Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137372e35332e3134342e302f32322d3234203d3e20323632343638.roa
File:                     3137372e35332e3134342e302f32322d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          +M0mcDYKMu70w712iJ+INjySl+X1J03VFAmALfwnbJw=
Subject key identifier:   DD:3B:1F:6D:14:14:F4:8D:08:57:8A:94:75:37:C5:4F:D7:93:00:FD
Certificate issuer:       /CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
Certificate serial:       2D6D6710FF399C51A6412958DE3DF8EA768D41FE
Authority key identifier: 40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137372e35332e3134342e302f32322d3234203d3e20323632343638.roa
Signing time:             Fri 25 Sep 2026 17:11:55 +0000
ROA not before:           Fri 25 Sep 2026 17:06:55 +0000
ROA not after:            Fri 24 Sep 2027 17:11:55 +0000
asID:                     262468
IP address blocks:        177.53.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl
                          rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 22:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6d:67:10:ff:39:9c:51:a6:41:29:58:de:3d:f8:ea:76:8d:41:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
        Validity
            Not Before: Sep 25 17:06:55 2026 GMT
            Not After : Sep 24 17:11:55 2027 GMT
        Subject: CN=DD3B1F6D1414F48D08578A947537C54FD79300FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:26:69:b0:4c:57:e3:90:a8:e3:4e:0a:ca:
                    92:96:50:58:2e:00:62:44:58:3d:41:5c:b7:d0:74:
                    e8:7f:a8:b9:69:e7:e4:26:8f:46:a5:51:ad:92:a5:
                    24:36:03:a5:3e:18:31:df:ea:5e:f3:6f:61:1b:32:
                    3d:a1:03:57:0c:b3:5c:f3:20:f5:bb:c8:2f:8d:e6:
                    89:3d:6e:fd:26:6a:3f:e7:ff:9f:4c:8b:10:27:ea:
                    1e:6e:f0:36:3f:1a:56:b3:48:9b:ef:bb:cb:67:d5:
                    27:66:00:9f:88:28:f7:a6:1d:f8:a8:b2:7c:15:e6:
                    23:e1:8f:1a:bb:9f:8a:31:40:0f:63:6a:fd:0f:d9:
                    ca:93:fd:7d:ae:24:6f:8c:07:df:5b:08:5c:d4:86:
                    69:b1:25:f3:31:a8:e8:21:0e:6c:99:fe:ec:53:32:
                    18:a2:9b:c3:0f:ae:74:b2:e8:53:5c:e3:16:15:16:
                    e6:fd:10:6c:e7:9e:23:4f:a6:93:ce:aa:db:2a:af:
                    71:aa:ff:1b:c7:c1:16:ed:56:00:55:24:5d:12:a8:
                    2f:d1:c7:2d:0c:77:8e:71:d2:6a:73:f1:cb:a6:3b:
                    42:a4:e1:28:f3:37:7f:c7:b7:f4:8c:00:cf:8d:b5:
                    e0:7b:b0:4c:a1:d2:64:04:7a:a2:33:50:6a:c3:bb:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:1F:6D:14:14:F4:8D:08:57:8A:94:75:37:C5:4F:D7:93:00:FD
            X509v3 Authority Key Identifier:
                keyid:40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137372e35332e3134342e302f32322d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:33:e1:f1:95:1b:00:4f:98:8b:b7:08:84:6b:96:30:77:9e:
         36:ea:3d:9b:22:11:2d:74:9e:76:7a:19:ba:f8:8d:68:84:59:
         10:b7:20:10:e6:52:0e:a4:32:55:30:60:e8:7a:2d:d7:28:a5:
         eb:cc:85:ca:e8:b1:ed:3a:e0:a8:b8:31:58:24:3c:34:cb:67:
         65:82:df:f7:3c:7b:9a:0a:6b:4a:8e:77:4b:07:99:c0:da:5c:
         f1:8b:d6:5d:e9:11:83:ad:51:22:b2:b0:be:ae:ee:07:6d:c6:
         f1:31:60:a0:8c:73:c2:21:b8:dc:01:05:da:0d:b7:22:cf:35:
         20:8d:4c:a2:68:20:30:1a:fe:b1:ac:97:39:f7:00:58:4b:48:
         c9:28:27:9a:17:3a:a9:31:bb:98:de:b6:ef:cc:a8:32:20:ae:
         f5:b5:32:67:46:8f:78:8f:45:2a:68:86:8b:93:67:b8:a8:63:
         23:a9:18:a5:f1:02:5c:6c:06:9b:fd:87:ce:8b:4e:fb:29:11:
         84:c1:9f:8e:e3:95:d2:28:81:58:ee:c1:57:07:5b:0e:5a:bb:
         83:df:9f:7f:4d:90:c0:c6:c4:fb:17:b0:fe:9b:6f:01:d9:fb:
         2a:c8:69:fa:8b:d2:01:93:c1:d3:0c:80:93:da:ba:60:a7:18:
         92:1b:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:33:28 2026 by rpki-client