Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231332e302f32342d3234203d3e20323733343433.roa
File:                     3137372e32312e3231332e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          bn/fx/2KTcAX0qLf3QoWZq9AZJDDNobXfAqc61f82RQ=
Subject key identifier:   B5:6C:37:8D:AC:0C:A7:DB:48:7D:3A:CF:9E:F1:BC:D6:5B:5C:8B:76
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       4FF823FFB44432446910F7CFB64CFEAAC1D6A4D1
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231332e302f32342d3234203d3e20323733343433.roa
Signing time:             Tue 29 Sep 2026 12:12:06 +0000
ROA not before:           Tue 29 Sep 2026 12:07:06 +0000
ROA not after:            Tue 28 Sep 2027 12:12:06 +0000
asID:                     273443
IP address blocks:        177.21.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f8:23:ff:b4:44:32:44:69:10:f7:cf:b6:4c:fe:aa:c1:d6:a4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Sep 29 12:07:06 2026 GMT
            Not After : Sep 28 12:12:06 2027 GMT
        Subject: CN=B56C378DAC0CA7DB487D3ACF9EF1BCD65B5C8B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bb:af:43:ac:ce:95:a7:92:f3:94:90:45:e7:
                    05:f5:3e:10:d2:58:c2:a2:cc:61:66:96:c7:f8:93:
                    3f:10:0a:da:1a:c2:ef:76:c8:f4:c4:46:96:d9:ef:
                    42:36:c2:c8:4d:8b:3c:6f:65:ff:66:39:ae:9b:5a:
                    d0:82:b1:d4:da:3e:f7:16:24:89:26:a0:e6:ae:6b:
                    ad:43:36:dc:5d:34:84:98:17:e8:9f:a0:4c:8d:e2:
                    1e:1f:bb:cd:71:58:e0:4f:0e:f4:cc:04:ba:d3:60:
                    35:e0:09:3e:10:26:5c:4e:64:69:35:31:71:79:fa:
                    12:df:32:60:85:b2:13:d7:5a:de:bf:fe:18:7c:1e:
                    d7:bb:72:bc:cd:df:2d:70:7d:f2:07:b6:98:1a:fe:
                    68:51:d7:52:7b:89:94:9b:8a:49:8c:f6:bc:ad:7f:
                    98:89:fa:8c:40:65:80:80:2d:0a:f6:c8:b3:33:3c:
                    1c:77:f1:7d:6a:e0:d5:1b:49:b2:88:83:b6:f7:72:
                    ba:a1:f0:97:38:66:69:66:44:3e:9b:06:a4:ba:37:
                    73:1e:e3:fb:7e:89:ee:16:40:1f:42:44:70:29:63:
                    46:55:7b:a8:e9:e3:68:cf:d3:97:d5:a9:3a:fd:cc:
                    76:c1:e8:db:aa:c7:a2:f9:66:c0:04:79:38:d7:ee:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6C:37:8D:AC:0C:A7:DB:48:7D:3A:CF:9E:F1:BC:D6:5B:5C:8B:76
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231332e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:6b:e2:af:3f:27:41:ec:0a:9e:9f:d7:0f:1b:05:91:87:
         4d:30:aa:7d:da:a2:23:79:a0:15:04:ea:8e:f2:32:f8:f2:ee:
         0c:f3:82:00:0c:28:47:7e:02:88:e6:67:f7:2a:8e:bf:e1:1a:
         fc:a1:11:2c:21:0e:c9:69:f7:45:69:51:83:4b:1f:f6:f3:ce:
         41:b5:1f:20:8f:4b:80:65:d4:c9:01:f8:8a:f8:47:50:60:ce:
         cd:52:ba:9f:03:f7:bd:61:ea:ad:85:b1:67:62:5a:70:c1:35:
         21:18:9e:09:c0:d6:05:01:ea:8e:4c:74:5b:f7:ec:b2:89:dd:
         7b:ac:08:fb:f9:da:57:03:4c:6a:6a:c5:f6:d2:65:f8:a6:8b:
         6f:17:db:74:f7:22:d2:42:4f:04:76:4b:63:18:64:b0:af:41:
         24:91:cd:06:42:19:f7:69:4d:95:3a:57:15:68:06:60:6a:26:
         95:20:5a:ae:ce:dc:32:f7:65:8d:d7:5a:bf:d9:09:ec:fa:74:
         bb:ab:70:64:4b:6b:87:ea:43:cd:44:a3:61:d4:ff:15:59:6d:
         4b:63:9e:7b:e9:0e:db:29:7d:3a:e5:e6:d1:f3:08:2f:a2:d3:
         20:64:30:9c:d8:41:8c:39:1a:af:1a:3a:be:fe:e3:32:0c:d7:
         4a:a0:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:12:45 2026 by rpki-client