Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa
File:                     3137372e33382e36342e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          gXMyO7uNS5PfGJ6AxKiiHIJTg6L57u6R3yQ+h/cSc9c=
Subject key identifier:   4A:A8:CF:BA:D0:ED:01:05:8B:A2:03:63:AA:87:89:EA:3D:92:9E:F5
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       54785CE0B1BF8D299D7717FA330834D295466832
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:45:39 +0000
ROA not before:           Fri 14 Aug 2026 19:40:39 +0000
ROA not after:            Fri 13 Aug 2027 19:45:39 +0000
asID:                     262773
IP address blocks:        177.38.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:78:5c:e0:b1:bf:8d:29:9d:77:17:fa:33:08:34:d2:95:46:68:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:40:39 2026 GMT
            Not After : Aug 13 19:45:39 2027 GMT
        Subject: CN=4AA8CFBAD0ED01058BA20363AA8789EA3D929EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:ba:b9:20:fb:0e:4f:fe:61:6d:50:52:49:
                    61:d0:8d:f6:60:92:55:1d:7a:7b:88:09:41:30:53:
                    02:47:8d:10:96:58:18:30:36:15:5d:e0:6c:c2:01:
                    d1:8b:1f:ef:ae:9e:12:b3:65:30:67:31:f4:c4:58:
                    96:78:48:6e:d8:8b:ac:03:92:7a:35:54:73:a4:d8:
                    4f:03:ea:df:a1:34:66:47:d0:7c:5e:a0:0f:e0:5c:
                    aa:25:52:25:9c:e4:b2:63:9f:10:58:08:37:8d:8d:
                    dc:cb:b2:c1:d2:8b:57:c1:1c:d3:e8:aa:48:f3:96:
                    04:be:7b:6a:8b:ea:c0:3c:a3:04:9f:85:a4:69:e3:
                    54:af:ee:e4:5e:5d:b1:d8:8e:5b:d6:b2:05:cb:e1:
                    ff:a0:4a:b9:cb:9c:f7:22:04:8b:88:eb:66:8f:ae:
                    e7:3a:65:13:6c:86:61:a3:56:c2:21:2e:5c:7b:c6:
                    05:bf:7e:70:84:3a:b3:22:0d:e0:64:2e:63:b7:a1:
                    67:56:63:89:cb:95:d7:b0:5b:8a:16:d5:d7:8c:76:
                    92:fd:58:d0:38:77:80:de:8e:17:4e:49:6f:fb:7f:
                    e8:fc:e0:67:b9:52:72:56:ae:71:df:09:bd:63:22:
                    9d:b6:ca:dd:04:ea:b4:1b:94:ec:e1:8f:3c:67:2e:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:CF:BA:D0:ED:01:05:8B:A2:03:63:AA:87:89:EA:3D:92:9E:F5
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:52:d3:be:b8:e2:f8:91:de:27:56:94:71:1a:cd:54:a3:
         cd:fb:e7:6f:4c:9d:51:6c:46:58:8c:4c:c4:7f:f3:94:41:ea:
         39:b5:22:39:90:bf:f0:ed:16:31:44:13:59:f9:45:fb:09:e6:
         dc:38:4b:0e:d1:08:23:a0:b8:98:e8:89:ce:0a:c5:3a:9d:5d:
         de:62:e0:c7:9b:f4:26:6c:3a:b0:d9:82:20:70:9b:5f:fd:6c:
         a6:e6:82:b1:d8:94:6e:53:1b:57:18:e1:dd:6c:df:68:a3:43:
         cb:92:f8:1e:d8:4b:e8:8e:e8:4a:97:99:ab:8f:cd:e0:15:be:
         1e:6c:1a:4b:78:47:f1:56:0e:bd:41:7f:8e:e7:fb:19:38:2e:
         fe:77:ca:f7:41:5c:1a:8f:26:97:c9:04:23:f3:eb:ba:f6:fa:
         e4:59:58:5b:bf:29:f0:2d:67:72:86:09:76:3b:ed:f3:d4:7e:
         b6:32:e0:7c:95:7c:83:34:e3:09:4b:6b:94:7f:19:1c:16:62:
         5c:46:94:b0:6d:1c:a2:5a:d0:2a:cf:88:77:8c:b4:ca:81:ff:
         f3:23:cf:40:39:26:3f:62:34:d2:04:50:d4:ae:15:42:5c:8b:
         af:b2:31:0a:4d:6b:be:2d:8e:9f:89:96:95:cb:40:93:ab:76:
         2b:17:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:52:47 2026 by rpki-client