Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa
File:                     3137372e31302e34362e302f32332d3233203d3e20323633353931.roa (raw, json)
Hash identifier:          pENmSEC5X998O+oPYLDT+Qhu+PRYxzvAwFjfDq60o+Q=
Subject key identifier:   BA:13:D1:C4:F0:6A:1F:15:88:1F:F1:00:18:00:93:C5:96:14:29:42
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       0DC8FBE22C96912B0654C79ECF201C2499624A8C
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa
Signing time:             Mon 24 Aug 2026 13:37:08 +0000
ROA not before:           Mon 24 Aug 2026 13:32:08 +0000
ROA not after:            Mon 23 Aug 2027 13:37:08 +0000
asID:                     263591
IP address blocks:        177.10.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c8:fb:e2:2c:96:91:2b:06:54:c7:9e:cf:20:1c:24:99:62:4a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Aug 24 13:32:08 2026 GMT
            Not After : Aug 23 13:37:08 2027 GMT
        Subject: CN=BA13D1C4F06A1F15881FF100180093C596142942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e7:3d:cd:d2:d0:28:d5:b1:10:4d:58:ca:2e:
                    e1:df:44:1b:17:6b:60:69:f6:e9:0d:65:54:88:5e:
                    cf:88:1f:b7:fc:fa:fa:c7:19:76:55:c0:10:3c:71:
                    fd:e2:58:08:f5:ba:a0:ae:c3:22:8b:4e:61:38:02:
                    24:80:9f:4d:97:8b:3d:03:36:bb:23:4d:07:aa:af:
                    a8:77:de:3b:14:2b:26:b8:02:3f:26:3c:0b:66:96:
                    b4:f0:b2:ee:c9:40:50:56:fe:06:22:84:2f:b7:04:
                    4b:4b:10:ad:0a:c8:38:af:5b:22:5a:51:e5:f6:2c:
                    61:e1:45:48:eb:2f:53:46:18:30:fc:0e:36:b9:96:
                    c8:a1:f1:2e:84:53:11:45:62:1b:0f:f8:f8:8d:08:
                    15:30:44:8f:fc:fe:22:0a:9e:a3:9c:a5:9d:f3:64:
                    da:c5:ae:e0:5b:f5:f3:fe:65:8d:52:d9:ed:37:1b:
                    20:07:64:1f:62:c9:c3:58:3b:6c:bd:91:1a:02:22:
                    1f:3c:9b:d5:49:cb:c3:de:17:e2:bf:74:65:44:c7:
                    5b:b0:5e:eb:12:2e:91:de:7e:5a:0f:7f:84:d1:c3:
                    9d:3d:2e:3b:ec:71:46:43:b2:d0:d4:c1:8b:d9:be:
                    86:29:1b:f9:91:13:8c:03:41:6f:9d:3e:ac:ed:f0:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:D1:C4:F0:6A:1F:15:88:1F:F1:00:18:00:93:C5:96:14:29:42
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:0c:d4:c1:6b:78:d1:ce:ff:8b:2a:8e:fa:fd:cc:6c:eb:
         5e:93:39:90:97:fa:6f:96:de:64:d3:44:7a:17:49:85:85:1d:
         19:93:12:60:5c:53:fd:a9:90:b7:02:d6:84:81:35:83:b9:8d:
         bd:00:ee:96:34:cf:85:c9:d6:98:45:5b:85:aa:2d:4a:48:a0:
         68:a8:0b:b0:c4:b7:d9:53:77:5d:1d:2b:4b:0a:68:32:a6:c5:
         8f:34:b3:a8:89:40:c8:67:45:1c:8e:1f:76:06:42:e1:b5:c8:
         2c:42:19:e0:ed:59:81:44:a6:b1:c1:2e:8e:4f:13:04:0d:bc:
         3d:74:ad:53:9a:e1:55:96:ce:0b:83:c8:0b:fd:56:1d:a6:84:
         14:70:83:17:72:a5:80:7b:2e:04:20:6e:c9:d1:7f:db:4f:95:
         21:af:2e:a7:8e:27:88:22:66:cf:a6:5b:50:74:87:4c:1f:b1:
         fb:d4:e5:de:b4:b0:45:81:80:02:1b:75:c6:f3:a7:d2:20:3f:
         39:4d:93:67:42:6d:0c:f7:57:6e:6b:e2:7d:e8:6e:f8:ce:dd:
         0a:b4:50:24:4d:90:27:19:6a:c0:83:9f:1d:73:99:f5:be:ea:
         58:19:4d:59:7e:f1:fc:9c:04:8a:64:5a:01:aa:55:6d:73:ef:
         15:dd:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:27:58 2026 by rpki-client