Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
File:                     3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (raw, json)
Hash identifier:          rX+gyQr7QSDYNlxIr1KctseGZ6ER9jAuB4N0o5hxo2g=
Subject key identifier:   D4:30:18:37:42:53:7E:04:14:81:B6:B5:7E:A3:06:00:D8:38:AB:7A
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       6FC3CE4314C00CBE74888F3A6C3530C57178AAFF
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
Signing time:             Tue 25 Aug 2026 22:25:48 +0000
ROA not before:           Tue 25 Aug 2026 22:20:48 +0000
ROA not after:            Tue 24 Aug 2027 22:25:48 +0000
asID:                     262588
IP address blocks:        177.75.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 01:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c3:ce:43:14:c0:0c:be:74:88:8f:3a:6c:35:30:c5:71:78:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Aug 25 22:20:48 2026 GMT
            Not After : Aug 24 22:25:48 2027 GMT
        Subject: CN=D430183742537E041481B6B57EA30600D838AB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:79:55:3c:97:0b:71:ff:a6:d4:54:c6:3d:
                    35:c8:fd:84:09:06:f0:36:ca:4f:fb:1b:82:14:39:
                    be:b3:5f:81:82:c6:84:fa:95:8e:54:a2:7f:d0:86:
                    8c:d2:67:28:a8:75:83:03:f0:78:64:77:60:15:0f:
                    9b:61:27:53:0c:90:b6:3b:0b:82:eb:75:3d:6b:3a:
                    7d:19:cc:52:d3:57:cb:71:50:9c:79:5b:4d:aa:5f:
                    10:c4:77:af:02:d4:77:07:c9:91:8c:a9:9b:42:5c:
                    9f:f6:5e:99:c1:f4:73:2a:71:8a:d3:8c:1a:d9:9f:
                    e7:fc:ac:61:59:c9:9c:1f:71:b1:8e:d0:8c:fa:2c:
                    1c:2e:1b:43:d2:79:cf:45:fd:74:04:e2:91:4a:5b:
                    57:f1:e4:29:af:79:9b:b0:28:c5:45:b1:b7:cb:05:
                    7b:96:ef:32:5c:8f:3d:ce:51:e1:98:7f:9e:9c:13:
                    db:8e:92:ba:33:22:c3:51:9c:4c:51:1b:37:6a:80:
                    23:01:aa:44:4e:4f:e2:04:58:a8:65:6d:e2:14:e8:
                    e4:44:cd:6b:45:25:50:c1:7f:2e:c2:1b:ba:8f:cc:
                    9c:69:c5:96:fe:36:01:7d:97:3a:14:b2:8c:fc:cd:
                    8d:ac:b7:4c:82:4a:14:fd:63:60:31:ba:d7:1e:ee:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:18:37:42:53:7E:04:14:81:B6:B5:7E:A3:06:00:D8:38:AB:7A
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:75:7c:7b:42:2b:fa:16:28:61:96:8e:1e:82:7c:79:80:7b:
         a4:da:e0:78:2d:60:09:bc:bf:92:a0:5f:59:ca:ab:cb:61:27:
         7d:aa:61:5b:0d:2a:09:f7:81:d2:34:f3:9c:64:68:e4:42:a9:
         a3:d3:49:36:0b:ef:8e:6c:45:40:9f:3a:aa:d9:50:43:c5:f0:
         35:49:dc:03:a1:e6:ed:d4:01:bc:74:0c:a5:47:a5:ae:15:f1:
         b5:67:e9:1f:9b:75:a9:80:9e:e3:11:b2:76:6f:8a:42:2d:2e:
         2c:17:27:07:ab:9c:69:d3:90:4b:f7:82:38:96:44:58:8d:80:
         98:2b:0a:41:e2:ee:1b:ae:4b:57:c9:a0:29:37:66:b1:f4:4f:
         b5:07:28:b4:28:ec:ab:6c:0c:78:4d:94:f5:cc:cc:8d:fd:66:
         11:3b:81:22:5d:ec:2c:ee:93:40:d1:f3:1b:a3:c4:58:1e:4f:
         66:00:36:4a:b9:24:27:90:39:fa:99:67:eb:27:2a:3a:bb:ec:
         9b:37:17:8f:04:7d:bd:c7:1a:2e:d4:3a:6e:fd:77:dd:c7:bd:
         55:f2:4b:01:b6:2b:89:22:88:ec:d7:ea:f3:d1:fb:25:8c:70:
         d0:63:89:b5:ef:fe:83:35:10:c7:77:90:51:c9:11:5f:d8:d7:
         99:76:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:14:50 2026 by rpki-client