Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32332d3233203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32332d3233203d3e20323731303432.roa (raw, json)
Hash identifier:          FsdqwX7eCtCR1GRIBXL80NvpTEaXj0fcasnlMVx5opw=
Subject key identifier:   6C:FF:43:57:28:05:D0:FB:CF:01:47:50:CC:EF:37:2C:FC:D9:C6:3D
Certificate issuer:       /CN=31879B6517B714682709D1F80AD95E060C94084B
Certificate serial:       092DC0ED77B24A8561EC1C25DAAEB3D131AB9F39
Authority key identifier: 31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32332d3233203d3e20323731303432.roa
Signing time:             Thu 15 Oct 2026 15:46:24 +0000
ROA not before:           Thu 15 Oct 2026 15:41:24 +0000
ROA not after:            Thu 14 Oct 2027 15:46:24 +0000
asID:                     271042
IP address blocks:        177.36.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 10:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2d:c0:ed:77:b2:4a:85:61:ec:1c:25:da:ae:b3:d1:31:ab:9f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31879B6517B714682709D1F80AD95E060C94084B
        Validity
            Not Before: Oct 15 15:41:24 2026 GMT
            Not After : Oct 14 15:46:24 2027 GMT
        Subject: CN=6CFF43572805D0FBCF014750CCEF372CFCD9C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:46:6a:26:5f:0c:e9:dc:ad:55:98:52:8c:
                    d0:3c:46:1b:52:5c:3b:10:ac:b0:c8:a9:f0:fa:76:
                    94:34:56:3b:5c:71:4e:2f:ea:89:ad:b9:79:9a:2d:
                    fc:45:0e:3e:a0:0b:a6:2f:1a:ec:38:bd:84:fc:75:
                    3a:d6:1d:9c:43:af:75:cb:9b:d6:12:35:7d:3e:36:
                    a7:8f:0a:b0:50:ec:30:00:ab:b6:bb:2c:3c:f1:b8:
                    a5:cd:27:4d:6e:e2:9d:54:7e:ab:10:f2:2b:74:4b:
                    4d:a9:7c:64:7a:d5:3c:a9:ce:6d:e1:6a:09:59:e6:
                    cb:21:26:71:d7:dc:20:7b:36:69:74:0a:28:91:e3:
                    16:92:6d:cc:e3:e0:04:2c:c2:5d:45:8a:20:43:fe:
                    6e:3d:37:4b:97:d8:39:1d:3e:c3:d5:b7:5f:6f:1a:
                    3a:21:06:d9:e4:c6:67:bd:9b:56:16:bd:79:21:47:
                    73:db:a0:4e:2f:83:c6:c1:c9:ed:50:ef:ff:2d:86:
                    3d:99:89:d0:75:18:ad:c9:b8:a1:f7:b9:2f:9f:ac:
                    1f:68:4b:f2:2c:f1:1b:58:76:52:d0:5a:eb:09:96:
                    ce:37:ab:68:4e:44:16:42:15:e4:eb:7b:73:84:5a:
                    4b:e4:44:c2:19:87:5d:9a:f0:f4:81:7b:09:03:b6:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FF:43:57:28:05:D0:FB:CF:01:47:50:CC:EF:37:2C:FC:D9:C6:3D
            X509v3 Authority Key Identifier:
                keyid:31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32332d3233203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:d0:e2:8d:bf:f0:94:40:6d:fe:92:d9:5c:e8:0a:48:ed:
         2a:02:c9:b8:b3:0d:2c:36:a7:15:2b:de:37:64:2b:62:6e:04:
         3a:4b:83:1e:52:e7:53:47:f8:81:18:7a:6f:23:92:f7:89:95:
         31:fb:26:ed:72:71:0e:17:08:5d:1b:f5:ca:ca:fa:88:ed:d3:
         94:4a:3f:cf:69:03:54:a2:00:39:bd:21:91:5e:ec:67:56:38:
         38:18:1a:c4:1f:6c:2f:7a:97:9b:9c:7b:70:5a:58:d2:83:b1:
         b3:52:d7:0f:09:22:93:ed:73:f9:56:0b:2c:fc:39:b4:6e:98:
         4f:1b:ab:2c:44:4d:e2:7a:a6:5c:93:5a:e2:46:9b:86:0a:d7:
         69:ac:ab:f2:6e:44:b0:07:f9:a0:2f:09:0e:ba:5e:9c:eb:97:
         23:3e:1e:ef:d8:a0:b9:a3:62:d4:50:0f:23:6e:49:53:88:e8:
         2c:3f:04:36:bf:e9:d8:9c:27:5f:c2:1c:fb:9c:1d:76:9b:ce:
         1d:6f:b4:f7:58:ad:ca:32:e9:a7:0c:6e:ec:b4:9b:e6:da:f5:
         96:d1:6b:40:5e:2c:43:50:a1:75:e4:c7:e7:42:5b:24:d3:b4:
         b8:cd:0b:f9:1f:e3:76:ac:8c:99:a3:36:1d:9d:7e:52:87:84:
         d5:80:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:19:09 2026 by rpki-client