Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa
File:                     3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          eL8q9L+a8kh03mdGDemP2zYBaA1ructTsgY+5mkeas0=
Subject key identifier:   44:62:32:CA:06:BC:0B:32:6A:AA:F6:D1:F7:BD:6D:3F:92:B8:50:9A
Certificate issuer:       /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial:       466A529FAC53EE6F9469D6A541F80A6862823F10
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa
Signing time:             Wed 24 Dec 2025 18:59:20 +0000
ROA not before:           Wed 24 Dec 2025 18:54:20 +0000
ROA not after:            Wed 23 Dec 2026 18:59:20 +0000
asID:                     262808
IP address blocks:        177.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
                          rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6a:52:9f:ac:53:ee:6f:94:69:d6:a5:41:f8:0a:68:62:82:3f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Validity
            Not Before: Dec 24 18:54:20 2025 GMT
            Not After : Dec 23 18:59:20 2026 GMT
        Subject: CN=446232CA06BC0B326AAAF6D1F7BD6D3F92B8509A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:b4:a5:1c:4b:f2:2b:f3:9c:0c:6e:19:f1:
                    97:6e:db:bd:4e:cb:9b:ad:eb:17:f4:ef:fd:38:ee:
                    d8:8d:08:38:37:1c:0d:da:83:50:88:cc:7c:89:94:
                    55:97:4b:dc:0a:f1:24:3b:5f:31:ae:72:83:3c:08:
                    17:de:4b:6c:56:79:78:41:25:a0:ce:54:2d:87:93:
                    fb:59:55:39:b3:34:7d:e6:62:9d:74:1a:ea:43:91:
                    ed:96:2f:5b:85:14:65:83:5e:0f:47:2d:26:3f:48:
                    bd:32:7a:1e:72:e1:4c:c8:80:1c:ac:80:93:ef:13:
                    09:03:56:40:4f:ba:7f:21:78:ae:dd:23:e8:75:d4:
                    65:3f:83:80:f7:42:54:d2:fd:9c:4f:4a:03:69:5f:
                    cc:c4:16:5e:50:c8:15:ea:65:4d:51:21:b4:7a:08:
                    da:f0:c7:9d:5f:e9:ad:9c:a5:31:6a:ae:82:3a:38:
                    90:5d:fe:78:6d:6e:19:13:d6:ab:d8:eb:14:8d:46:
                    f3:72:85:3f:2c:2e:e7:31:fa:7a:b6:fb:58:4d:07:
                    a1:ab:58:a2:2e:3c:29:94:f4:23:e9:7c:9b:5c:2e:
                    0f:58:d2:b8:a8:57:67:72:e1:8a:f3:2a:1f:24:47:
                    48:07:f0:ea:43:20:71:73:05:dc:23:d9:e2:84:b1:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:32:CA:06:BC:0B:32:6A:AA:F6:D1:F7:BD:6D:3F:92:B8:50:9A
            X509v3 Authority Key Identifier:
                keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:53:af:c1:87:04:1d:62:b3:3c:58:2c:02:1f:5a:68:ba:de:
         0c:7b:1b:7c:a6:e9:a1:c1:73:01:cd:75:ae:63:d4:10:7c:78:
         53:99:4e:c6:8c:1a:5c:03:96:20:1e:0d:f4:0e:95:4c:8a:f4:
         97:30:9e:44:14:ec:e9:3b:69:3f:39:cc:04:ac:a9:7d:48:55:
         c5:2e:0c:6a:76:55:36:2f:0f:dd:c3:59:8f:8e:f8:40:b6:70:
         87:72:74:08:93:94:56:e0:09:04:bf:3d:9b:de:af:13:af:61:
         f2:b0:16:68:2a:ea:a7:fd:39:40:1d:c3:f4:6f:4b:00:6c:39:
         b0:8c:15:bd:45:71:5f:0e:61:80:32:13:a9:e1:5c:2d:6c:8b:
         fc:1f:a7:34:cf:d6:a4:f8:0e:96:7d:b0:e2:3e:a2:89:7f:70:
         44:1a:53:1f:bc:80:bb:b8:38:d2:15:1c:b9:e0:b8:81:d3:7b:
         66:71:b8:5e:59:69:0f:7c:73:c8:6b:f7:43:f9:96:66:fc:20:
         36:c6:9c:40:fc:3a:9a:9d:c3:be:37:6e:e3:b5:e4:4b:cb:b5:
         33:99:fc:2e:a7:48:1b:08:36:9d:1e:32:f3:1e:c0:da:dd:49:
         2d:8e:20:fe:c0:e8:6f:49:5e:e4:47:4b:49:7a:5c:95:79:63:
         69:ea:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:51:48 2026 by rpki-client