Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131322e302f32332d3233203d3e20323633333331.roa
File:                     3137372e32322e3131322e302f32332d3233203d3e20323633333331.roa (raw, json)
Hash identifier:          tgjA58obDdievNenriuhHOYfdSeyzrglR/IMiL+X7Oo=
Subject key identifier:   12:BE:0D:49:5C:B8:CF:36:44:E7:B0:6E:52:1E:F1:8D:11:0A:35:71
Certificate issuer:       /CN=F149A7E125960441F6C2F9B7CB15B330C6679BB0
Certificate serial:       621F83582539D1CA708B73685C825A9471C5AADB
Authority key identifier: F1:49:A7:E1:25:96:04:41:F6:C2:F9:B7:CB:15:B3:30:C6:67:9B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131322e302f32332d3233203d3e20323633333331.roa
Signing time:             Thu 06 Aug 2026 21:07:48 +0000
ROA not before:           Thu 06 Aug 2026 21:02:48 +0000
ROA not after:            Thu 05 Aug 2027 21:07:48 +0000
asID:                     263331
IP address blocks:        177.22.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.crl
                          rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 23:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1f:83:58:25:39:d1:ca:70:8b:73:68:5c:82:5a:94:71:c5:aa:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149A7E125960441F6C2F9B7CB15B330C6679BB0
        Validity
            Not Before: Aug  6 21:02:48 2026 GMT
            Not After : Aug  5 21:07:48 2027 GMT
        Subject: CN=12BE0D495CB8CF3644E7B06E521EF18D110A3571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:38:7c:11:54:45:6b:4e:a4:fb:1c:de:63:
                    fc:6d:d5:e6:86:d9:e2:b5:5b:52:22:27:69:37:fe:
                    5a:ac:88:eb:27:3d:80:dc:dd:41:48:66:0b:8f:af:
                    29:31:ba:19:0b:57:ae:62:9e:54:1d:19:3d:74:9d:
                    b9:74:99:ad:a3:b6:b6:ae:51:64:ab:0d:62:3f:85:
                    e1:70:d9:c5:4c:31:85:80:7c:a4:75:ee:ac:f5:15:
                    66:0a:10:4a:1f:b6:f9:76:e1:ee:98:58:63:e8:13:
                    53:99:86:64:82:3e:aa:17:2e:36:9f:1b:75:71:75:
                    80:77:dd:68:98:32:de:33:72:cb:4b:12:fa:92:06:
                    0e:da:35:40:da:50:95:3b:40:5f:da:02:3b:2c:11:
                    aa:ce:ec:29:b1:90:95:5d:c1:bb:12:77:2d:82:de:
                    4f:bb:68:07:9f:be:2f:ba:00:13:2b:63:41:e0:1b:
                    1e:c8:b4:c4:40:88:e9:bf:f3:f3:5e:d0:7a:69:c0:
                    fd:37:6b:84:ac:94:bc:16:9f:f0:be:b7:90:48:87:
                    4a:43:df:12:4c:79:67:31:5d:fa:23:f0:63:11:cf:
                    7d:d4:e0:ee:b3:83:e1:73:d6:0c:b4:54:d9:17:99:
                    a0:7d:60:1f:50:78:b7:32:94:da:77:90:89:61:14:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BE:0D:49:5C:B8:CF:36:44:E7:B0:6E:52:1E:F1:8D:11:0A:35:71
            X509v3 Authority Key Identifier:
                keyid:F1:49:A7:E1:25:96:04:41:F6:C2:F9:B7:CB:15:B3:30:C6:67:9B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131322e302f32332d3233203d3e20323633333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:db:5b:f5:42:9a:81:47:dd:b4:18:ee:37:57:05:b0:51:
         3b:52:56:ea:e7:17:b0:59:48:5c:1a:fa:bf:3d:2d:7a:5d:9d:
         19:fb:ee:ec:06:30:13:23:04:04:5d:16:98:87:bc:64:db:1e:
         50:76:e2:62:14:ce:3b:c8:50:a9:de:8a:85:3b:d8:df:9b:dc:
         96:f4:a7:48:7e:48:36:28:df:1f:4d:a2:dc:5b:7b:9d:5c:83:
         f8:24:5e:17:99:87:24:bf:7e:62:d2:26:db:4a:02:71:e0:d0:
         ba:69:ec:db:cb:79:0f:96:20:ed:68:0c:1d:07:f3:74:ac:6c:
         b5:53:bb:e2:8a:39:1c:8e:ff:d5:8c:0d:d5:b2:3b:29:12:ac:
         fa:43:71:b6:7d:bf:de:8f:35:86:cb:1c:34:67:3e:d0:95:90:
         c4:8c:c7:e1:cb:c7:61:54:0d:a2:90:6f:17:31:c1:5b:35:e5:
         c3:74:66:eb:b1:53:e5:9e:4c:26:13:38:33:51:cb:1b:33:0a:
         72:07:24:66:34:c2:7b:a3:70:6a:59:39:b6:a3:77:34:12:b7:
         47:52:a9:69:f3:e2:20:ff:c0:de:ba:eb:73:4b:a7:7f:e2:b9:
         56:a4:ec:56:b6:7b:91:c1:1c:9d:81:c9:e7:d3:f3:c1:64:82:
         4f:dd:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:33 2026 by rpki-client