Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32312d3231203d3e20323632333031.roa
File:                     3137372e38372e3131322e302f32312d3231203d3e20323632333031.roa (raw, json)
Hash identifier:          qC9X8EdlEYTlVSwOPZJl1c5YKwrHD58OjaHhKAV5Jps=
Subject key identifier:   C2:CC:CF:8D:D9:97:AF:C7:A4:C6:49:FE:F3:B3:B6:DE:55:02:BF:14
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       1C3029C35612F1220C530426204BF0E949A0678D
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32312d3231203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:28 +0000
ROA not before:           Fri 07 Aug 2026 14:01:28 +0000
ROA not after:            Fri 06 Aug 2027 14:06:28 +0000
asID:                     262301
IP address blocks:        177.87.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 01:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:29:c3:56:12:f1:22:0c:53:04:26:20:4b:f0:e9:49:a0:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:28 2026 GMT
            Not After : Aug  6 14:06:28 2027 GMT
        Subject: CN=C2CCCF8DD997AFC7A4C649FEF3B3B6DE5502BF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:8b:59:97:ae:0a:ca:01:4a:a1:c1:22:d9:
                    71:ea:ad:d3:47:7f:b3:ec:fc:3f:0c:43:c5:3e:55:
                    2f:4c:fd:18:1c:96:e0:7c:b2:ce:a9:6a:8c:a3:7d:
                    f9:fc:4a:aa:dd:55:68:4c:b0:bf:48:c6:31:0d:e1:
                    52:6b:d2:f6:20:80:de:91:3f:8e:73:e3:b6:a1:22:
                    3a:e9:68:ff:00:42:83:30:71:be:a4:24:2b:5b:0c:
                    c1:39:ac:17:97:a2:e3:d8:e3:e6:4a:9b:e7:27:0a:
                    89:52:33:eb:f0:07:4c:20:c8:85:68:2d:33:5d:62:
                    90:79:f7:c4:cd:38:8b:22:24:29:83:c9:f8:f7:49:
                    31:f3:92:ab:4d:aa:14:e5:a7:70:86:25:f3:63:df:
                    ba:d5:bc:81:77:33:14:29:3a:28:95:06:66:6e:8e:
                    45:4c:20:b8:81:fd:37:39:5a:74:86:9a:90:7a:8d:
                    ce:e2:57:28:2b:2b:64:5f:fe:a4:6b:5a:a3:2b:0f:
                    41:0b:bf:13:93:33:8d:80:89:b9:0e:3e:00:1e:c2:
                    8a:05:10:bc:91:a5:84:dc:0d:7a:37:b3:21:e4:c2:
                    e9:66:7d:be:7f:84:07:db:1f:58:1d:16:76:47:aa:
                    15:0b:c6:b4:0e:70:7e:ad:8d:2d:e9:d1:e7:89:60:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:CF:8D:D9:97:AF:C7:A4:C6:49:FE:F3:B3:B6:DE:55:02:BF:14
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131322e302f32312d3231203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:c0:d4:78:d6:0f:a1:66:d2:bd:5f:24:99:e4:23:20:54:
         5a:5d:e5:1e:b6:1e:3c:1d:a4:d2:dc:eb:f3:62:df:fb:c4:2f:
         37:ac:7a:7b:d5:16:80:bb:7e:89:de:de:f9:ca:11:d3:f5:3c:
         f7:99:b6:b7:0a:7c:9e:0f:fb:a5:16:ad:87:a8:ec:37:96:09:
         69:7c:cb:44:8d:d2:2c:93:d8:4e:fb:ba:44:a8:f4:5a:5c:7d:
         3d:7e:3e:7d:d6:a0:38:ea:44:37:a9:40:8b:4c:62:4e:d9:44:
         84:8d:ed:d1:3d:b8:9d:a2:b4:c0:26:a4:da:7e:76:94:43:a7:
         bc:60:88:f3:a5:cb:a8:7a:8c:44:34:3c:cd:6b:9f:88:7e:2a:
         4b:99:2e:3a:c9:a6:09:e5:49:d8:7a:25:e4:51:30:8b:7c:19:
         21:9e:07:f0:c1:78:0f:cb:bc:2f:c5:14:49:60:c2:bf:5d:90:
         58:d4:a1:ec:c3:76:92:a5:6a:69:4a:8d:e3:36:d1:65:94:3e:
         cd:36:e7:4d:50:cc:2c:bb:b3:56:f5:61:8d:43:14:42:ba:43:
         25:dd:e8:57:d3:65:65:d5:7d:1d:ed:0e:3a:8f:b1:e9:be:53:
         13:31:8a:b6:a0:44:4c:75:12:d9:df:98:f3:5f:6c:85:2e:b7:
         6b:8c:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:32:35 2026 by rpki-client