:7d:48:df:2e:18:
                    5d:45:9e:f8:83:a6:cb:f3:40:02:c1:f6:ec:54:61:
                    15:b7:b2:f9:22:f4:5b:37:ce:20:01:b1:7f:c7:19:
                    02:02:21:76:2d:12:55:aa:16:fd:1a:0d:a0:5c:e1:
                    79:75:f2:ed:b3:d4:a5:a5:fd:2f:b6:16:0b:5a:c9:
                    cc:41:d1:5d:ee:2b:f3:92:e4:db:9e:e1:fd:24:fa:
                    d8:95:0f:2c:19:cb:40:11:04:3a:6f:f3:a6:95:5b:
                    5b:25:05:29:ad:13:fd:13:29:44:2f:04:ab:ae:3a:
                    e3:a8:2e:7a:0b:1d:66:8b:b3:af:5e:33:08:68:19:
                    67:de:2c:21:2d:77:8e:8f:8b:72:f5:7e:69:0d:c8:
                    13:9e:aa:a6:b8:79:9b:62:9f:13:3c:95:de:25:92:
                    0d:7f:c1:a2:45:ca:36:83:9f:89:63:8d:61:c6:4d:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:48:A6:41:92:9C:FF:C1:A3:CE:4E:85:39:ED:D0:3C:01:03:0D
            X509v3 Authority Key Identifier:
                keyid:03:DE:6C:B0:B2:D4:A7:A0:57:6B:30:F2:51:8B:E6:8F:32:AD:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DE6CB0B2D4A7A0576B30F2518BE68F32ADAF4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:da:b5:0b:d8:16:e8:ea:03:00:af:c1:8b:4e:16:3d:15:
         38:a6:25:b0:33:0b:0e:72:e5:36:eb:78:26:e5:4f:99:37:3c:
         37:d9:71:55:43:c1:ed:22:05:7c:47:f7:ad:35:ba:60:4f:80:
         aa:06:34:07:80:d3:d5:22:7d:11:12:1b:95:9d:fc:96:0d:33:
         bb:da:0f:2e:19:68:92:06:99:1b:e0:55:01:f5:a8:96:2b:ed:
         62:55:87:14:f5:dc:54:de:37:6a:19:25:3f:c6:20:ee:e8:94:
         da:f8:0f:db:a4:47:22:b6:dc:71:c8:8c:e1:ba:e3:e9:dd:5e:
         a0:71:87:71:2e:81:2b:ee:52:b7:f9:45:ec:d5:3a:00:a7:1e:
         ca:41:39:d3:ab:13:be:e5:f5:e7:69:11:6b:50:4b:20:29:cb:
         89:ca:9c:d1:29:0b:b4:e1:8a:ba:60:f9:ba:31:4e:f5:43:29:
         0b:43:f2:01:61:35:cf:41:2c:98:e6:4b:97:3c:fe:30:c8:a6:
         d8:2f:73:bd:da:14:e5:fc:ea:d4:51:cb:67:ab:f5:58:8d:52:
         3a:bf:38:65:35:de:c8:14:f2:6a:e4:4d:2c:38:8f:6b:31:ab:
         c7:a2:a0:08:0e:b5:79:1c:d5:23:b8:8c:de:e1:60:08:da:2a:
         18:fd:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:33:49 2026 by rpki-client