Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
File:                     3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          jT6OwsKPpcZRXtTy9ZbNYIUutXmY5/jpR5vd1CnSBBA=
Subject key identifier:   7D:03:84:24:9E:1D:EC:52:3D:33:24:DD:CC:83:14:2C:4D:D9:C1:3B
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       7E39205563669B48391544A738EE311FDB56B9D3
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
Signing time:             Mon 26 Oct 2026 02:38:26 +0000
ROA not before:           Mon 26 Oct 2026 02:33:26 +0000
ROA not after:            Mon 25 Oct 2027 02:38:26 +0000
asID:                     267452
IP address blocks:        177.185.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 17:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:39:20:55:63:66:9b:48:39:15:44:a7:38:ee:31:1f:db:56:b9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:26 2026 GMT
            Not After : Oct 25 02:38:26 2027 GMT
        Subject: CN=7D0384249E1DEC523D3324DDCC83142C4DD9C13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:72:c3:0b:c3:42:ad:b3:02:04:16:51:04:
                    da:cf:09:0a:8e:95:29:4c:f9:e6:93:7c:56:3f:dc:
                    09:f1:9b:95:b7:11:1b:6d:67:ac:9b:8e:c8:7f:4e:
                    3b:48:a9:a6:43:91:ae:65:6a:db:df:80:1a:53:aa:
                    f6:22:51:a7:b3:60:17:fd:1b:87:fc:5c:86:c8:18:
                    65:57:29:26:a3:af:45:80:60:12:fd:db:4d:79:dc:
                    f4:7b:d0:6c:4f:69:f2:9d:fa:12:e4:46:04:a1:1b:
                    d3:2c:46:fe:ab:a5:5a:7c:4e:0e:c5:4f:c6:b1:ca:
                    a2:5a:5f:f5:c9:84:ae:94:17:db:d6:49:d1:1c:8a:
                    4d:78:24:a0:96:33:63:c5:6f:96:02:1f:0a:ad:9d:
                    6e:fd:ea:8b:d6:e4:af:cf:ec:34:39:5d:b9:12:9e:
                    60:94:70:07:23:1d:e7:a9:1f:ff:6d:b5:05:90:59:
                    8a:e7:e6:bf:24:6f:29:69:3d:06:ec:cd:39:e4:f3:
                    f4:73:83:d3:4b:2c:fb:d6:4a:72:1d:0d:32:c2:36:
                    e0:8b:db:93:b9:82:c9:fa:d3:79:92:9d:d9:69:27:
                    af:86:02:c1:c0:29:87:41:5a:4a:7d:66:7c:41:19:
                    11:3d:77:20:d3:a0:06:f3:5a:38:cc:f1:c2:30:a1:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:84:24:9E:1D:EC:52:3D:33:24:DD:CC:83:14:2C:4D:D9:C1:3B
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:00:06:20:fd:26:81:b6:aa:da:5f:e5:d8:f8:e8:39:c6:85:
         92:c1:5c:c6:6e:ca:ef:4c:bf:20:20:46:8a:b1:a8:9f:01:0f:
         a7:98:d1:02:77:26:cb:e2:ef:7d:a4:42:ff:13:74:2c:d2:1d:
         ad:79:a5:46:5d:66:34:ad:e9:47:7a:9b:92:e3:1a:d1:2a:49:
         f1:ed:55:bb:28:97:cf:fe:c1:2d:e0:68:b1:5a:71:29:4e:28:
         c6:cf:3c:d3:10:48:aa:11:6e:ff:87:c3:df:46:0a:c7:01:9a:
         14:84:54:28:8f:df:ae:14:44:b2:1f:2a:f2:ce:ed:38:e0:33:
         53:f3:23:5b:21:95:30:91:43:b8:86:54:3e:65:de:57:ad:2a:
         80:13:79:0a:0d:36:22:8e:8c:85:ea:c3:4d:af:f5:85:43:dc:
         7d:e2:23:d2:60:4e:e0:61:15:cb:41:09:94:0c:26:34:10:4c:
         66:f1:46:36:51:df:6b:db:11:1a:f6:69:5c:06:93:87:fb:df:
         2c:dc:df:8a:98:9b:bc:09:03:20:22:67:6f:2e:15:75:4b:b9:
         09:3f:b7:1f:9f:5c:16:2d:d9:5f:74:bc:7a:6d:dc:0d:f8:0e:
         df:b7:1a:e8:a1:b0:5e:b9:1d:19:06:5b:49:40:4b:f4:99:60:
         6d:93:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 19:07:24 2026 by rpki-client