Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (raw, json)
Hash identifier:          Ide/QAAczJ+nc/mP3N1ILiMGg7kyNLepVNCcZi7Hw0c=
Subject key identifier:   3B:7C:99:C8:B7:96:4D:8F:D9:7E:09:02:20:D5:F3:40:DC:0F:CE:F6
Certificate issuer:       /CN=514B82E26F90FA7E86048E4BEE4DA9F47D754B27
Certificate serial:       4A3DA23E27EE7DDD79EFDE1F316993151A6506F7
Authority key identifier: 51:4B:82:E2:6F:90:FA:7E:86:04:8E:4B:EE:4D:A9:F4:7D:75:4B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
Signing time:             Tue 16 Jun 2026 21:50:31 +0000
ROA not before:           Tue 16 Jun 2026 21:45:31 +0000
ROA not after:            Tue 15 Jun 2027 21:50:31 +0000
asID:                     271216
IP address blocks:        177.36.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 19:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:a2:3e:27:ee:7d:dd:79:ef:de:1f:31:69:93:15:1a:65:06:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514B82E26F90FA7E86048E4BEE4DA9F47D754B27
        Validity
            Not Before: Jun 16 21:45:31 2026 GMT
            Not After : Jun 15 21:50:31 2027 GMT
        Subject: CN=3B7C99C8B7964D8FD97E090220D5F340DC0FCEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:13:cd:5f:d9:da:74:87:78:c5:ee:e5:fc:
                    ed:72:d2:b5:83:af:eb:0b:56:f0:a3:3e:b2:1a:c6:
                    33:da:7c:ef:83:f2:5c:05:cb:f8:4e:3f:1d:57:64:
                    1f:bc:2c:8a:d7:a4:fa:88:4b:5a:2c:97:61:79:2b:
                    39:db:4e:a7:40:11:6b:d4:c1:52:f6:1f:97:d3:a9:
                    39:0b:64:59:0b:50:84:41:02:93:dc:47:04:b7:be:
                    0b:bb:c5:4f:6a:a9:c8:92:44:09:0f:45:b3:50:bf:
                    3e:4f:cd:12:db:b8:39:f3:8c:2b:c7:6f:00:75:40:
                    11:7b:06:d5:d6:37:a0:e6:87:0e:cc:99:a6:74:16:
                    29:a6:88:80:4d:d7:64:96:1b:43:6e:cf:95:96:35:
                    46:18:86:de:14:3d:00:2d:7e:9c:b2:3b:78:68:cb:
                    89:a3:0e:7e:5d:ee:0b:cf:4e:5b:99:02:77:a1:a9:
                    59:2b:2e:68:2d:c5:66:01:a2:bc:82:c8:b9:b4:79:
                    43:d6:86:05:93:14:3c:76:39:1d:ca:95:c4:0d:49:
                    da:80:2a:9b:61:d2:d9:2f:5b:d4:b3:1d:25:68:3d:
                    be:07:7d:df:d6:1f:4a:01:ce:56:d7:29:49:1f:74:
                    ec:9d:54:4a:f0:60:db:3b:1b:1a:56:7a:60:85:db:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7C:99:C8:B7:96:4D:8F:D9:7E:09:02:20:D5:F3:40:DC:0F:CE:F6
            X509v3 Authority Key Identifier:
                keyid:51:4B:82:E2:6F:90:FA:7E:86:04:8E:4B:EE:4D:A9:F4:7D:75:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514B82E26F90FA7E86048E4BEE4DA9F47D754B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/2/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:43:fa:97:a8:d2:a2:61:f4:43:24:a2:22:59:ca:72:df:5f:
         3c:7d:6e:d6:15:1e:3f:87:fc:07:16:94:a7:57:55:81:d9:19:
         9d:91:db:bc:75:cd:30:37:10:a0:30:9c:4a:63:10:4d:f8:b9:
         9e:86:09:f8:55:79:bf:3b:61:df:18:c4:67:37:5b:fe:a2:d5:
         9e:3e:89:d9:a2:96:4c:d0:e0:fc:7c:ce:c7:33:45:58:bf:6c:
         a1:9a:3e:9e:e9:03:4e:50:9b:ee:e2:d5:41:f6:78:c9:73:ad:
         76:d2:e9:e4:f6:54:40:78:66:99:b7:ce:49:d4:d6:78:67:ca:
         a4:22:76:e1:d4:9d:bb:7a:c6:42:a1:ca:bd:9f:2d:5f:16:6f:
         a7:ad:5e:5b:ed:25:68:cb:4a:e7:fd:a2:e2:be:b6:4a:31:fb:
         2b:87:29:58:bd:b1:58:4a:43:67:fa:ce:38:8d:bb:3f:f2:10:
         42:cb:0d:c1:dc:89:aa:e5:a7:b1:c2:0a:a6:b2:61:91:52:0a:
         68:c0:c8:db:14:53:42:1c:1b:2b:0b:a0:46:3a:3c:3c:6c:bc:
         50:a1:50:42:fe:40:6e:11:91:69:6b:81:0d:e9:99:28:4f:26:
         c0:6b:fb:87:f2:13:fe:9c:0d:d4:fa:34:d0:99:08:c2:d6:95:
         e0:45:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:57:39 2026 by rpki-client