Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa
File:                     3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          InuXpQt490EDFvyS60HJwCO9eAcZQyAQZNXPkl9y9eo=
Subject key identifier:   D5:04:73:FA:F5:7B:A3:ED:8B:08:E3:D1:AC:15:16:D8:EA:F0:46:E5
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1F88D5EE2A04E7BF14FA3FF1B1F7106D251D9372
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        177.92.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:d5:ee:2a:04:e7:bf:14:fa:3f:f1:b1:f7:10:6d:25:1d:93:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=D50473FAF57BA3ED8B08E3D1AC1516D8EAF046E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:fa:45:35:ef:76:9d:19:6b:cd:9b:8e:3a:
                    c9:19:53:28:a2:ea:98:11:72:73:0b:30:21:27:46:
                    32:8a:89:f1:58:70:49:d9:a5:4f:25:2b:73:a7:14:
                    c4:36:6f:cb:8a:63:5b:43:60:8e:27:09:a3:1b:12:
                    8f:4b:65:11:5d:60:a3:fb:af:6d:5e:e4:e0:58:33:
                    fd:b6:2e:9c:89:bc:5a:35:cf:c1:48:29:bb:84:44:
                    e2:67:79:96:6d:59:0b:a1:5e:e1:f3:56:7b:38:6f:
                    be:09:48:fa:12:26:87:9c:dc:4d:b9:a9:58:67:51:
                    00:80:0d:d1:6b:72:b2:41:f0:e5:a0:d9:06:65:32:
                    62:67:cc:ba:90:ac:92:38:6f:49:cf:fb:f8:15:de:
                    9e:af:d7:49:7f:10:5c:0e:3a:29:e6:89:2e:39:f5:
                    2b:d5:20:14:b1:b5:9a:9f:c2:e0:11:ec:be:66:54:
                    c4:d9:56:f6:94:a8:60:d0:bd:b9:ab:c8:7d:ed:bb:
                    e0:1a:cc:2e:0b:b4:db:d8:d2:9c:f8:f5:6d:43:29:
                    3b:c9:24:69:ee:e3:26:cc:38:d8:84:b8:84:7b:eb:
                    c6:a0:0a:28:63:9d:85:8d:ea:7e:56:58:ac:75:50:
                    83:4c:40:ed:a9:21:44:a9:c2:b7:1f:7b:fe:e9:4c:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:04:73:FA:F5:7B:A3:ED:8B:08:E3:D1:AC:15:16:D8:EA:F0:46:E5
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230332e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:3a:f6:54:e7:43:65:e7:0b:2f:94:c2:a9:c9:f9:5f:a3:7e:
         82:d5:5b:2f:5b:fe:35:2d:de:1d:a7:1b:67:25:18:6f:cc:42:
         a9:9a:a4:5e:17:be:48:14:a7:66:99:4d:a0:e8:c1:28:2a:a6:
         69:e6:e8:95:db:d2:cc:21:9a:cb:26:f3:4f:8a:b7:e0:40:a2:
         6e:72:f9:ed:1c:1f:2a:0e:c6:ed:50:58:d2:ae:67:fa:dd:1e:
         c4:9f:26:64:76:91:80:77:ee:e8:ac:0e:a4:98:eb:ba:42:f1:
         1c:a8:97:21:7b:d0:89:6a:d9:e2:ef:da:e0:67:5f:c1:52:fe:
         f1:02:04:51:b1:6e:41:6d:2f:af:34:60:eb:f4:6f:da:e3:9a:
         76:8a:98:84:8b:59:9e:b2:13:11:e1:43:1f:ad:4a:65:9c:48:
         42:4a:02:26:90:42:f6:ad:8c:b9:da:56:63:56:bd:1a:bb:75:
         d1:c8:ad:63:f2:0b:32:a9:ce:50:02:62:30:f3:17:d4:81:62:
         28:fe:6a:96:b2:ad:62:0b:47:d1:2b:d3:7d:52:66:f1:df:76:
         44:f0:fa:19:2f:17:fb:99:1d:fd:04:5e:43:69:07:b7:7e:d4:
         03:7c:2f:1d:ed:ae:15:93:80:67:6d:05:e3:4d:67:56:49:31:
         d9:c1:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:58 2026 by rpki-client