Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32322d3232203d3e20323632333031.roa
File:                     3137372e38372e3131362e302f32322d3232203d3e20323632333031.roa (raw, json)
Hash identifier:          JKdHvbsdccoZT59/EuHCeQLLz/e6k1SjDdYS+oqlRMc=
Subject key identifier:   F5:8B:39:14:67:C0:80:CE:B2:7F:64:B8:99:E7:A7:42:3E:C8:48:DC
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       10A7BFF7D0B634A23D72E069A1353DA9AA866B83
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32322d3232203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:27 +0000
ROA not before:           Fri 07 Aug 2026 14:01:27 +0000
ROA not after:            Fri 06 Aug 2027 14:06:27 +0000
asID:                     262301
IP address blocks:        177.87.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:bf:f7:d0:b6:34:a2:3d:72:e0:69:a1:35:3d:a9:aa:86:6b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:27 2026 GMT
            Not After : Aug  6 14:06:27 2027 GMT
        Subject: CN=F58B391467C080CEB27F64B899E7A7423EC848DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:78:6e:a0:e3:b4:4d:65:a8:28:bc:7a:d6:
                    50:81:91:64:6e:8e:09:64:f7:da:2b:36:0d:8a:8f:
                    e7:4e:f6:6b:60:52:91:f9:27:c6:f8:ac:df:f3:36:
                    84:c5:86:95:4b:85:e8:8a:bd:85:98:82:b5:7b:0d:
                    4c:81:11:3b:b4:ee:57:6c:08:50:4c:b0:c7:14:14:
                    d2:a8:8d:15:f3:72:cf:df:73:09:bc:3c:aa:de:4f:
                    5d:00:61:ea:9d:12:cf:5e:bd:7d:ca:51:0d:3c:12:
                    fe:02:93:7e:ed:f1:9a:51:aa:88:58:8d:c4:9c:7c:
                    61:bf:bf:82:63:f2:a9:4f:fe:ce:4f:3d:cd:a8:fa:
                    86:55:f5:86:13:64:cd:94:e7:ea:43:29:c8:9d:0c:
                    a2:25:f1:15:60:ce:a8:58:ee:76:1a:e8:94:64:fd:
                    3d:ee:4c:8f:a3:11:9e:ea:34:ca:d2:51:4c:8d:2e:
                    43:28:78:27:07:15:39:96:1c:16:34:5c:f5:48:de:
                    fb:6a:b8:6e:1a:80:6b:73:6d:cd:14:9e:38:66:28:
                    8e:fb:99:c2:2a:60:36:c8:5c:81:e8:bb:c2:51:f4:
                    78:08:37:d1:50:48:52:18:a2:44:b7:57:16:20:db:
                    57:98:9d:ce:83:d3:c1:25:07:75:42:ad:0e:d5:42:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:39:14:67:C0:80:CE:B2:7F:64:B8:99:E7:A7:42:3E:C8:48:DC
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32322d3232203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:59:e2:a4:dc:8a:44:c2:c6:79:36:7d:b0:4d:d6:0e:1f:
         eb:50:9f:a1:64:a6:64:70:e7:80:34:95:9c:08:75:e3:e9:05:
         23:71:fb:e8:1b:68:26:50:d7:04:5c:95:f6:24:82:89:cd:b6:
         82:0f:53:1b:d3:e4:30:17:46:2d:5a:0c:cf:71:ce:1c:e7:97:
         77:ca:c8:2e:bd:bf:64:6c:c5:87:44:26:82:a3:97:c1:08:37:
         62:a0:fe:a5:55:f3:d2:51:1a:0f:12:26:d7:2b:29:bd:00:93:
         d8:5f:b4:0e:f6:68:26:63:b8:c4:b2:cd:36:ea:86:3c:59:29:
         e2:4b:03:71:f7:3d:3b:fc:b2:e9:84:5e:ad:80:92:23:5d:b2:
         c4:2c:fa:b1:af:00:a9:98:6c:c1:51:d5:ba:ed:d3:98:81:95:
         89:f9:9e:de:b8:98:69:33:47:f5:9d:26:25:d2:8d:78:c1:a6:
         21:dd:2e:3e:19:ab:dd:6b:e1:a4:d5:3f:4d:cf:dc:7f:88:18:
         d1:10:bc:73:47:3c:02:e5:ad:45:36:12:24:94:ef:e0:b3:3b:
         11:67:3c:10:a6:db:61:ae:89:c4:25:29:67:a1:f9:46:63:48:
         65:98:fc:37:ba:98:f9:c2:8b:13:6a:42:21:6e:1c:de:af:07:
         dc:16:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:47:14 2026 by rpki-client