Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
File:                     3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          0/DDtiDFafqWQORECysPy0kF6DHFnxlWvWFdadyvepw=
Subject key identifier:   8E:44:0E:59:3B:09:67:1C:A3:C8:7A:85:7B:1A:2A:00:B5:38:90:8C
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       69C433CF2ED730ED771EE774BC6752A0A7F4F0E8
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 30 Sep 2026 21:05:33 +0000
ROA not before:           Wed 30 Sep 2026 21:00:33 +0000
ROA not after:            Wed 29 Sep 2027 21:05:33 +0000
asID:                     271700
IP address blocks:        177.67.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 03:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c4:33:cf:2e:d7:30:ed:77:1e:e7:74:bc:67:52:a0:a7:f4:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Sep 30 21:00:33 2026 GMT
            Not After : Sep 29 21:05:33 2027 GMT
        Subject: CN=8E440E593B09671CA3C87A857B1A2A00B538908C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:85:58:41:66:36:ac:d5:36:e1:a3:e8:7b:
                    40:c4:2d:92:cb:0e:3f:80:5e:bb:1c:9a:1a:c4:5b:
                    35:f7:fb:36:2a:58:17:3d:8d:61:cf:e9:01:82:0e:
                    cf:4b:9a:a9:86:84:d8:cb:d1:7c:a6:32:8f:26:ac:
                    14:cd:5a:0c:1a:5f:0e:ee:b1:73:d6:14:63:40:cc:
                    ad:7a:68:36:dc:a7:6f:ec:18:77:3b:e5:1e:5c:b4:
                    d4:fd:73:98:3b:29:30:6c:30:a8:fc:0f:d4:e4:3a:
                    7c:99:1b:1e:28:87:2c:06:8f:e7:ad:ba:d7:64:bf:
                    85:c1:df:97:98:21:54:73:ca:a2:9d:68:cf:75:e0:
                    53:94:71:a2:a6:ba:17:77:04:05:c8:de:11:f0:13:
                    cf:07:88:66:7b:fc:30:83:7a:42:0d:98:6c:a5:6a:
                    0e:df:2e:e8:4f:d0:0e:66:d3:a4:64:5d:ed:bd:96:
                    2c:09:35:00:5b:c8:36:ac:b8:99:d0:cb:3a:4c:2a:
                    64:22:d2:91:6e:c5:94:1b:37:6e:de:6b:e4:70:9d:
                    52:01:43:6a:03:46:34:ca:3e:1b:f9:8a:a7:ae:3b:
                    13:b0:08:21:61:73:80:9f:17:3b:72:da:08:13:04:
                    89:ef:c6:19:14:a6:52:55:8d:ff:83:29:22:af:f0:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:0E:59:3B:09:67:1C:A3:C8:7A:85:7B:1A:2A:00:B5:38:90:8C
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:4d:9c:6a:41:ae:a4:5a:7f:c7:87:5e:3a:e7:ae:9f:57:
         e1:0b:25:b3:cf:52:e8:83:d4:f3:41:b2:e0:83:01:06:19:50:
         e0:25:62:74:ba:fa:a9:1c:82:29:b7:fd:21:9b:9c:1b:e2:2b:
         d0:9b:40:ee:12:0d:97:1a:c3:19:12:7b:62:f9:36:b1:d0:81:
         5f:04:e3:fc:79:4c:9e:ba:aa:5c:2a:cc:d5:34:a0:5c:5a:ba:
         a8:91:bf:89:f3:21:44:04:fb:03:e7:ab:57:0f:7d:a1:a2:c1:
         6e:ea:74:2b:36:a1:ed:e8:8d:31:96:ad:e6:a0:d5:2e:f3:c9:
         53:ac:34:4a:a0:e4:c1:26:f5:06:f0:74:3f:b7:94:d7:e0:af:
         8f:03:4a:34:7c:55:bc:d0:6e:71:51:ab:57:ba:4a:6d:81:3b:
         3b:2d:2d:3e:51:e8:cc:4e:92:71:2c:2b:67:66:82:76:48:2c:
         c1:b5:91:2e:c7:93:06:1d:cf:b3:19:43:22:93:bd:15:9c:ed:
         13:b0:0b:3c:ee:4b:eb:2c:31:ec:ac:ba:0f:09:ef:00:22:1e:
         f1:04:49:31:9c:89:72:ab:cf:0c:5b:5e:96:b4:de:40:47:9e:
         d3:bb:d0:b6:49:52:cc:b7:4c:61:7c:9c:39:f1:44:3e:6d:19:
         e8:0a:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:15:43 2026 by rpki-client