Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34352e302f32342d3234203d3e20323633353931.roa
File:                     3137372e31302e34352e302f32342d3234203d3e20323633353931.roa (raw, json)
Hash identifier:          hSRzU80Z9wLoEAVRkCwygpvU1wpS/mOfBIxbUp3Tc0Y=
Subject key identifier:   17:B2:B8:0B:D8:B4:88:29:D3:79:25:44:9E:47:3C:EF:AF:36:74:D2
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       05575FEE712933E242DB64A6B24CB47BC19C39B0
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34352e302f32342d3234203d3e20323633353931.roa
Signing time:             Mon 24 Aug 2026 13:37:06 +0000
ROA not before:           Mon 24 Aug 2026 13:32:06 +0000
ROA not after:            Mon 23 Aug 2027 13:37:06 +0000
asID:                     263591
IP address blocks:        177.10.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:5f:ee:71:29:33:e2:42:db:64:a6:b2:4c:b4:7b:c1:9c:39:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Aug 24 13:32:06 2026 GMT
            Not After : Aug 23 13:37:06 2027 GMT
        Subject: CN=17B2B80BD8B48829D37925449E473CEFAF3674D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:54:a0:1d:84:af:03:f4:2a:79:16:ff:0e:
                    93:12:77:1d:22:c9:ca:77:78:3b:a6:2a:a4:3a:27:
                    33:11:1b:25:8a:f7:f0:9f:4c:16:83:91:a1:64:b1:
                    ff:a8:6c:81:3c:fe:ec:79:fc:cc:97:ec:12:6e:c4:
                    33:61:48:ea:eb:3d:c9:f4:57:6f:5d:5c:f6:31:85:
                    e9:df:fc:73:e8:51:4f:48:d4:94:0a:84:4b:c2:2d:
                    07:b6:da:2a:da:38:b8:25:78:ed:83:c9:f5:c6:47:
                    a9:58:cd:1e:47:91:42:d5:e5:bf:74:88:c4:fe:ee:
                    a2:94:68:5e:71:89:2a:58:2b:63:96:0e:1c:7b:ed:
                    bb:94:c4:0b:94:72:19:f4:9d:c5:24:eb:3c:24:ef:
                    7f:d3:2d:c0:a8:a1:21:d3:67:45:80:83:7c:43:b0:
                    3c:f5:54:d5:2c:7f:56:27:72:e1:06:a9:7a:df:1a:
                    90:97:9d:6f:91:0b:b3:3a:0e:0c:d3:79:23:48:ec:
                    e4:25:eb:85:81:f9:2e:ba:25:af:af:87:e8:7c:0b:
                    5e:98:17:3b:f1:be:67:7f:57:d7:fd:b9:55:ae:71:
                    de:4f:46:61:09:1d:27:7a:6d:6a:73:05:a4:fd:bf:
                    6b:ff:40:e6:c8:68:7d:13:d0:2c:73:86:a4:1d:e7:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B2:B8:0B:D8:B4:88:29:D3:79:25:44:9E:47:3C:EF:AF:36:74:D2
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34352e302f32342d3234203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:34:de:19:fd:f1:d7:8e:4a:d3:ce:2b:9d:5f:c3:ec:58:25:
         6e:ef:6c:d3:f7:62:5f:81:e8:bf:61:6c:98:39:23:11:2f:b2:
         0c:e0:1a:b3:c3:88:cd:8f:71:4c:fb:7d:9a:d2:40:9f:80:7e:
         af:b7:af:b9:22:27:7a:3d:cd:db:81:ea:98:ba:4a:70:71:1d:
         89:5e:6c:8f:12:f6:57:87:61:15:94:77:c1:bc:53:1c:59:90:
         e0:90:cf:7a:e1:8f:e2:1c:87:47:b4:12:96:41:18:e9:1b:a4:
         3e:53:8e:fa:90:c0:95:61:fd:67:b9:00:4c:a9:a8:75:df:46:
         9f:34:56:44:52:44:95:65:c6:4c:e2:6e:68:75:39:fa:41:c2:
         db:2b:2f:fd:3e:fd:f1:fa:ea:fe:63:9e:30:9e:6e:4a:61:81:
         29:e6:3d:da:ca:7c:00:2d:5d:c0:17:b7:97:bf:f5:0f:b4:a8:
         41:17:7b:5a:7d:4e:a8:e2:60:f6:ff:c4:a4:c7:a4:a8:5a:97:
         99:3a:11:34:2b:3e:2a:22:92:d9:0f:8e:00:2d:d1:cd:94:0b:
         a7:62:6a:71:40:6b:f0:af:37:7b:5b:a0:a8:ab:15:4c:a6:4c:
         3a:68:d4:a8:5f:ae:fc:55:1e:e3:4f:69:88:97:00:51:75:0a:
         4c:a9:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:22:32 2026 by rpki-client