Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33322e302f32312d3234203d3e20323632383038.roa
File:                     3137372e37352e33322e302f32312d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          v/YZj0D7C1CktHoSsRDHLkncuGmvj74Vnxbz4bwLgR4=
Subject key identifier:   4E:6A:0C:77:C1:19:AF:28:BA:98:5F:4C:36:09:9A:53:4E:A5:1A:79
Certificate issuer:       /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial:       2478ECD144E2EABF1467638D1670C05E38A619BF
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33322e302f32312d3234203d3e20323632383038.roa
Signing time:             Wed 24 Dec 2025 18:59:20 +0000
ROA not before:           Wed 24 Dec 2025 18:54:20 +0000
ROA not after:            Wed 23 Dec 2026 18:59:20 +0000
asID:                     262808
IP address blocks:        177.75.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
                          rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:78:ec:d1:44:e2:ea:bf:14:67:63:8d:16:70:c0:5e:38:a6:19:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Validity
            Not Before: Dec 24 18:54:20 2025 GMT
            Not After : Dec 23 18:59:20 2026 GMT
        Subject: CN=4E6A0C77C119AF28BA985F4C36099A534EA51A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:27:ba:93:de:af:a1:43:79:f1:2a:65:e0:
                    0b:ce:7b:cb:82:a5:c7:84:15:ab:c3:8a:dd:81:21:
                    cf:63:64:51:05:26:91:a0:c3:0a:cb:f3:47:ac:30:
                    ad:d9:9d:fd:fa:16:76:5c:cb:a8:45:ed:23:03:26:
                    a5:23:a2:ba:c8:bf:00:12:f6:17:f5:39:7c:c7:ac:
                    41:74:82:7f:4e:e6:e3:56:cf:37:7d:18:72:65:60:
                    08:fc:75:d0:f6:1f:00:07:ec:41:6b:57:f9:06:05:
                    78:88:4d:6f:35:96:23:74:3b:3c:4a:da:e2:00:21:
                    51:08:94:f1:b0:27:92:e6:36:41:06:bd:e9:f5:e7:
                    d1:16:54:f0:15:fd:b7:1d:c3:4c:84:4c:c6:ea:4f:
                    19:fb:1c:e4:9f:32:10:f7:d1:8a:f4:a1:cb:93:b4:
                    ed:9b:c3:f7:39:ba:2f:37:57:95:01:cf:4a:cd:04:
                    1c:65:a8:6c:3d:87:1a:5f:43:04:a7:5f:fb:84:55:
                    e4:bf:fb:72:e5:81:c7:27:09:36:39:8c:95:d8:29:
                    8e:2f:ec:da:5e:84:95:c3:04:c8:ea:6b:0f:0a:73:
                    9c:28:9e:f6:fa:d4:13:cc:8d:59:0d:72:5b:ec:7e:
                    87:d3:80:2a:a4:fe:aa:c5:bb:dc:4c:88:ed:b0:8b:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6A:0C:77:C1:19:AF:28:BA:98:5F:4C:36:09:9A:53:4E:A5:1A:79
            X509v3 Authority Key Identifier:
                keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33322e302f32312d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:8c:9a:42:9c:13:68:ff:06:e0:71:cd:fe:e5:7c:a5:f7:
         b2:26:91:e9:dc:9d:4d:cf:9e:93:84:64:f9:4e:17:0b:6b:24:
         d7:63:6d:72:bc:2a:54:87:fc:62:10:6a:c5:22:7a:75:72:7b:
         50:59:54:30:c6:b4:6a:30:39:bf:38:0b:28:15:2a:2d:63:1d:
         15:db:ae:f5:72:47:3c:d3:53:2d:be:4b:1f:1b:50:33:f4:e2:
         62:b5:21:82:35:a0:d6:72:c3:c2:be:0d:22:c7:e3:e8:e8:1d:
         44:ff:2e:5b:7d:de:3a:c2:db:4e:fe:ac:8a:8e:a3:d0:b6:e2:
         a9:02:5a:a4:b1:29:ed:bd:bb:5c:0f:54:76:89:9e:c3:19:4d:
         3e:e5:bb:f2:eb:b8:68:ca:10:d8:86:1f:a2:4c:ae:40:19:56:
         d1:a3:77:cf:04:d6:f8:31:63:fb:a0:0b:2a:a0:82:3e:60:cc:
         13:ac:d9:62:04:c0:85:32:5d:a8:5f:f3:ee:ce:9b:60:ea:ba:
         a7:b4:d6:a8:fa:64:76:10:12:52:6f:6d:16:0e:23:18:a7:d7:
         bf:f3:18:e5:3f:e1:88:48:8f:a0:37:ec:06:5d:45:ad:50:4f:
         0d:74:cb:b7:5a:b6:d6:b3:7b:5f:42:53:7d:38:96:89:f6:d8:
         4b:98:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:14 2026 by rpki-client