Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3137372e37332e34312e302f32342d3234203d3e20323635343735.roa
File:                     3137372e37332e34312e302f32342d3234203d3e20323635343735.roa (raw, json)
Hash identifier:          1loJ8ZT2Qw3KKMwKnYa0KCahTeF35Nb+v4ETz/g6T1k=
Subject key identifier:   E2:7C:20:71:31:92:38:92:80:C7:04:7C:C3:D8:6E:44:F3:8F:23:49
Certificate issuer:       /CN=9530E233B090678F81B102C214A4D3DEE9EDC31F
Certificate serial:       3CFFF6994C405378E1A149243002AE0C5284D4A4
Authority key identifier: 95:30:E2:33:B0:90:67:8F:81:B1:02:C2:14:A4:D3:DE:E9:ED:C3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9530E233B090678F81B102C214A4D3DEE9EDC31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3137372e37332e34312e302f32342d3234203d3e20323635343735.roa
Signing time:             Wed 19 Aug 2026 12:52:26 +0000
ROA not before:           Wed 19 Aug 2026 12:47:26 +0000
ROA not after:            Wed 18 Aug 2027 12:52:26 +0000
asID:                     265475
IP address blocks:        177.73.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/9530E233B090678F81B102C214A4D3DEE9EDC31F.crl
                          rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/9530E233B090678F81B102C214A4D3DEE9EDC31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9530E233B090678F81B102C214A4D3DEE9EDC31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ff:f6:99:4c:40:53:78:e1:a1:49:24:30:02:ae:0c:52:84:d4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9530E233B090678F81B102C214A4D3DEE9EDC31F
        Validity
            Not Before: Aug 19 12:47:26 2026 GMT
            Not After : Aug 18 12:52:26 2027 GMT
        Subject: CN=E27C20713192389280C7047CC3D86E44F38F2349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:e0:dc:ef:67:5e:3e:04:3f:e9:65:8e:b0:
                    f9:92:e1:37:04:9d:15:ca:6e:6c:c3:46:9c:96:25:
                    36:49:b9:51:79:44:72:24:53:90:85:f1:fe:da:f1:
                    f7:13:ad:f5:4d:ed:e4:91:15:c4:73:f4:90:71:6b:
                    66:29:59:0f:69:dd:bf:3f:e1:4b:63:13:36:6f:de:
                    cb:0c:16:6f:46:f3:27:91:5e:64:45:15:7a:79:11:
                    bd:d9:b5:52:50:29:0d:b2:31:d5:fb:db:20:db:6d:
                    2d:ed:61:6a:72:27:ce:1e:87:a4:44:74:c7:13:05:
                    f3:3e:54:4b:62:8c:20:45:bc:a5:ce:13:4f:ed:4e:
                    3f:7d:6a:b5:be:49:92:09:e6:9a:e6:7a:00:9d:0f:
                    05:74:79:2d:3a:28:e4:92:05:d6:f5:97:ab:9d:25:
                    74:9a:d3:c6:a1:e8:e1:b6:60:9e:17:42:20:24:ee:
                    12:52:6e:1f:02:78:01:0b:ba:6a:ed:16:f8:a4:32:
                    96:0b:3b:42:a8:09:dd:e4:8e:76:c3:a6:1f:b0:78:
                    46:8a:0c:7e:82:27:9b:0a:27:be:2d:32:c7:bc:4a:
                    10:7b:22:67:5e:2d:99:31:cc:e4:7e:86:89:cd:fa:
                    bc:73:9e:a1:f2:a7:94:28:ca:f0:0d:cb:22:3f:fd:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:20:71:31:92:38:92:80:C7:04:7C:C3:D8:6E:44:F3:8F:23:49
            X509v3 Authority Key Identifier:
                keyid:95:30:E2:33:B0:90:67:8F:81:B1:02:C2:14:A4:D3:DE:E9:ED:C3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/9530E233B090678F81B102C214A4D3DEE9EDC31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9530E233B090678F81B102C214A4D3DEE9EDC31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3137372e37332e34312e302f32342d3234203d3e20323635343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:c5:7c:f3:4a:b2:7e:7d:7e:4d:a8:84:00:63:ba:3a:7e:
         bf:32:10:fc:09:6e:21:d6:f1:c2:21:69:1b:45:10:f4:4f:29:
         7a:27:78:df:10:a2:bb:9e:bb:1a:39:19:84:3d:ec:9a:ba:58:
         1c:da:91:ec:f1:8b:d0:0c:a7:ff:8b:e4:c2:d6:ed:2c:ca:0c:
         12:3c:4e:cc:5f:52:05:fe:71:6b:86:ee:50:31:1d:64:04:ea:
         d2:68:b0:e2:53:71:3d:75:53:b5:27:bc:2a:8e:7a:e2:e9:e1:
         1d:06:a9:ae:ae:32:8b:3f:ab:73:3b:b0:9d:54:6d:b1:05:c9:
         ab:db:3e:15:5c:4b:64:61:80:56:3a:4b:10:02:11:57:80:20:
         82:d2:7e:bd:91:bd:aa:e2:51:ee:61:18:55:35:e8:87:e4:f7:
         b9:cf:6c:6f:b7:42:d0:f0:6d:46:54:10:ab:da:82:e2:3a:cc:
         53:7a:27:fc:8d:a3:8b:60:73:c4:1f:0d:ff:bb:db:2b:70:f0:
         76:6f:eb:76:ad:54:56:5a:10:ee:4d:ad:13:bf:1f:b9:42:6e:
         5a:56:dd:b4:73:a8:fc:5f:62:b6:b4:7c:55:b4:c1:6b:f7:b8:
         f4:29:cc:04:fe:0e:68:f2:5c:eb:29:0f:87:a8:c7:ef:4e:a9:
         00:a5:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:33 2026 by rpki-client