Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          IB/QP/gTLQX9fog7cu48jC1+5pN+u/scgNY9UcMgapQ=
Subject key identifier:   5F:4C:26:F1:4D:39:9A:88:D5:43:14:4F:02:A3:42:99:D4:54:92:06
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       2A68CCACDA52A50164611D9B3DB229CBC2A3D3A2
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 04 Apr 2026 17:01:23 +0000
ROA not before:           Sat 04 Apr 2026 16:56:23 +0000
ROA not after:            Sat 03 Apr 2027 17:01:23 +0000
asID:                     52631
IP address blocks:        177.128.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:68:cc:ac:da:52:a5:01:64:61:1d:9b:3d:b2:29:cb:c2:a3:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:23 2026 GMT
            Not After : Apr  3 17:01:23 2027 GMT
        Subject: CN=5F4C26F14D399A88D543144F02A34299D4549206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:bb:bc:de:df:c9:3a:8e:43:5a:d7:37:05:
                    53:8e:8a:e9:b7:19:11:b3:04:29:43:00:4a:f4:bd:
                    64:c3:d4:57:b2:82:43:34:c1:00:2c:1b:d9:85:ff:
                    22:de:5b:3b:98:00:e6:00:5d:92:c3:8d:26:5e:64:
                    15:29:6b:be:27:0f:d6:24:3d:6e:8d:7e:01:fd:91:
                    46:4e:8c:dd:38:e7:4f:32:14:b5:94:29:cc:38:c2:
                    89:7c:04:7f:8f:ca:80:9d:fe:2f:df:a2:0c:dc:b4:
                    33:3f:4b:a0:02:a3:70:99:19:d0:26:32:44:4a:57:
                    22:0d:c8:55:92:62:39:37:39:c1:d4:f9:e0:cb:f9:
                    e5:25:fe:f2:3f:fe:90:95:31:66:96:00:18:39:a7:
                    41:16:a9:5a:ce:e0:4f:8b:f2:24:97:8e:7c:62:11:
                    9a:38:a2:12:f9:6b:26:42:63:8a:dd:d8:14:d0:4a:
                    68:d6:40:bc:1a:7a:36:fc:ba:fd:43:99:37:7e:1a:
                    67:2b:ba:7d:bc:c8:66:bc:49:7c:c2:c7:6d:2b:d9:
                    36:8e:23:d3:c6:d0:32:d6:3e:94:a5:d1:a8:c0:57:
                    7d:44:02:2b:3e:c2:69:ec:12:ce:14:47:46:39:03:
                    17:d3:49:a1:88:fc:82:a5:ba:75:d0:2c:2b:eb:d5:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:26:F1:4D:39:9A:88:D5:43:14:4F:02:A3:42:99:D4:54:92:06
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e3:a5:89:97:c8:a8:9f:0d:c4:71:6a:f5:7b:59:6a:e9:28:
         0e:d7:e4:fd:d3:e4:76:77:c1:ec:4d:2f:65:93:c0:0b:4f:b1:
         2b:61:9d:53:5c:f6:13:05:85:50:72:94:f5:7a:9f:c2:e1:4c:
         ad:7a:13:b0:b0:95:3c:93:d0:c8:90:1d:ce:9e:bb:cf:5b:29:
         37:b4:cc:4c:81:36:35:8d:0f:bf:2d:2e:4c:4c:f1:55:4d:f8:
         7a:83:f9:ff:ce:0d:ed:b3:85:7d:b2:5e:fe:ec:cd:f3:73:13:
         ec:0a:60:7a:5d:b9:47:fe:3e:d1:50:8b:8c:62:64:ff:07:1e:
         8f:29:38:d7:75:b0:13:b7:01:56:1d:7c:84:26:58:39:3a:67:
         49:23:1e:d7:1b:65:80:1a:61:92:a9:96:5b:de:78:f6:35:64:
         40:6c:3a:40:12:14:fd:7e:1d:48:0f:77:c6:03:4a:8f:01:af:
         5b:57:10:f3:b8:e8:1d:f0:aa:69:d7:3c:31:6e:35:e4:42:44:
         ac:5a:54:86:94:d0:a3:5b:d3:e5:ee:96:ee:1d:98:2c:8d:ea:
         a9:c9:e8:36:c4:9b:b8:d8:92:dc:c4:94:18:c3:37:ec:ea:63:
         61:6e:a8:12:24:bb:fa:c5:c3:23:17:c0:d7:d7:5d:6a:2e:ac:
         e1:11:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:34:28 2026 by rpki-client