Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231352e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231352e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          /56nuiLh9n3tXXd6UOA884kgs/Uj+8eAUdVB/gdXgtE=
Subject key identifier:   B5:7C:0C:32:A2:0F:6F:C9:9D:5C:E5:56:DF:39:0C:6B:4A:B5:BC:D5
Certificate issuer:       /CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
Certificate serial:       37EFD2A89543C8D5BEB9E7681ED5D8ED7EF43E0B
Authority key identifier: 08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231352e302f32342d3234203d3e20323632363533.roa
Signing time:             Thu 21 May 2026 15:04:22 +0000
ROA not before:           Thu 21 May 2026 14:59:22 +0000
ROA not after:            Thu 20 May 2027 15:04:22 +0000
asID:                     262653
IP address blocks:        177.105.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:d2:a8:95:43:c8:d5:be:b9:e7:68:1e:d5:d8:ed:7e:f4:3e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
        Validity
            Not Before: May 21 14:59:22 2026 GMT
            Not After : May 20 15:04:22 2027 GMT
        Subject: CN=B57C0C32A20F6FC99D5CE556DF390C6B4AB5BCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:dd:7d:86:cf:78:1a:fc:36:57:6c:af:cd:
                    dc:d2:12:d4:51:ff:19:ce:70:f1:d4:d5:4c:46:34:
                    bd:9d:b0:de:ed:76:1b:0a:db:b3:f0:4b:06:fc:99:
                    b3:9a:37:c3:8d:10:a2:7a:a7:56:0d:83:a7:54:2b:
                    0f:8b:5b:4f:e3:b3:06:6a:db:70:b3:0f:ad:c5:3f:
                    56:6d:a5:57:a4:b4:6a:4f:db:fe:96:3a:74:4a:06:
                    12:bb:e5:4c:27:09:40:f9:3c:9e:70:1d:dd:50:36:
                    27:b4:8d:02:a1:69:ca:f7:21:80:fe:e9:07:44:0d:
                    e2:c6:df:82:05:06:91:47:f5:46:c3:e3:a2:5b:ff:
                    28:72:02:43:c6:75:c3:e8:0a:3a:b2:80:b7:52:35:
                    fb:d4:56:d3:21:e9:38:73:41:53:da:4a:97:37:79:
                    72:0b:0a:3a:f1:fa:dd:6c:a2:cc:43:a3:82:63:ee:
                    0a:60:ac:4c:2d:b7:23:55:fc:8f:79:c8:04:b8:14:
                    70:f7:29:27:1a:2b:04:b3:34:2d:13:8f:74:97:91:
                    35:00:48:1e:c1:56:49:4a:d5:a6:c5:42:ef:c0:3c:
                    3c:fe:43:f7:33:1c:d4:dc:66:97:35:3d:a6:b4:ce:
                    2c:8f:1d:6e:bc:7f:08:21:e7:d3:29:5d:0e:0b:4f:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:0C:32:A2:0F:6F:C9:9D:5C:E5:56:DF:39:0C:6B:4A:B5:BC:D5
            X509v3 Authority Key Identifier:
                keyid:08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231352e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:41:bf:ef:d1:92:37:8c:fc:a5:82:14:25:98:89:a1:c6:
         c7:dc:74:44:1d:7b:7e:9e:ee:9a:fa:b1:21:fa:9d:2a:c3:e9:
         61:ab:bb:2f:61:a5:d8:37:11:6f:d9:4d:f3:fe:74:34:f7:99:
         38:b9:ba:04:72:ca:38:d6:bf:17:e8:a7:47:04:e2:24:41:1b:
         aa:07:fc:cc:a9:c8:7e:66:41:cb:c3:77:78:50:e9:81:5d:43:
         d1:0d:a0:b7:40:a8:a2:0b:96:11:06:92:a7:33:71:93:cb:6c:
         65:fa:c7:5f:5f:d4:75:07:4f:7c:b8:2d:ab:36:9a:27:79:78:
         14:71:56:d1:e8:31:2f:62:b0:c2:64:eb:85:7b:b3:b3:dc:65:
         17:78:7b:a1:8c:22:8f:80:62:45:ec:40:14:b0:02:84:fb:43:
         ff:e0:ad:fe:c4:fc:57:98:c5:c9:e9:83:2b:e6:70:58:ba:14:
         df:90:08:44:7f:d1:6b:9f:ef:24:74:24:a0:5e:82:81:18:7c:
         ce:62:57:d4:8b:f9:ac:a8:6f:4f:36:71:b7:9a:41:d5:32:76:
         ee:fe:6f:50:39:55:69:00:95:2f:2e:fc:c9:af:6f:a3:83:09:
         ae:65:a7:f5:13:0b:72:0b:48:33:3b:a0:c1:d1:41:68:26:95:
         c7:05:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:15:31 2026 by rpki-client