Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/3137372e3135322e38382e302f32312d3234203d3e203532353335.roa
File:                     3137372e3135322e38382e302f32312d3234203d3e203532353335.roa (raw, json)
Hash identifier:          ToeXfXiXDRYUNm9igJ5DBnBl1uhJZCi1P38INmIgd80=
Subject key identifier:   EA:6C:01:4D:F5:49:B5:84:81:8A:BD:68:2D:C3:DD:B8:64:AA:B2:20
Certificate issuer:       /CN=D3F2CBDBAFA5B717794DA3A5AA540794C2061230
Certificate serial:       1E617F813F06482D64894311A6BFAD04597C2AE2
Authority key identifier: D3:F2:CB:DB:AF:A5:B7:17:79:4D:A3:A5:AA:54:07:94:C2:06:12:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/3137372e3135322e38382e302f32312d3234203d3e203532353335.roa
Signing time:             Tue 07 Jul 2026 21:01:56 +0000
ROA not before:           Tue 07 Jul 2026 20:56:56 +0000
ROA not after:            Tue 06 Jul 2027 21:01:56 +0000
asID:                     52535
IP address blocks:        177.152.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.crl
                          rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Jul 2026 23:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:7f:81:3f:06:48:2d:64:89:43:11:a6:bf:ad:04:59:7c:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3F2CBDBAFA5B717794DA3A5AA540794C2061230
        Validity
            Not Before: Jul  7 20:56:56 2026 GMT
            Not After : Jul  6 21:01:56 2027 GMT
        Subject: CN=EA6C014DF549B584818ABD682DC3DDB864AAB220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1d:01:88:4e:ce:8f:00:e5:8d:cd:95:5d:62:
                    39:c0:ba:b1:90:70:f6:cb:c5:1d:57:d7:fa:8e:30:
                    15:3a:f8:d8:a6:75:2b:8c:e1:2f:05:89:60:4a:e9:
                    d4:21:42:42:18:28:99:ca:82:c1:ed:74:87:df:92:
                    51:09:b3:44:d6:17:1a:da:67:81:c5:1a:49:70:76:
                    83:e0:43:00:a1:df:0a:4b:29:66:d5:88:94:9e:8c:
                    09:55:37:f7:1c:d8:b3:67:6f:3d:30:7d:7c:b9:c0:
                    b6:a5:7c:45:ce:2d:63:e7:78:f4:fb:23:15:54:74:
                    79:4a:bc:29:f6:3f:e0:5f:92:ad:10:be:bd:df:6b:
                    c2:a3:f3:be:d7:02:fe:9d:56:9b:6c:44:77:9b:6c:
                    0c:18:fc:a1:82:87:41:62:a8:6c:17:54:6c:4e:0d:
                    36:13:7d:ae:9b:2a:bf:02:45:60:5e:09:05:8f:6f:
                    c8:ff:a8:03:05:90:d1:cd:88:0a:8d:14:b6:10:fa:
                    74:b0:f6:11:71:c3:8a:3a:54:ca:2a:21:b1:da:d7:
                    b3:87:66:9d:2e:62:c6:3f:52:f6:ce:82:d3:b3:8d:
                    ca:59:47:3e:5a:f3:26:f0:d3:1d:42:53:7f:88:18:
                    ad:ca:54:ae:11:64:4a:00:3b:7a:fb:77:42:85:5f:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:01:4D:F5:49:B5:84:81:8A:BD:68:2D:C3:DD:B8:64:AA:B2:20
            X509v3 Authority Key Identifier:
                keyid:D3:F2:CB:DB:AF:A5:B7:17:79:4D:A3:A5:AA:54:07:94:C2:06:12:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/3137372e3135322e38382e302f32312d3234203d3e203532353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:37:5e:d5:15:a1:c7:df:6e:fa:72:00:3e:6c:85:53:de:6e:
         d3:ee:0a:db:00:d6:4d:e6:eb:d8:75:ea:00:40:a6:0a:7b:e8:
         b0:52:ee:e2:2b:f9:23:92:e8:c1:f5:3b:1d:74:05:8c:bc:2f:
         6c:d0:9b:e8:83:d3:34:b3:47:38:da:de:eb:4f:33:89:76:43:
         95:99:e3:46:14:1e:67:49:00:ea:04:e3:7e:33:b6:07:b0:d6:
         92:af:03:27:ac:8a:e1:de:35:11:e8:d1:15:da:e6:0e:d4:25:
         78:d6:5d:30:6a:ad:2e:74:2a:6c:c0:06:aa:7c:e7:34:4c:df:
         43:b2:a1:a5:15:ec:e3:83:dd:e3:a1:d8:7d:ce:83:4f:f3:c5:
         68:b3:41:dc:a2:6e:df:3b:a2:f3:e7:cf:42:73:26:a7:ef:8a:
         3a:11:a8:27:c6:65:13:ec:5c:9c:87:63:ef:75:b5:4e:6e:16:
         6b:33:72:93:45:4a:b1:2e:8c:fa:e5:86:c9:01:9b:c4:d7:27:
         af:58:91:a7:74:0d:0c:5a:3c:f5:87:cc:d5:dc:ff:37:e2:dc:
         6e:7c:3c:2b:5e:c0:c0:b8:8f:d9:da:94:6b:f5:32:2d:89:28:
         20:51:7d:10:4b:05:2a:81:fc:55:4c:02:f0:9c:dc:e2:f0:98:
         0b:c6:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:44 2026 by rpki-client