Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa
File:                     3137372e31302e36342e302f32312d3234203d3e203533323334.roa (raw, json)
Hash identifier:          Z4ZmWFViHRU8QiUUOYlf9O89E7VJelpLnvuFFPS3Kbk=
Subject key identifier:   AD:47:D5:89:EA:F5:0C:99:10:9E:93:07:04:65:1C:16:58:C4:82:EA
Certificate issuer:       /CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
Certificate serial:       48FF692E20594BECB621166501A016DAECD07CB1
Authority key identifier: 9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa
Signing time:             Tue 18 Aug 2026 16:02:59 +0000
ROA not before:           Tue 18 Aug 2026 15:57:59 +0000
ROA not after:            Tue 17 Aug 2027 16:02:59 +0000
asID:                     53234
IP address blocks:        177.10.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl
                          rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ff:69:2e:20:59:4b:ec:b6:21:16:65:01:a0:16:da:ec:d0:7c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
        Validity
            Not Before: Aug 18 15:57:59 2026 GMT
            Not After : Aug 17 16:02:59 2027 GMT
        Subject: CN=AD47D589EAF50C99109E930704651C1658C482EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:c5:9b:35:42:ef:2a:db:52:f8:66:9a:88:
                    e5:d4:b9:02:18:53:c7:c5:40:2e:da:0f:ef:ce:58:
                    66:92:5a:dd:a0:14:39:fa:c7:e2:11:28:16:95:7b:
                    1d:0e:35:e4:65:c7:7e:56:85:6d:37:35:bf:bd:36:
                    a3:17:e7:3b:60:dc:5a:bf:5f:05:ee:5f:b6:36:a9:
                    21:64:38:8e:5a:fc:0d:a8:09:84:5c:cf:da:b1:a7:
                    2a:15:3f:61:2b:2a:73:59:3f:89:c1:32:44:19:93:
                    ef:25:fd:a9:8e:a9:39:cc:80:9b:b4:c3:7f:6f:41:
                    ce:f4:17:90:aa:bb:74:d0:dc:86:2a:2c:60:b5:f0:
                    c3:53:03:46:00:b6:70:6d:29:b9:5a:80:53:87:89:
                    81:2a:32:78:8b:5a:b4:51:a1:a8:9e:4d:79:9f:63:
                    09:c8:18:e9:62:69:40:f3:5e:56:92:de:46:8a:19:
                    4e:db:6a:e7:51:f3:89:76:5b:fd:b5:0e:e8:40:01:
                    00:01:7e:4b:d9:d5:6a:49:0d:ff:01:c3:7e:75:2b:
                    01:bf:03:1f:a9:6e:a8:f6:bf:6b:64:0c:6e:3d:d2:
                    ce:7b:9e:0c:c4:78:de:79:22:62:75:67:fa:76:df:
                    08:b0:f4:ae:26:f6:59:78:f6:de:da:c7:aa:d7:25:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:D5:89:EA:F5:0C:99:10:9E:93:07:04:65:1C:16:58:C4:82:EA
            X509v3 Authority Key Identifier:
                keyid:9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:55:d1:f0:69:a5:b3:78:3b:8d:f7:35:78:0c:19:1b:71:
         cd:98:62:cc:2b:fc:43:15:62:6e:44:9d:03:b0:2f:63:a8:29:
         fe:69:aa:91:31:ba:90:9e:b2:63:20:04:21:63:65:c5:e9:d8:
         dc:8d:01:e1:2f:3c:d0:d1:98:b1:aa:66:f0:40:de:fa:cb:46:
         a2:22:03:06:15:0b:b6:22:79:02:b6:e1:bc:be:4e:02:ac:5d:
         23:aa:65:bb:cf:fd:6b:c5:66:ae:9e:16:94:8a:aa:43:e1:81:
         6f:72:b8:ad:96:90:01:db:cc:ed:4e:75:23:6b:08:18:ee:b2:
         a9:34:cf:30:f7:bd:ae:52:08:c5:f9:9d:31:c3:a6:e2:db:8e:
         87:64:c2:4c:51:03:11:69:ab:22:6f:cf:94:16:f4:c7:5a:35:
         26:91:88:5b:a0:8d:11:1a:2e:9e:d0:92:0f:92:c0:37:61:ab:
         41:86:69:56:72:51:f1:21:92:be:6f:34:05:39:ee:4b:b7:59:
         de:97:fc:01:68:15:1c:ae:82:10:f8:1e:a6:41:3e:7e:9b:19:
         4f:08:d8:9c:6b:4b:09:6b:8d:ad:84:3b:ab:3f:a1:28:f5:7c:
         53:a1:f3:08:e7:bb:00:f5:4e:2d:2d:43:06:65:37:ba:4c:88:
         36:18:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:16:05 2026 by rpki-client