Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3332203d3e20323731303533.roa
File:                     3137372e37342e3136342e302f32322d3332203d3e20323731303533.roa (raw, json)
Hash identifier:          ZIwog+bjgMnQ6rTK8BGuTSzC/nOzUGNT+7KzPog3tnc=
Subject key identifier:   56:6B:F8:BA:9A:30:F6:C2:8D:FD:65:55:24:55:D4:20:FC:69:C6:5C
Certificate issuer:       /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
Certificate serial:       4823785AEFCF4D18429FB513FA6E04C1061B9C00
Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3332203d3e20323731303533.roa
Signing time:             Tue 01 Sep 2026 21:09:01 +0000
ROA not before:           Tue 01 Sep 2026 21:04:01 +0000
ROA not after:            Tue 31 Aug 2027 21:09:01 +0000
asID:                     271053
IP address blocks:        177.74.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl
                          rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:78:5a:ef:cf:4d:18:42:9f:b5:13:fa:6e:04:c1:06:1b:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
        Validity
            Not Before: Sep  1 21:04:01 2026 GMT
            Not After : Aug 31 21:09:01 2027 GMT
        Subject: CN=566BF8BA9A30F6C28DFD65552455D420FC69C65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:d9:67:7d:3c:f1:8d:21:c4:75:8b:c5:22:
                    d9:74:b5:db:e5:59:4f:97:35:5c:48:ca:4b:d4:a1:
                    9b:0d:a1:2f:2a:5a:bb:91:35:04:f8:11:b3:3e:1d:
                    51:45:04:42:dc:2f:e2:b4:1b:d9:3f:29:dc:7f:0a:
                    28:da:68:eb:9b:34:92:32:bf:5b:22:66:76:3b:3a:
                    63:6c:9c:ab:d7:4a:0e:6d:19:d3:c5:6c:9f:4f:f2:
                    6f:55:ed:de:f3:1e:da:98:ba:e6:aa:09:51:78:a6:
                    04:3b:e3:79:6e:9b:c5:f1:79:cd:34:1a:f9:31:fa:
                    e8:0c:de:34:3c:a2:f3:44:c0:3c:02:a3:6b:40:b6:
                    15:3b:04:da:49:12:c8:0e:eb:8c:33:e1:d7:f1:f1:
                    2b:be:70:dd:1b:de:63:93:eb:a6:40:91:4c:16:11:
                    0a:1a:53:cc:c7:5a:06:6f:69:07:ed:99:88:29:e0:
                    8b:45:4f:b0:cc:9b:16:2d:68:57:8f:04:89:a9:ae:
                    e4:65:3d:7d:f0:4c:2d:23:ab:88:11:8c:f1:8d:c6:
                    15:fc:d9:f9:a1:56:a1:7a:00:4b:62:8f:f6:97:4b:
                    1e:79:17:9d:6e:23:82:85:25:2e:62:f0:e5:de:d9:
                    f4:7b:ea:2d:6b:8e:f0:d9:73:8b:f0:6f:7e:73:95:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:F8:BA:9A:30:F6:C2:8D:FD:65:55:24:55:D4:20:FC:69:C6:5C
            X509v3 Authority Key Identifier:
                keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3332203d3e20323731303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:be:14:21:3c:44:35:8c:e3:97:eb:01:e2:ff:dc:1d:60:
         86:d2:bd:f4:1c:fa:b5:d4:c2:18:de:b1:a7:4d:00:ff:7d:99:
         15:2d:28:8c:2b:1a:3c:34:c4:4b:ad:a1:77:1d:10:81:f7:e9:
         a9:72:cc:9b:a6:29:dc:99:7e:3a:2b:5a:21:f7:c6:e1:93:af:
         32:14:2f:a7:44:5a:4f:e1:8f:69:25:a6:9d:54:b3:cd:dc:d4:
         8e:98:2c:f1:7b:72:af:88:4e:dd:60:d9:b7:ef:da:66:bd:c7:
         0f:12:5b:e3:21:e2:82:c2:e2:19:b6:27:36:46:82:76:b7:eb:
         51:6c:d3:aa:59:9e:ee:d7:0a:e6:4f:c9:dc:e7:18:92:71:66:
         53:83:62:16:8f:ef:0d:21:a1:15:19:a6:be:ce:dc:9c:9f:02:
         51:ec:37:0c:8f:30:bd:c6:4d:0d:04:5b:29:1c:1e:e4:f2:e4:
         8b:cd:14:bc:84:6a:86:e8:13:35:af:ed:c2:92:92:4c:39:a7:
         ca:6c:73:32:05:06:81:b3:72:62:cc:d7:e6:cd:21:a4:56:15:
         d2:a6:3b:ed:e8:b5:4c:b4:1a:6e:01:6a:6a:f5:b7:67:d6:cd:
         82:b6:75:a9:35:ba:d3:2e:66:9b:90:6c:71:d7:55:a5:7d:97:
         e5:7b:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:31:45 2026 by rpki-client