Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa
File:                     3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          AxYyh9bO2m+XpstozZ8fVIcKDMvyQQLeliLX4an3kbQ=
Subject key identifier:   0A:13:11:5F:AC:DB:BB:C3:16:F8:3D:59:C3:49:44:86:7D:DD:2D:A7
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       0B5DA7993E3FF216BAF0AE3E6C7CB3D9C315BEE1
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:46:42 +0000
ROA not before:           Fri 14 Aug 2026 19:41:42 +0000
ROA not after:            Fri 13 Aug 2027 19:46:42 +0000
asID:                     262773
IP address blocks:        177.73.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5d:a7:99:3e:3f:f2:16:ba:f0:ae:3e:6c:7c:b3:d9:c3:15:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:41:42 2026 GMT
            Not After : Aug 13 19:46:42 2027 GMT
        Subject: CN=0A13115FACDBBBC316F83D59C34944867DDD2DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:ed:15:f2:15:4f:f3:22:38:10:aa:9f:21:
                    43:f1:4e:66:bb:e5:d6:4d:43:77:db:4e:59:47:f7:
                    24:0b:66:6a:97:f5:6e:e2:63:32:44:8e:0b:7d:a4:
                    79:11:58:cd:7a:ca:a8:92:76:95:e5:fc:86:38:b3:
                    ea:be:68:1e:a0:22:d2:41:87:36:5e:80:22:e8:21:
                    28:eb:51:25:57:fe:26:55:32:d1:5e:d5:8f:74:56:
                    99:b1:17:9a:32:50:0a:99:98:3f:8a:47:8c:74:9c:
                    1a:f6:0b:c1:de:16:3d:40:0a:41:d3:21:9c:29:e3:
                    29:b4:cc:f2:26:9f:e1:4d:5a:ff:e5:10:64:f6:92:
                    f6:0d:31:5a:6f:6f:f2:c8:33:93:9f:6a:fd:85:2d:
                    6e:31:cb:6d:5b:d3:6c:ae:b0:56:b2:eb:24:14:9b:
                    b9:7e:b4:59:c9:df:9d:4b:fb:6a:8d:8e:0d:b2:fc:
                    9f:1d:cd:77:98:51:2b:97:c5:6e:52:1b:4a:7d:2d:
                    c6:c0:d3:4e:fc:ca:4b:3f:3b:f0:06:d8:33:88:c4:
                    de:06:79:35:d9:d3:8b:06:d9:20:6d:f3:69:f9:f3:
                    ee:08:2a:5b:05:7f:d1:4a:37:97:5b:61:4a:4c:25:
                    6c:d4:73:ae:e4:fb:8f:5a:7c:2e:60:ab:be:05:b5:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:11:5F:AC:DB:BB:C3:16:F8:3D:59:C3:49:44:86:7D:DD:2D:A7
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:8c:86:54:1f:4b:07:55:91:1d:16:03:e8:5d:3b:93:7a:a5:
         48:44:1f:12:1d:2f:95:5b:1d:5e:55:de:a3:4c:34:c5:96:d0:
         bc:ec:4b:06:b4:9c:66:90:3b:60:10:26:fa:f1:20:f5:0a:33:
         97:8e:fe:d4:3b:dc:56:85:ea:62:fb:6a:2a:3e:63:eb:9a:23:
         d4:8d:bd:29:78:99:ba:e8:e8:10:31:6e:dc:83:28:f8:59:16:
         29:18:34:2a:c9:82:cb:4d:7f:fc:f3:56:8e:87:7e:3c:0f:6d:
         d9:91:4a:0f:e3:7a:85:88:3f:07:e0:1c:4b:75:63:4e:e5:2e:
         7a:3a:00:a4:47:41:70:db:41:d5:91:ed:ec:18:42:26:5f:90:
         7b:20:c0:2c:75:d6:34:71:b6:08:ec:57:ac:ba:01:16:a4:bc:
         a9:47:f8:69:36:96:37:6e:a1:46:6f:e0:26:dc:fe:a2:9a:3c:
         40:6a:38:19:42:b0:4f:0f:ba:a8:c3:d4:e2:1c:d8:52:f2:99:
         28:93:b5:e1:36:c8:45:4d:10:8e:0e:31:aa:72:56:01:b5:53:
         49:d7:e0:54:88:79:0d:00:2d:dc:e5:20:87:a3:8d:17:48:e9:
         7a:ac:9d:78:e1:ac:4c:90:2d:7e:b5:7e:84:f8:9f:3b:64:45:
         0c:d2:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:28:54 2026 by rpki-client