Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          go325/gKmB6QKbysvg7m1aI6T6A8jB4NJwxykLhxUjI=
Subject key identifier:   05:0A:F6:3D:5D:6A:72:43:55:84:CE:CA:16:80:FA:05:C8:A7:C4:24
Certificate issuer:       /CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
Certificate serial:       57D7353CA3B9638505DB67E2BF18B72DC7C3E97A
Authority key identifier: 08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 21 May 2026 15:04:17 +0000
ROA not before:           Thu 21 May 2026 14:59:17 +0000
ROA not after:            Thu 20 May 2027 15:04:17 +0000
asID:                     262653
IP address blocks:        177.105.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d7:35:3c:a3:b9:63:85:05:db:67:e2:bf:18:b7:2d:c7:c3:e9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
        Validity
            Not Before: May 21 14:59:17 2026 GMT
            Not After : May 20 15:04:17 2027 GMT
        Subject: CN=050AF63D5D6A72435584CECA1680FA05C8A7C424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:5f:d7:03:0e:33:b2:2c:fe:98:41:f6:98:
                    38:ef:cf:79:49:84:4f:58:4e:2c:a5:dc:87:2a:de:
                    56:8e:01:ab:b4:44:3d:6a:1b:a4:ac:80:48:96:56:
                    f5:2c:30:58:20:bd:50:80:49:c1:ac:23:85:76:2b:
                    c5:71:0d:b0:06:6b:3b:56:b6:c6:c4:a4:c2:08:3c:
                    40:e9:5f:cc:ba:d5:f6:d5:04:58:57:37:ab:e3:41:
                    75:76:e8:05:5c:35:59:f5:c5:33:a2:1f:dd:0f:f8:
                    92:d8:5e:a4:ed:2b:e3:e8:d0:80:2d:6d:47:a2:72:
                    70:9d:67:bf:ed:7e:a2:d1:d2:0c:a8:ed:2a:6d:da:
                    2b:9b:3f:e2:33:29:16:75:e8:0b:57:ce:2c:e8:a0:
                    5d:43:82:3a:13:cd:a2:86:e3:22:95:b5:ba:4a:92:
                    be:05:84:5d:e4:69:26:f9:6a:df:f2:e1:50:92:75:
                    00:dd:b0:c9:6b:57:c0:57:a4:5f:57:d6:13:33:9f:
                    8e:59:5c:25:ee:08:1a:97:ac:df:ac:6b:c9:4f:82:
                    1a:7e:45:0f:4c:23:ac:16:58:a6:f5:9f:0f:fd:a9:
                    39:55:5a:e6:b0:91:2f:1a:65:53:a7:a9:45:fd:91:
                    fa:36:6c:d9:9a:4b:c3:16:82:68:24:f2:a4:ae:6c:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:F6:3D:5D:6A:72:43:55:84:CE:CA:16:80:FA:05:C8:A7:C4:24
            X509v3 Authority Key Identifier:
                keyid:08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:38:9c:f0:18:72:a9:57:33:5c:fc:22:4b:50:77:98:2e:55:
         4e:6a:0d:e5:13:e7:a9:ff:67:a0:24:69:3f:25:c4:0c:89:7a:
         2f:1e:72:6a:9d:09:43:d4:54:07:51:ee:ab:67:4a:01:74:b1:
         e0:58:87:91:85:a1:fd:62:e9:80:e1:3e:3f:15:2b:70:a4:ae:
         a0:4f:db:3b:a3:0a:65:02:c8:fa:e2:45:8f:4f:2a:96:f8:8f:
         47:36:11:9e:9e:44:27:f9:5c:7e:f3:39:6f:03:7d:67:e7:17:
         29:d4:13:e6:af:c3:e7:88:8c:07:b4:e0:2c:c8:8f:7f:3a:46:
         0a:cb:64:21:bf:3b:4d:ef:dc:1d:f9:b4:0f:7a:78:20:95:ef:
         96:13:57:a9:77:f6:9e:cc:7d:ff:e2:66:0a:02:4e:b3:9d:f1:
         a7:55:a3:00:c3:64:93:43:4e:90:b8:2c:97:3d:1f:e6:5c:1b:
         16:49:42:a0:05:51:ef:08:f8:f8:b8:34:11:49:52:bb:6a:92:
         48:11:17:8c:7f:b6:44:8d:6f:75:f7:ce:69:a0:49:b3:f7:9a:
         f1:62:c5:42:9f:22:66:1d:4d:9d:07:87:05:37:20:9a:0a:58:
         36:7d:70:9b:83:da:42:61:25:6b:2a:95:56:bd:b2:18:6c:ec:
         bd:65:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:15:32 2026 by rpki-client