Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131392e302f32342d3234203d3e20323632333031.roa
File:                     3137372e38372e3131392e302f32342d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          fxqwVM2yflJmbCNqI7lhaSbaMABIxuDjgpCEEL2qszs=
Subject key identifier:   A2:3A:4D:88:6A:36:74:DC:C0:D9:D3:AE:6A:C9:47:64:6D:4E:B5:47
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       718D928397FB9DF131D5156C20F5408B3BFC483C
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131392e302f32342d3234203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:28 +0000
ROA not before:           Fri 07 Aug 2026 14:01:28 +0000
ROA not after:            Fri 06 Aug 2027 14:06:28 +0000
asID:                     262301
IP address blocks:        177.87.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8d:92:83:97:fb:9d:f1:31:d5:15:6c:20:f5:40:8b:3b:fc:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:28 2026 GMT
            Not After : Aug  6 14:06:28 2027 GMT
        Subject: CN=A23A4D886A3674DCC0D9D3AE6AC947646D4EB547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:6a:bb:6f:9d:26:9f:0a:90:c4:df:43:0b:
                    cc:f8:9c:d2:15:c3:2c:67:3f:d8:78:fd:04:df:12:
                    e7:00:a3:7a:92:57:18:4a:43:57:3c:6f:a3:34:9c:
                    e7:6d:a7:0b:6f:93:04:e2:d2:15:83:4d:df:8c:98:
                    35:69:3d:a9:1f:4a:fc:9c:67:17:d5:59:48:ff:f2:
                    48:38:1f:6b:84:b1:a4:90:53:41:df:80:3e:ff:f7:
                    09:db:4a:ce:33:2d:39:68:d1:9d:88:e7:32:c2:ba:
                    50:9d:d5:70:c7:bc:ab:2a:e1:1c:8c:f2:a0:ca:49:
                    0d:a7:07:b9:69:c1:a3:d5:3e:80:3b:a5:4f:4a:62:
                    bc:e0:de:d8:84:1d:b4:76:f7:a9:c7:4c:3f:a3:4e:
                    a7:25:7a:b6:eb:39:e8:76:30:fa:5a:64:3e:73:40:
                    6c:3e:79:ea:e4:b6:95:73:5d:c6:45:ed:a5:e9:3e:
                    1a:77:ee:b1:88:64:9d:2c:88:9c:86:c3:0a:a6:cd:
                    e7:09:db:99:aa:d9:8c:f3:74:cd:80:2f:1c:5b:03:
                    b2:5b:52:bb:7a:da:8f:53:fa:bc:5b:37:9c:db:06:
                    4f:20:dc:c0:18:c6:4c:99:01:21:63:9d:99:1b:6b:
                    31:ee:07:ea:84:6d:85:a4:e6:60:4a:43:2c:fe:59:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:4D:88:6A:36:74:DC:C0:D9:D3:AE:6A:C9:47:64:6D:4E:B5:47
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131392e302f32342d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:ee:db:11:ad:04:91:6f:ad:50:05:4c:ea:b8:13:3f:57:
         1a:2f:87:03:68:03:bf:63:d2:29:41:47:b7:11:d6:f6:f6:eb:
         91:e2:43:6c:44:cd:78:b3:6e:71:d9:d1:a5:70:79:f6:b1:09:
         76:cf:8e:ba:57:64:da:50:4b:60:a9:bf:c1:18:b9:36:b7:10:
         54:e0:9a:e7:e1:33:a3:ce:5c:3f:45:39:31:79:05:4a:78:e7:
         57:34:e2:66:a5:77:14:67:0e:51:0a:2e:80:6d:a4:5e:34:09:
         0b:a7:2e:99:89:07:0b:a6:20:18:7c:9f:0e:a3:de:36:6d:d1:
         84:14:b6:f3:c0:b9:5a:6a:1c:12:27:08:eb:72:01:33:91:6e:
         b1:d2:95:b6:ab:71:7f:86:43:84:ec:1b:b0:28:cc:c1:f4:45:
         90:33:32:4d:7f:4a:c8:8d:9d:14:9b:74:39:29:1d:0c:b7:0f:
         0a:82:c6:bc:cd:7a:0e:eb:95:fe:06:0b:e5:8b:aa:a2:e8:4b:
         11:1c:0f:f2:50:b2:a7:a5:30:2f:43:c1:ca:a7:04:e8:8a:cf:
         ae:4e:30:a8:65:e9:fc:bb:65:a4:d2:25:fc:dd:7f:21:18:3a:
         42:48:6b:a6:a0:00:0d:8a:fe:4a:8f:89:01:e7:8a:19:1a:86:
         59:32:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:50 2026 by rpki-client