Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3133372e38382e302f32312d3234203d3e20323632373733.roa
File:                     3137372e3133372e38382e302f32312d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          E9ThGOqsqnSh76TaDe1+nw/FmBIVtou96Ct+maOp7NI=
Subject key identifier:   A4:F3:A3:97:89:A4:96:91:8F:ED:EA:C0:24:3F:8F:D5:7A:87:34:D5
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       24513BE6779E638F0920EA58B46DBBFC9A6028BF
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3133372e38382e302f32312d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:54:23 +0000
ROA not before:           Fri 14 Aug 2026 19:49:23 +0000
ROA not after:            Fri 13 Aug 2027 19:54:23 +0000
asID:                     262773
IP address blocks:        177.137.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:51:3b:e6:77:9e:63:8f:09:20:ea:58:b4:6d:bb:fc:9a:60:28:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:49:23 2026 GMT
            Not After : Aug 13 19:54:23 2027 GMT
        Subject: CN=A4F3A39789A496918FEDEAC0243F8FD57A8734D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:47:d0:51:6c:ef:1c:4e:69:a4:3a:67:9e:
                    c4:c5:30:5b:dd:c8:1d:f0:f1:a1:c6:33:9f:ae:fc:
                    9c:5c:4f:46:cc:e3:2b:f1:6e:8b:bc:57:8d:b2:55:
                    aa:ae:4d:50:49:d2:7c:9c:f9:7c:fc:47:f5:50:ab:
                    43:44:a3:f4:88:2e:98:1f:fd:b2:46:bb:44:7d:ff:
                    ae:8f:87:1b:a1:7e:5f:ee:61:89:2c:5f:d1:70:57:
                    39:c1:e0:f8:42:09:60:cd:52:37:8f:30:74:4f:f5:
                    99:cd:e1:a9:d0:54:0c:e0:bd:fd:f5:a0:d5:cd:1a:
                    62:65:2c:56:28:fa:9f:bc:9f:2e:bd:7d:0d:65:14:
                    4a:cb:93:b5:c8:b8:2a:19:59:45:27:9a:3b:d5:79:
                    87:71:92:4b:e9:03:c7:17:0b:8b:d7:8b:97:68:23:
                    bd:20:08:75:aa:e8:6e:89:60:8a:be:66:99:b2:d9:
                    35:70:61:62:00:00:cb:09:53:7f:27:4c:1b:ca:71:
                    3b:d1:a5:64:4b:fd:a9:c4:46:05:81:67:c5:4c:27:
                    5e:49:30:ce:d0:0b:08:6a:45:69:5b:8c:b8:dd:9d:
                    f9:84:41:d0:54:18:d7:ac:df:52:d9:16:8d:a5:c2:
                    d6:cd:9c:0d:d9:82:35:a7:36:e0:c1:eb:5d:69:6c:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:A3:97:89:A4:96:91:8F:ED:EA:C0:24:3F:8F:D5:7A:87:34:D5
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3133372e38382e302f32312d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:f8:89:03:43:ae:64:bb:a7:15:ed:80:d4:b5:56:50:bf:
         e4:15:fb:d8:49:a4:c7:6c:49:a1:d1:bd:56:a3:d9:33:fd:eb:
         47:e7:c6:07:80:e1:77:1e:82:81:50:e3:fe:6a:2b:a2:bb:6f:
         00:58:af:f2:11:2e:c9:4d:e8:ca:cf:6f:b0:dc:fa:b7:6d:c7:
         10:63:d7:e5:7d:05:64:64:2e:70:01:2e:0b:15:95:67:39:98:
         97:70:bd:fd:71:38:3f:57:2e:00:f0:cb:fd:2e:c9:ba:45:f4:
         a4:e7:21:cd:6e:31:ec:46:4d:ae:b5:f8:08:c2:9c:cc:59:af:
         62:7e:23:7f:c4:29:3a:95:bc:ec:8d:74:31:3b:b6:4c:ae:c7:
         e3:a1:88:d9:76:3d:54:d9:a1:24:29:6e:96:b3:b2:45:95:8a:
         90:d0:78:56:78:c9:56:c3:a0:9e:94:5a:32:c7:11:ed:04:57:
         ab:af:b6:53:40:7c:3c:6d:48:60:bd:e6:fa:e2:9b:2a:08:66:
         9a:00:25:84:40:35:28:70:22:4c:ac:da:bb:4d:05:5b:5b:00:
         06:c3:ad:08:33:45:4d:e7:2e:a7:08:6a:54:0c:01:da:85:b6:
         08:7c:08:28:f1:02:1a:fb:67:4d:21:55:2a:71:a6:36:f1:dd:
         bb:3f:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 22:41:29 2026 by rpki-client