Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133322e302f32342d3234203d3e203133333335.roa
File:                     3137372e3130342e3133322e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          vMKICYcGMN17TWdldGunlLFgXwH0hSgREcAZcAyBcq0=
Subject key identifier:   F1:6C:BA:36:EB:04:D3:28:4D:24:B9:CC:22:DB:2C:C9:6C:CD:F1:A7
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       03F4C8876553A1CE042C17FA64CB0EC67E3BB81A
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133322e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 01 Jun 2026 21:04:49 +0000
ROA not before:           Mon 01 Jun 2026 20:59:49 +0000
ROA not after:            Mon 31 May 2027 21:04:49 +0000
asID:                     13335
IP address blocks:        177.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jun 2026 19:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:c8:87:65:53:a1:ce:04:2c:17:fa:64:cb:0e:c6:7e:3b:b8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  1 20:59:49 2026 GMT
            Not After : May 31 21:04:49 2027 GMT
        Subject: CN=F16CBA36EB04D3284D24B9CC22DB2CC96CCDF1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:f4:f1:5e:98:bf:2a:3b:09:1f:0a:44:52:
                    53:37:6d:7c:fa:4a:fb:5a:f4:02:80:08:84:c4:33:
                    25:88:b8:6a:dc:20:4b:13:c4:9f:c5:e0:29:af:06:
                    85:08:f0:6a:73:ed:b3:92:45:a8:61:4b:3b:75:df:
                    16:59:4d:a0:91:fb:eb:12:e6:9a:de:0c:1f:dd:95:
                    fd:65:38:a8:10:12:0c:a1:8d:74:d7:46:96:e9:fc:
                    d9:26:b6:6f:3a:e6:77:67:97:a2:02:84:88:a4:0c:
                    9e:cc:58:b4:7d:a9:1b:11:12:02:f0:6e:5d:d6:52:
                    d3:89:72:b7:c7:7a:7e:cc:60:1b:c3:2b:1c:b1:cc:
                    27:ce:22:7f:c8:59:16:76:3f:e9:90:7c:65:5a:ad:
                    16:02:88:13:f7:2a:6f:29:3d:0b:48:2f:8f:29:10:
                    35:f3:a1:30:04:15:9a:ae:29:6a:5a:37:c3:e4:52:
                    c1:0f:f6:32:0f:72:65:e7:ac:cf:8c:54:9b:eb:e2:
                    bb:d2:b1:95:0c:17:d8:36:d0:3f:b6:d3:9f:a6:e8:
                    a8:6e:bb:c9:a5:73:d2:e1:71:12:de:19:ba:34:e2:
                    1a:81:c4:f4:89:db:b8:c4:ab:56:39:25:13:91:80:
                    22:fd:8a:36:52:5d:9b:17:d4:5e:b1:31:ab:a3:ef:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6C:BA:36:EB:04:D3:28:4D:24:B9:CC:22:DB:2C:C9:6C:CD:F1:A7
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133322e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:49:8f:71:a7:90:71:4c:7d:b8:da:78:f5:75:85:26:fb:
         fb:83:71:e6:d9:84:b4:68:1a:1d:39:bc:66:db:e8:cf:3d:15:
         49:74:43:e3:d8:89:44:e3:40:46:d9:7e:06:ac:46:6b:d6:65:
         8a:76:98:f7:c5:d1:68:01:bf:67:fc:d3:f5:6f:c6:5c:dd:59:
         01:91:9f:0b:ca:d1:f9:19:89:ed:6a:c5:8b:7b:75:3d:d5:87:
         ce:5a:85:23:da:0d:c4:ff:6f:64:1c:1d:6c:32:27:73:46:14:
         2f:69:5c:99:81:cd:b8:57:db:7d:35:d0:00:bf:2d:d3:f2:ae:
         0f:e7:10:e5:e2:33:c9:ee:23:38:84:c4:8e:06:a6:1a:aa:85:
         d4:cf:a7:b7:c2:b2:b7:82:74:ac:29:c8:cf:4c:a3:2c:38:f5:
         92:1a:10:e8:c6:76:50:11:cd:ee:ce:13:e9:90:ce:45:d7:1b:
         53:60:35:4b:7e:bb:c0:5b:8a:b2:b2:92:02:41:f5:8f:21:5c:
         c7:9a:4f:4d:83:26:ba:f8:fb:45:6c:ae:1e:2e:c1:f8:0b:4e:
         11:60:bb:e2:0c:2d:3d:4b:bf:f5:46:b0:b0:c7:2e:de:b7:0b:
         de:3f:67:df:b8:25:73:0b:bf:0c:bb:cc:de:ae:2c:ab:67:b2:
         ab:24:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:19 2026 by rpki-client