Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3332203d3e20323632343037.roa
File:                     3137372e33382e3134342e302f32312d3332203d3e20323632343037.roa (raw, json)
Hash identifier:          x05v1xh+/TKljW8+ke1ASjwy2ErBrvr9u+DSqKbdJIs=
Subject key identifier:   A7:04:D9:C8:CE:42:BA:E6:70:9C:E5:AF:85:98:C6:90:42:B4:F5:8E
Certificate issuer:       /CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
Certificate serial:       5BCF84414ADFDC1FB1762D82530D5DF04B8E476F
Authority key identifier: 53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3332203d3e20323632343037.roa
Signing time:             Wed 21 Jan 2026 16:29:02 +0000
ROA not before:           Wed 21 Jan 2026 16:24:02 +0000
ROA not after:            Wed 20 Jan 2027 16:29:02 +0000
asID:                     262407
IP address blocks:        177.38.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:84:41:4a:df:dc:1f:b1:76:2d:82:53:0d:5d:f0:4b:8e:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BEC138BA48B09E02E2418EF43492F43DCC039D
        Validity
            Not Before: Jan 21 16:24:02 2026 GMT
            Not After : Jan 20 16:29:02 2027 GMT
        Subject: CN=A704D9C8CE42BAE6709CE5AF8598C69042B4F58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:c6:fb:b1:25:d2:14:cc:fe:8b:7b:de:62:
                    d2:cb:12:81:3c:42:83:8c:a1:dd:88:ea:16:63:ab:
                    b3:ea:13:66:1d:1d:be:6e:58:be:58:f5:3a:a9:aa:
                    51:4e:a5:28:4d:84:ee:39:f6:6b:b0:0f:e5:9d:3a:
                    44:41:7f:42:9b:a2:0f:dc:cb:c9:9a:ee:ee:ef:87:
                    4b:5c:5a:45:18:91:84:3d:d3:d8:14:66:16:80:58:
                    f6:4c:2f:67:27:88:b8:e0:59:59:0e:4e:ca:0b:1b:
                    5e:d0:52:25:2b:f7:b9:94:a8:3c:ef:e2:58:c1:88:
                    4f:d0:fa:e7:ce:b5:1a:26:30:cd:56:be:f0:62:c2:
                    d7:eb:a3:11:5f:c8:e5:e8:c0:e6:0e:cd:fa:49:9a:
                    89:2a:fb:24:36:1a:57:a1:a6:a9:1b:a2:f7:34:13:
                    ba:19:61:d9:7f:3b:b6:45:4d:77:c2:c9:a4:1f:5d:
                    b9:ec:ae:d5:30:34:b2:ef:76:0e:ba:cc:a1:55:e2:
                    ac:73:b1:01:12:3b:96:e0:72:43:ef:6e:5a:97:44:
                    dc:3d:ab:e7:61:74:d6:a5:6f:46:34:96:88:70:8d:
                    95:d7:64:0c:84:c8:d9:b8:9a:e3:00:39:8b:f7:54:
                    9d:96:7a:0f:28:0a:c3:89:99:ba:d4:b4:0c:10:19:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:D9:C8:CE:42:BA:E6:70:9C:E5:AF:85:98:C6:90:42:B4:F5:8E
            X509v3 Authority Key Identifier:
                keyid:53:BE:C1:38:BA:48:B0:9E:02:E2:41:8E:F4:34:92:F4:3D:CC:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/53BEC138BA48B09E02E2418EF43492F43DCC039D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BEC138BA48B09E02E2418EF43492F43DCC039D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3137372e33382e3134342e302f32312d3332203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:e6:85:7c:3b:68:08:3d:a2:29:d8:02:64:63:b4:75:87:
         c1:76:42:7d:1c:60:33:50:d9:85:c7:bc:66:25:0b:a6:3c:89:
         a0:f9:84:c7:b3:93:c3:78:b6:51:08:35:2a:f4:bb:81:7b:10:
         23:90:8b:d6:85:2e:4d:c5:25:55:ef:2a:9d:1b:62:14:6b:8e:
         9e:09:26:8b:4b:aa:f2:4e:89:fc:7c:f1:15:72:91:30:4d:f8:
         c4:bc:4a:3d:31:92:b1:7f:8d:35:20:e1:07:5f:cd:55:0c:ea:
         ba:7c:01:68:f9:4c:bb:b0:fc:54:08:46:0e:8a:93:26:ac:a1:
         70:3d:23:a9:25:ee:5d:d2:c4:2d:6e:fa:6f:f3:a6:36:9b:4b:
         f4:56:36:7e:3b:6b:e5:e2:a0:a2:03:31:6d:ef:27:7f:13:25:
         f4:de:4d:c6:72:53:8b:1c:cb:25:8d:c7:c0:9c:73:ac:b1:ec:
         53:ca:a0:41:e5:af:1d:ca:21:5d:71:e3:05:97:90:d5:13:cb:
         13:11:f4:82:46:a9:95:2b:a6:bc:c7:77:fd:09:57:20:8a:43:
         70:5e:9d:05:9d:a8:5e:5c:37:b3:39:89:61:53:d5:da:fc:e4:
         09:17:fd:36:34:bc:1f:e9:6d:5b:a6:cc:0c:87:92:73:41:8c:
         4f:c5:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:53:36 2026 by rpki-client