Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3137372e3132382e31362e302f32312d3332203d3e20313938393439.roa
File:                     3137372e3132382e31362e302f32312d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          Dox3S47jq3viGFeWiWdELFw101VZVjPtOt54Wtf4uHI=
Subject key identifier:   81:87:FB:69:E5:DE:44:83:70:46:9C:2B:E6:49:BB:7F:EC:36:0D:1E
Certificate issuer:       /CN=E56BC148F24881D384850951C8DAD271E8EC9541
Certificate serial:       7C17EE212E0FF3EB800F7BED770DC7E17D67BF0B
Authority key identifier: E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3137372e3132382e31362e302f32312d3332203d3e20313938393439.roa
Signing time:             Fri 14 Aug 2026 19:48:45 +0000
ROA not before:           Fri 14 Aug 2026 19:43:45 +0000
ROA not after:            Fri 13 Aug 2027 19:48:45 +0000
asID:                     198949
IP address blocks:        177.128.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl
                          rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Aug 2026 04:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:ee:21:2e:0f:f3:eb:80:0f:7b:ed:77:0d:c7:e1:7d:67:bf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E56BC148F24881D384850951C8DAD271E8EC9541
        Validity
            Not Before: Aug 14 19:43:45 2026 GMT
            Not After : Aug 13 19:48:45 2027 GMT
        Subject: CN=8187FB69E5DE448370469C2BE649BB7FEC360D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:6e:18:f0:2f:ba:4f:34:4d:05:24:c0:38:
                    90:16:26:e2:4b:3a:14:28:af:90:92:ed:5b:39:d9:
                    15:f0:19:64:18:0a:0d:45:32:58:3b:ce:75:2d:28:
                    b0:2a:05:1d:da:c3:2b:00:58:54:32:4a:60:8a:94:
                    cd:ad:d7:d6:7f:18:92:1b:09:e5:3e:a3:c9:a9:9a:
                    b4:f3:62:97:c1:56:94:4d:86:3e:db:8c:2a:be:91:
                    d1:fb:65:f2:ef:b2:b1:da:14:c5:de:38:78:a7:84:
                    28:9c:fe:93:b8:f1:ed:bf:22:4f:fb:0c:d6:a8:3e:
                    61:36:14:81:69:57:78:19:b1:7f:a5:70:d3:fe:e1:
                    0c:c8:9f:67:21:7e:fc:5c:1c:d7:7e:21:a9:1c:33:
                    92:4d:0f:3b:23:88:63:47:03:12:61:ad:05:da:a1:
                    55:0e:dd:94:48:3b:04:57:f8:3d:ff:e4:18:4e:f7:
                    11:d5:50:45:f2:54:0c:ed:aa:85:6c:12:6e:75:6a:
                    bd:05:0b:ef:6c:5b:47:39:95:a4:c1:23:17:e7:6f:
                    34:2c:b5:a1:b5:ea:f2:17:ee:01:52:ff:27:00:46:
                    3c:38:30:0b:62:25:1d:fd:eb:a0:cb:3a:49:79:b0:
                    29:ae:89:1d:fb:a9:bd:7d:de:e5:fe:63:73:39:33:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:87:FB:69:E5:DE:44:83:70:46:9C:2B:E6:49:BB:7F:EC:36:0D:1E
            X509v3 Authority Key Identifier:
                keyid:E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3137372e3132382e31362e302f32312d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:ca:c2:82:91:2d:1b:91:14:ac:fc:a5:28:92:1c:a5:c6:
         1e:18:3f:59:35:c3:52:56:6d:4c:29:9b:d9:40:03:1b:2f:c4:
         da:c4:8d:9d:dc:02:d3:de:9f:b1:ca:b5:cb:b7:f2:69:f2:e3:
         91:29:45:e9:6a:5e:f4:3f:b4:56:f9:9b:ec:85:c5:e5:db:13:
         ed:23:d6:4e:9d:9f:22:fc:e4:72:60:bf:d7:03:d0:26:28:1b:
         b4:0d:d3:cc:8b:bf:f5:f3:5a:db:ce:ba:19:e4:4f:4e:fb:02:
         46:85:16:32:6e:b9:d1:6e:00:1a:8b:06:df:4f:4f:b4:f0:d6:
         6b:8a:fe:a3:9b:86:4a:e8:17:91:ea:c3:30:bf:98:f9:7a:b3:
         13:a6:f0:bd:6a:04:8c:4c:0d:23:30:ce:5f:28:8c:73:b8:b2:
         f3:ef:de:4f:79:b8:f6:98:00:4e:f5:df:73:86:4f:df:91:c4:
         b1:fe:80:eb:06:95:14:3b:72:1a:a2:67:fa:f6:2e:22:3f:32:
         bc:b2:2a:88:5f:9b:e6:1b:32:d9:10:f5:ea:5a:1a:64:6c:f8:
         00:a5:12:7b:72:b2:8b:b3:61:b8:1b:a9:b5:82:b8:47:72:69:
         45:0f:95:17:aa:cd:69:24:58:99:3c:43:22:ec:41:d1:a5:61:
         c4:55:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:57:23 2026 by rpki-client