Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa
File:                     3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          xczYmE8VoLMyH5GWk4SQXMZHxwlAqRldO2vGk3hC2eo=
Subject key identifier:   3F:F0:54:2C:23:13:32:34:52:55:3A:3A:FB:D7:73:96:D4:2D:10:E9
Certificate issuer:       /CN=4B66A2DE7514397F81FAE2EB8843090A72C73E81
Certificate serial:       1831F1C272E7A6964801C4687522AE4A0658F3EB
Authority key identifier: 4B:66:A2:DE:75:14:39:7F:81:FA:E2:EB:88:43:09:0A:72:C7:3E:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B66A2DE7514397F81FAE2EB8843090A72C73E81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa
Signing time:             Mon 10 Aug 2026 13:39:38 +0000
ROA not before:           Mon 10 Aug 2026 13:34:38 +0000
ROA not after:            Mon 09 Aug 2027 13:39:38 +0000
asID:                     52863
IP address blocks:        177.124.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/4B66A2DE7514397F81FAE2EB8843090A72C73E81.crl
                          rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/4B66A2DE7514397F81FAE2EB8843090A72C73E81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B66A2DE7514397F81FAE2EB8843090A72C73E81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:31:f1:c2:72:e7:a6:96:48:01:c4:68:75:22:ae:4a:06:58:f3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B66A2DE7514397F81FAE2EB8843090A72C73E81
        Validity
            Not Before: Aug 10 13:34:38 2026 GMT
            Not After : Aug  9 13:39:38 2027 GMT
        Subject: CN=3FF0542C2313323452553A3AFBD77396D42D10E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:0b:38:e6:1c:9c:f5:31:76:f7:a5:95:61:
                    86:4f:3c:e3:f3:1e:7d:18:0a:b6:f5:a3:bf:04:95:
                    52:fe:fd:e5:57:88:b9:8a:0a:88:fd:70:e8:60:94:
                    0a:a8:f0:d9:85:b6:cb:8f:9b:b1:a0:74:f8:02:18:
                    f7:44:ea:49:81:3d:85:4e:64:69:f0:c4:d2:5f:1c:
                    21:18:3d:5f:43:ca:5d:8d:6d:45:26:2c:1a:38:ba:
                    4e:cb:16:22:95:6c:67:b9:c3:4a:97:f7:c6:66:6e:
                    c0:2e:6c:a7:e7:ad:e4:c9:ce:9b:10:08:16:c9:a1:
                    6b:0a:94:a8:21:26:fe:3f:01:09:c3:d1:72:46:98:
                    14:43:31:b3:f5:95:03:56:50:c2:73:dc:32:a7:5b:
                    88:a1:7d:47:e3:5e:65:8c:7d:ed:34:6d:0d:51:55:
                    65:61:53:be:bb:62:92:e9:b4:34:a3:81:11:fe:85:
                    a5:27:60:bb:ec:dd:1e:f4:3f:7c:2a:62:f3:a0:cb:
                    c2:31:02:43:14:b1:39:d6:14:b2:e0:7d:73:6d:c8:
                    86:09:b1:3e:35:16:a9:6b:bf:7f:d5:e4:8f:df:16:
                    06:85:6f:0b:82:6e:31:1a:59:79:bf:9f:06:5f:ca:
                    38:05:65:a0:f5:8e:79:bf:16:7b:2d:d7:ae:96:01:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:54:2C:23:13:32:34:52:55:3A:3A:FB:D7:73:96:D4:2D:10:E9
            X509v3 Authority Key Identifier:
                keyid:4B:66:A2:DE:75:14:39:7F:81:FA:E2:EB:88:43:09:0A:72:C7:3E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/4B66A2DE7514397F81FAE2EB8843090A72C73E81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B66A2DE7514397F81FAE2EB8843090A72C73E81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:1d:f9:94:64:b9:50:cb:9d:d9:d2:d2:66:71:ea:d8:52:
         4a:b5:d5:09:e0:79:0c:6f:34:5c:43:9b:37:af:1f:ab:10:56:
         86:2d:a4:4e:4f:03:e2:0d:83:25:8b:85:7e:88:d5:e2:9b:30:
         f0:d8:03:b4:f1:ca:a3:70:18:c1:05:5f:a1:33:cd:62:45:33:
         5b:1e:86:61:fe:53:6e:b7:28:cd:fd:3e:ff:7a:83:d9:5c:fb:
         90:a1:fd:a9:c2:2d:cd:f8:55:b5:21:35:9c:d6:62:77:2c:ce:
         2a:d6:77:41:02:b3:38:3d:dd:81:9d:8f:49:6d:b5:4f:ca:1d:
         5d:0e:61:bf:b8:cf:b6:c1:56:04:0c:d8:57:85:95:4a:19:3e:
         23:8c:aa:be:c0:36:ac:82:f5:db:e1:c9:16:ed:5f:09:b3:8e:
         78:53:d6:e9:e4:df:ed:75:f7:d1:13:2e:33:08:51:0a:30:bf:
         06:4c:71:83:92:32:5d:91:98:40:31:a6:ab:47:33:61:51:58:
         34:fb:d3:e1:f3:97:b0:25:06:11:cb:49:47:b0:05:3c:17:14:
         63:88:09:d3:53:56:17:f2:dc:e9:f1:1d:a6:e7:53:20:f6:ef:
         03:93:03:3c:de:9c:da:5b:60:f0:fc:57:39:f5:34:0b:fc:40:
         e3:88:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:43:55 2026 by rpki-client