Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e39312e302f32342d3234203d3e20323634333836.roa
File:                     3137372e33382e39312e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          93qsVWWZRSpbh9FQXcv/JoeULmMv2velODTVMLZSklI=
Subject key identifier:   9C:06:6C:B8:81:42:DC:48:74:E2:CF:90:BD:36:9A:39:73:71:83:13
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       0F46031A10C9CE8E4237C1A61358EAD0D647E46D
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e39312e302f32342d3234203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:21:20 +0000
ROA not before:           Fri 21 Aug 2026 20:16:20 +0000
ROA not after:            Fri 20 Aug 2027 20:21:20 +0000
asID:                     264386
IP address blocks:        177.38.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 08:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:46:03:1a:10:c9:ce:8e:42:37:c1:a6:13:58:ea:d0:d6:47:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:16:20 2026 GMT
            Not After : Aug 20 20:21:20 2027 GMT
        Subject: CN=9C066CB88142DC4874E2CF90BD369A3973718313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:fb:ab:39:83:e5:23:ac:99:13:e2:a9:86:
                    ed:5a:1c:c6:d1:68:31:8a:94:9f:cb:ab:06:39:95:
                    c4:5a:ff:a9:bb:35:6c:9c:87:f7:53:62:e8:55:b3:
                    d9:a2:25:4c:c7:55:d2:02:c0:46:37:76:3e:19:de:
                    8d:c7:cb:12:d8:f5:23:9f:15:df:2b:7a:5f:4e:c5:
                    d3:9a:c0:91:36:5e:af:57:d3:d5:89:b3:c9:52:f7:
                    32:bb:c8:64:e8:1c:91:93:09:ce:e2:e8:d5:99:7c:
                    16:9b:42:44:95:2b:4b:3f:b9:c8:ee:a2:76:a4:e4:
                    03:38:3c:d0:ae:6e:ff:7f:52:60:a6:95:15:54:0c:
                    eb:d5:bb:25:63:9c:de:3b:07:96:1c:ce:07:95:2e:
                    41:d5:3b:a9:4b:68:ba:4f:c0:44:5e:6d:a8:7f:a3:
                    17:04:f6:0e:45:80:3f:52:f3:5f:75:a2:d7:05:d2:
                    08:50:d0:33:c4:f9:5d:57:ec:b4:6d:ce:70:6c:60:
                    e9:0b:69:2f:9e:80:7f:ac:f0:37:7f:44:b1:c1:6b:
                    18:73:66:62:66:e1:18:c6:44:fe:c5:56:30:55:f2:
                    33:d6:14:01:36:db:90:d7:4b:bb:ef:f4:f9:80:b8:
                    33:d8:22:d1:b2:54:61:9d:06:15:0c:f9:c4:72:05:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:6C:B8:81:42:DC:48:74:E2:CF:90:BD:36:9A:39:73:71:83:13
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3137372e33382e39312e302f32342d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:00:55:37:a3:b8:fb:18:e0:ac:16:d9:b5:20:e7:7b:75:07:
         7a:64:87:6c:de:d8:00:f6:8e:10:05:9e:91:e7:78:08:d5:e9:
         44:66:57:90:97:a3:8f:0d:3c:fa:e7:fc:3f:41:f2:e4:71:95:
         03:c8:56:52:69:f6:b7:60:92:d0:e7:49:4c:05:9c:a7:25:e1:
         5f:f0:0e:96:ce:b9:6d:04:99:9f:85:7f:7a:2c:43:a2:0f:58:
         4f:d5:4a:c9:10:26:77:57:32:5c:13:37:42:8b:7b:81:94:a5:
         97:af:4c:4a:7f:21:50:65:f1:69:7d:52:3f:74:17:9b:9d:06:
         84:81:b2:28:80:3b:51:61:7f:c1:e4:c1:d5:30:a2:86:fb:49:
         bf:76:64:52:e2:44:05:d5:39:ac:74:6d:ab:44:39:24:7b:ca:
         fd:de:72:32:d0:68:fa:d3:b5:f9:66:03:6e:27:a0:e1:de:d0:
         6c:9f:d6:85:d9:97:70:b7:72:30:91:b6:0d:51:ef:5a:2c:b3:
         e8:20:43:69:fd:32:54:3e:ce:e2:a7:60:fc:30:9e:3b:e7:92:
         51:ed:2a:e0:04:84:73:1f:87:a3:25:fa:83:2b:e7:3b:e3:23:
         3a:fd:ab:46:24:d0:f3:57:70:67:c2:c6:9a:36:4b:31:e8:c5:
         f9:d2:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:28:03 2026 by rpki-client