Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File:                     3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          FCQaEvajlMSAeHHgctlNEKCcfEhOmFtR5ukcO+ic2sw=
Subject key identifier:   86:C4:78:D0:E0:63:79:32:5C:00:73:29:73:F5:CA:30:8C:CD:B3:3E
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       1CD18FBEA5E81F5A5938831C54BF7404B30FC5FB
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time:             Thu 13 Aug 2026 20:51:04 +0000
ROA not before:           Thu 13 Aug 2026 20:46:04 +0000
ROA not after:            Thu 12 Aug 2027 20:51:04 +0000
asID:                     262403
IP address blocks:        177.38.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:8f:be:a5:e8:1f:5a:59:38:83:1c:54:bf:74:04:b3:0f:c5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Aug 13 20:46:04 2026 GMT
            Not After : Aug 12 20:51:04 2027 GMT
        Subject: CN=86C478D0E06379325C00732973F5CA308CCDB33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:94:02:ca:12:24:3f:ed:34:c4:55:12:6b:
                    21:ca:a8:c1:34:1f:8c:2f:62:5d:fe:0f:0a:f5:dc:
                    e4:66:fe:a2:0f:c0:7b:57:7f:9e:5e:c9:da:64:2b:
                    09:5b:34:ce:9d:42:58:0d:da:96:14:6a:b9:fd:7b:
                    49:f5:64:84:bf:34:1a:e3:4b:4f:72:75:fd:35:cd:
                    49:00:ee:a4:62:ed:54:eb:db:b9:33:e2:05:53:28:
                    05:dc:08:dc:29:2a:89:59:cd:c6:ae:ed:b6:53:14:
                    40:4e:d9:60:af:4a:21:ca:01:53:a3:32:ac:78:ba:
                    3a:46:4d:44:d3:72:72:52:07:26:13:4a:be:92:c2:
                    e4:eb:01:58:7b:d6:08:c5:a9:bb:c9:77:8d:25:64:
                    6e:0f:77:7d:61:2e:ea:53:f7:58:0e:1e:4a:3e:4b:
                    a5:06:e9:b3:7d:40:0f:5b:cb:51:3c:85:03:c3:47:
                    ba:53:70:5d:c3:42:e5:72:98:58:3d:95:2f:d0:97:
                    92:ea:e3:a6:41:b8:b3:21:03:df:b0:1a:79:32:6b:
                    91:33:56:cf:7f:f8:2c:a9:74:19:ba:c6:41:5e:29:
                    d3:e9:6c:8b:fa:bb:a9:bc:46:8d:ac:3b:b2:10:3a:
                    a2:c9:e1:e9:e5:5f:85:fb:c2:c8:54:37:15:dc:95:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:78:D0:E0:63:79:32:5C:00:73:29:73:F5:CA:30:8C:CD:B3:3E
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:29:3d:74:31:32:ff:47:a4:0f:10:35:a6:80:cd:f3:fe:80:
         e8:fd:4d:5c:42:cd:66:f3:46:19:08:77:ff:84:3c:9c:bf:a1:
         78:21:b6:79:3a:81:24:0e:c0:b7:d4:d7:71:13:fa:88:0c:d1:
         94:4e:0e:4b:08:69:b8:d3:71:7b:16:f9:eb:7d:d1:4f:fc:fd:
         f8:e3:2d:08:9d:4f:5c:dc:82:43:74:6c:f8:d1:43:05:53:52:
         0d:f3:ec:79:b9:e9:36:d2:d6:81:91:d1:9a:51:19:1f:f5:f1:
         75:0e:91:66:fb:0b:89:0e:0e:c7:77:1c:a6:b5:f2:98:4e:45:
         db:44:d5:f7:34:fa:06:6a:3b:83:38:19:8b:f9:fc:17:5c:dc:
         86:15:df:9a:e9:72:b9:e6:1d:f9:82:99:d7:a8:e0:10:e8:ab:
         0f:c9:b5:0d:7c:1b:1c:af:1d:1b:2e:8a:9a:47:0f:e0:7a:81:
         aa:f3:f0:78:ce:1d:d3:43:fa:18:74:61:48:91:04:ef:72:81:
         98:49:a2:4e:58:c6:a2:dc:c3:50:c6:20:ea:4c:ef:21:75:b9:
         f9:bf:f0:b5:76:6c:f8:eb:a2:10:dc:5c:1a:f8:1e:ae:65:83:
         db:65:b3:fb:ec:ac:3f:bf:29:93:e2:7a:0e:6d:83:ed:be:ab:
         bd:a0:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:25:31 2026 by rpki-client