Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3137372e3132392e31362e302f32312d3234203d3e20323632383037.roa
File:                     3137372e3132392e31362e302f32312d3234203d3e20323632383037.roa (raw, json)
Hash identifier:          DXTCMtpOp0x/rdr/ubvCX0lIl7irND4nfrDtBHCrIns=
Subject key identifier:   A9:1B:C8:49:59:C4:AD:F3:92:FD:D0:F3:F2:40:99:B7:C8:64:91:1A
Certificate issuer:       /CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
Certificate serial:       68B8B1C6FC7D7C9E08BDBFC10BC48D4A7984EE0F
Authority key identifier: 6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3137372e3132392e31362e302f32312d3234203d3e20323632383037.roa
Signing time:             Thu 20 Aug 2026 10:54:24 +0000
ROA not before:           Thu 20 Aug 2026 10:49:24 +0000
ROA not after:            Thu 19 Aug 2027 10:54:24 +0000
asID:                     262807
IP address blocks:        177.129.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl
                          rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b8:b1:c6:fc:7d:7c:9e:08:bd:bf:c1:0b:c4:8d:4a:79:84:ee:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
        Validity
            Not Before: Aug 20 10:49:24 2026 GMT
            Not After : Aug 19 10:54:24 2027 GMT
        Subject: CN=A91BC84959C4ADF392FDD0F3F24099B7C864911A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:3d:ef:b8:14:c0:43:a4:69:6a:c3:44:af:
                    79:c9:bf:45:d9:e6:ad:cf:50:03:52:0e:ab:5d:37:
                    ce:7f:da:7b:2c:ec:84:00:21:c1:7e:01:97:a4:d9:
                    19:ac:33:2b:4c:6f:49:6a:3d:81:af:57:09:be:a8:
                    7d:f3:a0:2f:30:bb:a1:70:aa:32:06:da:e2:b1:18:
                    fe:86:8d:26:9b:99:35:3d:8c:2d:a1:d5:5b:f8:0d:
                    18:14:4d:b3:cc:da:c7:45:de:3c:6c:54:f9:e1:e3:
                    dc:6c:b6:9d:11:9b:66:60:52:fe:ea:3b:5b:4f:06:
                    57:d1:4b:96:e9:ef:78:89:02:94:c7:ac:42:8d:cd:
                    80:8e:fd:51:ac:cc:5e:41:af:45:06:55:00:a6:b7:
                    a1:bc:17:32:8b:0f:1c:60:d7:20:43:7c:d2:47:60:
                    76:31:10:2d:a5:34:f0:c6:55:da:64:d4:2c:a1:77:
                    39:4f:47:d9:52:d8:8a:6f:22:9e:cf:ee:b6:e6:52:
                    5b:a0:91:6e:bd:ff:3b:48:e1:96:9c:51:de:0a:c0:
                    06:6a:f8:70:c6:3a:9a:4b:a8:a4:10:9c:34:5f:85:
                    d1:e0:9c:be:16:b6:90:5b:93:8c:01:c1:af:ab:d1:
                    5b:2a:15:f1:1d:8d:b9:7a:d2:e0:bb:d6:aa:ee:93:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:C8:49:59:C4:AD:F3:92:FD:D0:F3:F2:40:99:B7:C8:64:91:1A
            X509v3 Authority Key Identifier:
                keyid:6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3137372e3132392e31362e302f32312d3234203d3e20323632383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e4:d0:06:82:36:93:60:60:be:3e:81:74:9f:d4:36:c5:5b:a3:
         0c:28:7e:fa:4a:9b:f6:78:f7:bf:46:39:02:64:cb:e9:c1:5c:
         9c:41:56:29:64:5d:d5:ae:26:03:8f:b0:7b:c2:39:14:ae:32:
         ff:03:ab:4b:67:64:97:b6:b7:f5:15:e8:39:19:80:ee:32:ff:
         9d:92:b3:f0:bb:51:3d:72:53:db:62:28:b6:c4:16:87:54:1f:
         49:e8:f0:b8:85:4e:f1:0e:68:80:1c:26:81:0f:8d:85:ca:f9:
         c3:12:12:86:f5:c0:7f:72:df:a3:50:34:be:b9:b9:5a:49:bd:
         c3:60:f7:9a:31:84:33:e6:89:d1:e3:a4:64:d2:21:12:d0:22:
         37:b9:8e:a9:95:18:fa:a5:61:63:b7:c1:42:61:56:46:8e:c5:
         98:8d:2b:70:16:14:26:7f:89:f0:78:86:d1:e8:72:cc:65:67:
         3a:da:73:06:8a:a5:92:ab:bf:18:0c:b0:8f:23:fe:ef:db:bc:
         f1:37:bb:65:1f:4c:a0:72:e9:ce:7f:a2:db:a3:58:84:3c:47:
         63:2e:80:18:fd:37:bb:1d:c9:bf:ae:bf:ac:92:c8:7c:06:ed:
         3c:c7:b1:16:04:c4:e7:db:f8:41:21:e1:c3:b5:9f:b8:39:03:
         5e:12:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:52 2026 by rpki-client