Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234372e302f32342d3234203d3e203238323634.roa
File:                     3137372e32322e3234372e302f32342d3234203d3e203238323634.roa (raw, json)
Hash identifier:          r6KpkMmU6PzQshSQ3eNKN200S+B2RWdYw1kTOEz8uyI=
Subject key identifier:   52:C9:8D:26:16:A8:21:A9:35:05:A4:EA:0C:60:61:30:1A:39:D0:C7
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       1F8D5EA21DD254DF5E4C13F9D02ECF327B8E3B50
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234372e302f32342d3234203d3e203238323634.roa
Signing time:             Tue 06 Oct 2026 21:15:44 +0000
ROA not before:           Tue 06 Oct 2026 21:10:44 +0000
ROA not after:            Tue 05 Oct 2027 21:15:44 +0000
asID:                     28264
IP address blocks:        177.22.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8d:5e:a2:1d:d2:54:df:5e:4c:13:f9:d0:2e:cf:32:7b:8e:3b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Oct  6 21:10:44 2026 GMT
            Not After : Oct  5 21:15:44 2027 GMT
        Subject: CN=52C98D2616A821A93505A4EA0C6061301A39D0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:39:89:12:2d:54:e8:d7:b1:9b:76:ec:32:
                    19:01:ab:c7:42:d6:15:bf:74:05:85:1d:98:28:15:
                    02:4f:19:08:3c:55:63:7b:78:a6:79:b2:20:bd:2d:
                    8e:fc:6b:84:1e:10:10:2f:14:50:fa:1d:66:27:fe:
                    d2:43:78:60:bd:8d:2c:33:8c:1a:77:44:1b:fd:bd:
                    c4:70:8d:73:d0:2b:9e:01:f5:6b:d8:0f:f8:e9:0f:
                    47:3a:6b:23:81:0e:e5:a5:8a:81:17:53:e2:6d:4f:
                    21:09:88:e1:57:33:2c:b7:bc:03:ac:5a:da:66:64:
                    56:4a:ff:e7:de:a8:ea:0c:bd:8b:07:97:d1:a2:01:
                    01:62:02:9c:74:f1:0a:e5:a7:22:2a:d1:e7:f6:1f:
                    e6:65:91:04:e1:01:8b:25:69:89:81:60:96:98:c5:
                    59:96:6f:9f:08:24:e3:10:ec:cc:16:ee:07:58:65:
                    8f:03:f5:58:a2:06:21:c9:1f:36:bd:8f:4f:ab:f3:
                    27:27:78:0d:9d:38:d9:94:0f:dd:3a:90:de:b7:fb:
                    1d:1e:ab:81:2e:b1:77:de:8e:0f:68:ad:bd:b1:0a:
                    05:b9:a3:17:2b:b9:db:7c:a0:cd:3f:25:db:bd:6c:
                    97:79:15:04:d4:93:59:14:ad:d8:f4:2b:c1:1a:3b:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C9:8D:26:16:A8:21:A9:35:05:A4:EA:0C:60:61:30:1A:39:D0:C7
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234372e302f32342d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:58:a0:b7:6d:23:18:e0:25:ee:7b:7d:5f:05:b8:51:c2:
         a2:e4:c6:03:1b:29:3f:12:b3:3a:02:26:49:67:91:ff:73:b4:
         fd:18:74:13:8e:18:68:6a:75:e1:fd:18:81:99:95:c0:c7:78:
         e8:9b:32:8b:d8:15:e0:06:55:22:9f:16:d9:90:b1:06:08:1e:
         c5:eb:21:53:93:74:b1:4b:f3:a1:9b:c3:89:4d:84:5c:27:43:
         f1:c5:50:7a:41:68:3b:7d:2c:94:83:b0:68:97:3e:49:56:13:
         2f:87:e7:90:c6:d8:2c:3a:00:07:94:5c:64:b9:ae:94:97:05:
         57:ec:15:a8:be:f3:22:f1:92:c7:7f:ac:d5:eb:55:4a:76:11:
         af:74:8d:18:58:c7:99:65:41:26:d3:87:f0:8d:cf:58:10:3c:
         b4:e7:1d:3f:1d:3a:8a:a8:0c:3a:55:62:ce:61:18:e6:c7:e3:
         bf:35:7b:4f:fe:40:65:0e:29:4c:60:13:91:59:50:85:a2:4f:
         93:d0:14:48:4d:58:90:e5:14:f2:f7:5b:ff:19:d6:63:c6:e8:
         50:df:3b:52:88:61:5d:72:8c:b6:cd:00:cd:d4:f0:67:d3:7b:
         71:9d:c9:32:48:a6:15:f6:bc:e8:b9:1d:4a:dc:af:b8:2a:af:
         e9:d5:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:34:21 2026 by rpki-client