Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa
File:                     3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (raw, json)
Hash identifier:          fBAPXrz9HDdLBnxC5VZSGZZlhRpGU63ZCbY+k1eTIZQ=
Subject key identifier:   38:EA:59:16:A1:45:73:1B:A7:FC:1A:5D:D5:E0:C7:54:24:66:9C:EC
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       2FAD4F67CE85C47F995E91C0F696AE2E473623CA
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa
Signing time:             Fri 21 Aug 2026 13:58:40 +0000
ROA not before:           Fri 21 Aug 2026 13:53:40 +0000
ROA not after:            Fri 20 Aug 2027 13:58:40 +0000
asID:                     53138
IP address blocks:        177.53.224.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ad:4f:67:ce:85:c4:7f:99:5e:91:c0:f6:96:ae:2e:47:36:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Aug 21 13:53:40 2026 GMT
            Not After : Aug 20 13:58:40 2027 GMT
        Subject: CN=38EA5916A145731BA7FC1A5DD5E0C75424669CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:4d:f4:4e:ce:7f:3d:d9:94:c1:e7:c4:88:
                    78:cd:5b:b1:29:84:09:e4:4f:d8:5d:55:13:5c:74:
                    dc:4d:e0:68:8a:2b:64:13:87:48:5d:9e:be:c4:b5:
                    f1:4d:1b:ca:6c:d8:18:a1:fd:99:79:33:9d:8a:47:
                    40:48:56:72:3a:21:9c:26:61:e1:7d:95:36:f0:06:
                    6d:bc:e4:cd:47:f0:f7:84:d9:a9:9c:02:a8:32:22:
                    24:3d:ce:e7:5b:66:5b:b7:fd:db:d1:8b:c0:16:d0:
                    29:47:13:44:e0:cb:8e:8e:79:24:b5:b4:50:c6:97:
                    71:36:9f:6a:46:ce:ce:63:c3:8d:c5:5e:dd:59:6e:
                    bf:ea:92:db:10:32:21:3d:9a:9a:f4:62:83:71:0c:
                    aa:fb:e3:0e:91:db:6c:66:78:88:1a:5e:1f:ea:b7:
                    27:ec:bd:ad:f7:24:27:ec:43:88:bd:fb:c5:e0:0e:
                    e8:40:2d:7f:8a:fc:f8:9b:fd:73:66:61:f3:ee:41:
                    05:f2:b7:01:ca:b3:fd:67:61:92:43:93:c3:33:28:
                    56:49:8d:c8:60:0f:f6:57:e0:ed:45:57:f0:fe:e1:
                    19:a0:03:1f:99:0e:e8:78:68:f9:74:b9:e1:15:cf:
                    f6:5a:5f:9a:21:fa:c7:c1:53:37:1f:23:8e:b2:c8:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EA:59:16:A1:45:73:1B:A7:FC:1A:5D:D5:E0:C7:54:24:66:9C:EC
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3332203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:fd:38:3e:25:64:12:96:05:7e:22:a1:ab:c7:c3:8d:be:
         2c:42:a9:4d:d4:42:af:09:a9:51:6c:17:40:45:84:5e:96:83:
         a3:08:d6:95:97:5b:2a:ba:c1:e4:9f:c6:20:f2:af:a1:da:5c:
         db:9e:76:bf:f7:6a:49:ae:38:5c:29:ba:93:11:3b:ec:11:f3:
         23:64:79:19:ff:b0:1a:43:a1:9a:ea:81:d8:6e:01:8a:78:b1:
         61:e6:7b:3e:e6:7c:28:49:48:05:d8:13:5d:e7:e4:99:74:9a:
         d9:3b:1d:2f:b7:06:64:42:8d:88:ae:03:16:29:78:84:dd:bb:
         c5:94:04:8a:68:e2:7a:1a:7b:bb:0d:da:c5:94:4b:dd:28:20:
         6f:aa:19:f9:f3:7e:e3:df:a8:a5:fa:48:a2:8f:2a:f4:9f:a4:
         bf:a1:aa:2d:b0:d2:2e:4e:85:e4:09:09:5c:b5:c3:2a:72:cc:
         9f:8e:52:1b:bd:51:fe:49:ce:80:a0:76:ce:61:fc:a1:45:b9:
         82:81:38:61:ee:50:5a:2b:9d:7f:f9:16:b4:41:ac:04:b0:b4:
         f2:bb:70:f5:06:d3:ec:04:4f:fa:35:2c:1d:d9:f8:a7:ba:c7:
         e8:f1:ff:54:06:03:1b:6b:9c:c6:cf:2a:bf:e7:18:bd:d9:0e:
         e4:ac:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:05:11 2026 by rpki-client