Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32332d3233203d3e20323633343537.roa
File:                     3137372e3139302e3135382e302f32332d3233203d3e20323633343537.roa (raw, json)
Hash identifier:          EZS4a6jgm9r6ztjdJocuPROIVM1N7mACD7sXTuAWkZg=
Subject key identifier:   2C:EC:C2:01:18:ED:21:3E:CA:BA:4D:39:E0:A5:C3:73:84:35:DE:0A
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       4AD5F01F839C375CAD2B0416FAB1658399C2AE06
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32332d3233203d3e20323633343537.roa
Signing time:             Mon 18 May 2026 19:21:46 +0000
ROA not before:           Mon 18 May 2026 19:16:46 +0000
ROA not after:            Mon 17 May 2027 19:21:46 +0000
asID:                     263457
IP address blocks:        177.190.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d5:f0:1f:83:9c:37:5c:ad:2b:04:16:fa:b1:65:83:99:c2:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: May 18 19:16:46 2026 GMT
            Not After : May 17 19:21:46 2027 GMT
        Subject: CN=2CECC20118ED213ECABA4D39E0A5C3738435DE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:3f:3a:a6:cf:3f:19:6c:78:dd:ca:ef:4a:
                    17:de:15:e1:01:55:91:42:6b:f4:21:e9:84:83:ec:
                    07:13:34:b4:7c:75:b8:4b:62:b3:ec:7c:b8:a8:84:
                    e1:f8:16:42:75:f1:d7:1d:9d:5f:ee:5f:d5:37:a3:
                    83:19:b8:2b:ba:30:6b:87:ae:58:3c:a9:8c:f0:d8:
                    3b:f0:27:ac:a9:79:ce:41:b5:70:56:84:3a:cd:af:
                    6e:df:3d:1b:50:68:7b:e5:f5:3e:15:1d:19:bb:61:
                    72:bd:d3:90:f2:ef:37:e4:22:b9:fb:a3:97:c5:b7:
                    32:6a:d9:96:ff:11:a9:15:a8:c4:3e:1e:48:c5:78:
                    53:25:39:74:75:75:83:1e:8e:9d:18:55:50:f9:c6:
                    be:3d:35:81:a3:05:04:1e:4b:ce:04:2f:e6:d1:43:
                    b5:8f:c6:39:8b:0e:49:72:43:4b:2b:75:80:59:f7:
                    70:1d:d8:72:04:22:eb:ea:30:82:d9:1b:48:21:7c:
                    8f:4c:ef:7e:2c:b2:c9:63:2e:e2:05:18:dc:21:5c:
                    68:7f:78:86:a5:ae:3a:84:0b:20:27:86:be:e1:5c:
                    e4:a4:a0:22:46:ee:10:08:77:94:2a:67:fc:26:39:
                    bc:32:3b:b0:6d:4d:7e:23:c2:8c:6b:43:2a:a0:5d:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:C2:01:18:ED:21:3E:CA:BA:4D:39:E0:A5:C3:73:84:35:DE:0A
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32332d3233203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ed:1e:a1:12:ae:76:92:2e:e5:8b:e7:f8:ae:28:6a:bc:89:
         85:b6:dc:cd:9c:53:fd:0f:7c:0e:69:12:81:94:3f:44:33:ce:
         19:0e:af:5c:be:6e:f0:22:e3:17:a0:32:99:9e:c4:96:0f:aa:
         0c:a9:2e:7f:a5:91:6f:c5:13:a6:21:40:25:16:a8:ef:b9:fc:
         d1:79:16:4e:8b:4e:5f:c8:3d:31:10:5a:9d:d8:0f:f8:33:aa:
         3c:e2:76:4b:f2:4b:07:09:c7:b9:05:2e:a2:8b:ae:c5:85:a6:
         ac:3f:70:3b:48:59:9c:ec:85:79:23:21:d5:91:80:db:95:ae:
         81:e3:6d:07:a3:e3:1f:b8:ae:54:98:6d:21:2d:69:f5:21:a2:
         f9:a4:e1:32:02:cf:e6:dd:1e:36:08:d1:ae:f3:59:b6:bb:d4:
         17:8f:0c:29:26:f7:e8:1f:94:31:73:a6:71:22:b4:8e:6b:3a:
         95:fd:88:4e:1b:21:a2:3b:e0:b7:50:98:18:ef:03:e4:01:a8:
         bd:9b:ee:3f:12:e2:3c:62:b9:1e:57:1d:88:05:0a:52:66:68:
         b3:81:c0:8e:22:b6:6a:a0:49:bc:f0:2d:b6:b5:2f:db:1b:bd:
         ee:da:50:6a:9b:11:8b:43:22:80:7b:d4:c5:ab:0f:ec:14:16:
         d0:de:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:43 2026 by rpki-client