Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131372e302f32342d3234203d3e20323632333031.roa
File:                     3137372e38372e3131372e302f32342d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          YsCz3MQ6jikx/Tfxu4b9Bhx25IEsnFvQHst7A/RvNn0=
Subject key identifier:   26:D7:2B:1F:FA:69:0F:16:91:36:62:2D:A3:0E:A9:B0:FD:F7:F2:BF
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       63AFD2EA863B822616AB8FDDA9BBAE59CF44A2A1
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131372e302f32342d3234203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:30 +0000
ROA not before:           Fri 07 Aug 2026 14:01:30 +0000
ROA not after:            Fri 06 Aug 2027 14:06:30 +0000
asID:                     262301
IP address blocks:        177.87.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:af:d2:ea:86:3b:82:26:16:ab:8f:dd:a9:bb:ae:59:cf:44:a2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:30 2026 GMT
            Not After : Aug  6 14:06:30 2027 GMT
        Subject: CN=26D72B1FFA690F169136622DA30EA9B0FDF7F2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:93:90:ba:63:59:79:0c:f8:02:55:2e:0e:
                    bf:39:b7:25:47:27:a4:9e:5a:eb:44:6c:c2:b8:e9:
                    a3:4e:3a:b9:e5:9c:0b:83:22:41:f9:bc:60:19:20:
                    37:b4:c9:8f:c9:37:97:7d:50:b6:2e:18:7d:e9:43:
                    01:82:bf:f8:f1:27:43:bf:5e:a2:43:c2:ce:d6:f0:
                    ce:5a:b1:ad:fb:26:61:a2:e5:11:f2:e8:78:7a:fe:
                    49:b3:d8:c2:19:78:68:e8:e9:31:8a:79:94:47:3b:
                    91:8c:47:58:33:03:44:4a:c9:d9:19:82:aa:9c:cf:
                    c5:37:af:ed:c2:14:61:57:02:5e:79:1a:0b:b8:a6:
                    06:49:11:6f:ec:d8:4d:5d:a2:d3:b8:ab:7b:ea:a8:
                    a8:5c:5f:9c:28:5d:e2:76:74:79:ee:11:f6:29:1f:
                    69:34:2b:e6:1c:46:e4:b7:cf:28:9f:c5:0b:00:a8:
                    a3:75:18:f4:80:cd:12:45:a9:06:c2:89:78:e7:c8:
                    37:c4:27:ed:3d:f5:b0:84:5f:8a:78:64:76:79:8c:
                    84:f1:e3:ad:2e:62:52:c4:c0:1c:6b:ad:46:ef:b7:
                    37:1f:ea:dc:9e:66:2e:81:d1:12:d7:ff:e9:cf:f9:
                    1e:57:99:01:84:de:71:e5:d6:e8:ea:aa:e9:a0:a3:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D7:2B:1F:FA:69:0F:16:91:36:62:2D:A3:0E:A9:B0:FD:F7:F2:BF
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131372e302f32342d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6a:47:83:ca:18:c8:81:f9:93:1d:58:2b:13:d0:b6:b9:c6:
         0f:b7:b7:a0:f6:bd:3b:38:44:b1:85:e5:fc:77:28:37:75:54:
         42:04:de:f5:f0:73:64:40:ca:5d:5e:ea:2f:4e:27:30:b0:45:
         fb:56:94:c9:c2:e2:70:d7:81:6e:31:48:e6:03:74:66:28:fc:
         95:a0:30:3f:f9:28:16:4f:e9:42:1d:a0:83:47:bb:7e:5d:ef:
         05:dd:6e:0c:1d:97:d5:fa:a7:28:55:44:18:e0:b1:19:dc:7c:
         4a:01:7f:f8:cd:35:e0:d0:cb:1b:83:32:91:12:6e:42:e7:21:
         eb:60:22:4f:6c:17:69:1e:e1:a7:a6:41:31:1a:52:b1:3e:04:
         73:dc:00:64:e6:c3:31:b1:da:5e:90:f5:a3:6e:68:c3:f7:ff:
         75:97:9e:7a:7b:30:44:e1:c3:8c:75:d8:3b:92:41:97:40:10:
         47:45:4e:9c:b0:e3:0b:b9:9d:b2:f4:49:54:b7:46:c6:af:4b:
         75:4d:11:da:0c:dd:fe:cc:33:d5:55:83:6f:15:27:6a:e3:df:
         e3:7a:25:2c:58:bf:30:4a:8e:56:d3:99:e2:b2:b8:12:c9:2c:
         9f:5e:21:2f:0e:2c:1c:5b:2c:d5:db:9a:21:4c:e5:d7:8e:f5:
         b4:33:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:44 2026 by rpki-client