Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/3137372e3135322e3138382e302f32322d3232203d3e20323633313036.roa
File:                     3137372e3135322e3138382e302f32322d3232203d3e20323633313036.roa (raw, json)
Hash identifier:          9yXB/PtggQlDnjLdeVWjzOKKBQ5LPZ3odGFAkFW3szE=
Subject key identifier:   4F:0D:9E:ED:04:1D:F6:B2:64:CC:50:2E:FA:8F:D4:1A:7E:84:1F:38
Certificate issuer:       /CN=D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F
Certificate serial:       2572ECD45DA57730654BE801720F2A08D77238A3
Authority key identifier: D2:DE:A9:F0:54:B1:E0:DF:28:F4:35:9C:F1:C3:94:9F:85:55:DA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/3137372e3135322e3138382e302f32322d3232203d3e20323633313036.roa
Signing time:             Thu 13 Aug 2026 12:18:07 +0000
ROA not before:           Thu 13 Aug 2026 12:13:07 +0000
ROA not after:            Thu 12 Aug 2027 12:18:07 +0000
asID:                     263106
IP address blocks:        177.152.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.crl
                          rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:72:ec:d4:5d:a5:77:30:65:4b:e8:01:72:0f:2a:08:d7:72:38:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F
        Validity
            Not Before: Aug 13 12:13:07 2026 GMT
            Not After : Aug 12 12:18:07 2027 GMT
        Subject: CN=4F0D9EED041DF6B264CC502EFA8FD41A7E841F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:c4:d6:ef:fd:6e:b4:e2:6d:01:5b:a1:20:
                    a1:99:9d:b8:d3:62:55:3a:73:3f:8d:a0:a3:a7:9a:
                    8d:c8:dd:be:ca:14:b0:cb:53:03:2a:f4:bf:34:69:
                    7f:b6:6e:b7:a7:23:78:23:21:0e:fe:54:a3:cc:99:
                    4f:46:09:8c:e3:17:cf:f9:1d:e8:e5:e1:83:a7:7f:
                    cb:d5:8d:7b:fc:e1:fd:28:27:d9:cb:e5:5e:65:78:
                    3c:9d:d4:a2:d7:a8:be:6a:cd:72:ae:1c:f4:2a:a3:
                    bc:cc:55:bc:83:2b:68:ee:e7:bd:a3:b1:f4:9d:8b:
                    d6:dd:ea:46:f4:9e:07:55:0e:94:5f:5d:68:52:82:
                    54:ad:34:18:7b:b6:9d:94:87:b8:e1:27:4f:72:82:
                    c0:9b:5e:6b:35:5a:63:8f:57:4f:0a:cd:03:99:63:
                    1e:7e:d3:64:95:87:75:b3:48:da:28:22:84:41:0d:
                    49:e8:cf:c6:27:de:d7:b5:c2:e6:0b:bc:c9:de:64:
                    ec:b3:e4:f4:79:7b:66:48:92:54:2f:2c:d4:19:f5:
                    f5:4d:0e:d0:10:63:64:86:e0:ce:6c:36:3d:5e:84:
                    a2:f2:61:45:97:90:d6:29:d3:b6:c8:e1:9f:cd:26:
                    3e:0b:b2:ee:af:03:bd:91:68:cf:52:1f:85:54:a1:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0D:9E:ED:04:1D:F6:B2:64:CC:50:2E:FA:8F:D4:1A:7E:84:1F:38
            X509v3 Authority Key Identifier:
                keyid:D2:DE:A9:F0:54:B1:E0:DF:28:F4:35:9C:F1:C3:94:9F:85:55:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/3137372e3135322e3138382e302f32322d3232203d3e20323633313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:86:6d:4b:b8:55:9e:2d:7f:7d:60:fb:38:07:ba:64:05:
         e8:e5:da:ed:d2:24:71:11:59:1b:d9:8c:9f:24:c5:76:70:9e:
         ec:fc:8a:fa:1e:12:ee:44:74:11:87:f9:d3:a8:f9:5d:ce:4a:
         46:c9:1c:00:37:e6:43:5a:29:9c:b7:b9:a4:3d:0b:f8:1a:3e:
         93:6b:bd:37:37:13:5a:80:01:ba:e8:10:3f:86:cd:dd:51:03:
         b6:5d:87:e1:f8:d4:ed:00:de:c9:ed:cd:0b:10:30:09:8d:24:
         eb:f1:c0:83:30:4a:8c:da:0e:d2:51:04:21:8c:c4:c8:25:84:
         c0:7a:95:0c:cb:03:8a:c3:0f:5c:ab:e8:a5:f5:bc:e8:e9:e0:
         ee:7e:e8:bd:1a:23:9d:99:b9:5e:bd:41:e6:bb:fa:41:60:ca:
         25:66:12:dd:ac:73:0a:8f:09:1d:8b:5b:1b:36:e1:44:6e:c6:
         01:9e:56:cb:bb:a0:93:9b:e5:ae:e0:fc:21:93:81:aa:30:1d:
         c4:be:2d:49:52:72:ad:21:cb:35:f2:6c:92:9a:25:de:55:c4:
         41:f7:e4:33:59:e2:c8:3c:9d:ae:af:b6:d0:a4:07:8a:8d:56:
         32:a7:16:b7:9a:ae:fd:1d:ce:e1:ba:b0:d9:e7:d7:c2:7a:77:
         d4:98:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:13:20 2026 by rpki-client