Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3232203d3e20323730363131.roa
File:                     3138372e31372e3132382e302f32322d3232203d3e20323730363131.roa (raw, json)
Hash identifier:          ju/qZWgI+7mHDelnw5qY+afuFjtknbyUMjIV20WliWc=
Subject key identifier:   96:12:BD:EE:74:5B:32:46:FC:66:C6:24:85:A4:3C:B4:8A:54:2B:C3
Certificate issuer:       /CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
Certificate serial:       515F309E4E642D918F65B26894263EEAC14C1C10
Authority key identifier: 79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3232203d3e20323730363131.roa
Signing time:             Fri 21 Aug 2026 11:28:54 +0000
ROA not before:           Fri 21 Aug 2026 11:23:54 +0000
ROA not after:            Fri 20 Aug 2027 11:28:54 +0000
asID:                     270611
IP address blocks:        187.17.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 17:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5f:30:9e:4e:64:2d:91:8f:65:b2:68:94:26:3e:ea:c1:4c:1c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
        Validity
            Not Before: Aug 21 11:23:54 2026 GMT
            Not After : Aug 20 11:28:54 2027 GMT
        Subject: CN=9612BDEE745B3246FC66C62485A43CB48A542BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:f4:15:20:5f:51:7e:f0:85:be:11:fb:0a:
                    c8:e5:53:52:17:d9:f1:5d:64:64:3d:65:d8:06:4f:
                    29:9b:8b:43:11:18:60:5f:3b:b5:1b:64:87:24:07:
                    6a:55:58:de:d5:ee:f4:d7:2b:c8:87:89:fe:70:02:
                    80:fe:90:0a:54:f2:49:ea:ab:bd:e1:22:40:3c:f1:
                    4d:01:29:84:f6:f3:7c:ae:57:01:50:95:d1:b7:00:
                    27:4d:a7:06:e0:93:c9:98:8f:64:69:83:b7:af:3d:
                    bd:c5:74:4f:51:9c:5a:63:31:d9:e1:33:d5:74:f7:
                    4f:ae:d3:fa:91:d8:5a:fa:fd:18:97:04:8b:c5:7e:
                    f1:ab:6c:aa:8f:d1:8a:21:bd:3d:45:9a:10:90:1f:
                    7b:e5:20:d4:6a:27:41:1d:79:ed:75:fe:65:36:d9:
                    20:58:16:ef:92:9a:9d:c0:9a:d5:13:ff:02:f7:e4:
                    f8:da:38:4a:cd:43:49:0c:41:79:a7:b8:77:1d:fe:
                    9d:83:42:64:c5:c5:88:56:7b:b8:3d:6f:d9:c2:ae:
                    30:03:8f:e7:98:f9:f3:fd:89:17:4c:98:51:cb:4b:
                    05:8c:f9:c7:b1:40:88:48:e3:9c:7a:b7:04:cd:48:
                    38:c9:cf:cb:8f:d3:f8:59:23:68:4d:74:b5:b5:b9:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:12:BD:EE:74:5B:32:46:FC:66:C6:24:85:A4:3C:B4:8A:54:2B:C3
            X509v3 Authority Key Identifier:
                keyid:79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3232203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:21:7e:97:4b:78:c6:dc:7f:65:de:3b:10:39:db:fb:b7:6a:
         03:a7:61:89:72:be:62:ff:06:22:37:dd:6a:69:7d:04:64:ed:
         92:e1:0a:70:c6:5a:10:14:37:4a:d1:bf:a8:72:e4:0b:3c:41:
         86:5e:63:27:1b:fb:6c:88:57:78:18:24:a9:4e:ba:73:a5:45:
         ad:be:b0:2b:5a:41:e4:ce:c7:39:7a:22:b4:6a:28:0b:ac:bf:
         3a:1f:77:3a:69:14:89:fa:ee:bb:17:45:9d:38:de:78:28:b0:
         b0:5e:4e:9a:45:eb:c2:cc:48:03:37:02:78:a0:e7:05:a9:16:
         91:ae:4b:fc:90:16:a2:1a:4e:1c:e1:fb:c7:83:b9:2a:3c:ef:
         50:95:85:c3:87:eb:0d:e8:1a:ab:ac:63:03:f3:31:6e:10:b4:
         6f:d5:48:42:12:18:96:89:d8:6d:bd:69:98:e1:04:e5:7b:ac:
         93:9c:4a:db:16:06:fc:92:b9:a8:8d:89:d5:0f:f5:88:78:9d:
         20:4c:b8:7f:26:8a:e4:b6:cb:85:22:10:5b:62:a2:c5:9d:68:
         03:b3:42:f4:b1:ee:b7:e9:2b:0c:b4:50:d1:d6:b0:a6:55:85:
         5c:71:08:b8:54:a1:45:bf:b3:cc:fd:35:17:0a:92:97:02:7b:
         b2:90:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:30:39 2026 by rpki-client