Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa
File:                     3137372e33392e31362e302f32312d3332203d3e20323632343135.roa (raw, json)
Hash identifier:          yeesXrGpsFAqkEpUqH9p3IYMdpR59t4rPC9iOcVxr9A=
Subject key identifier:   6C:AB:4B:95:7A:FD:AF:13:11:F7:68:0C:39:A9:F1:5B:88:A5:26:B2
Certificate issuer:       /CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
Certificate serial:       24033D83B012A886762036E6DE08A2F08064663B
Authority key identifier: EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa
Signing time:             Tue 25 Aug 2026 20:02:57 +0000
ROA not before:           Tue 25 Aug 2026 19:57:57 +0000
ROA not after:            Tue 24 Aug 2027 20:02:57 +0000
asID:                     262415
IP address blocks:        177.39.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl
                          rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 16:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:3d:83:b0:12:a8:86:76:20:36:e6:de:08:a2:f0:80:64:66:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
        Validity
            Not Before: Aug 25 19:57:57 2026 GMT
            Not After : Aug 24 20:02:57 2027 GMT
        Subject: CN=6CAB4B957AFDAF1311F7680C39A9F15B88A526B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:0b:db:79:b1:0e:27:39:23:fe:be:fe:04:
                    e2:01:4e:50:87:f5:1f:87:71:4b:5c:7d:28:08:67:
                    c0:19:2c:03:68:48:43:81:91:df:4a:75:1c:0f:7b:
                    2d:3d:58:6a:31:be:5d:77:72:53:76:37:e7:64:c0:
                    31:f1:be:63:c6:1b:2d:05:e9:cb:d8:98:5b:cd:75:
                    35:5c:ae:04:73:0a:c9:ef:f5:95:e7:9d:6d:3c:27:
                    31:7b:50:24:4d:fe:1c:05:35:8d:0b:2c:f1:8e:72:
                    2f:78:c7:99:3f:d0:23:1c:05:0f:38:3f:39:a8:06:
                    98:25:ea:78:ec:a0:23:fe:0a:62:a4:23:92:0d:2c:
                    a7:22:92:22:fb:b2:3d:49:8b:d9:dd:c1:89:39:f8:
                    f4:5e:6f:8f:63:29:90:3d:92:19:f2:5c:f1:12:9f:
                    d4:33:73:bb:ad:1d:1f:ad:40:d7:a5:60:e3:b3:d6:
                    17:92:bd:bd:4f:e5:e5:08:c9:c4:33:b7:b8:9c:a3:
                    da:48:6a:60:25:d7:c7:e2:75:21:55:24:1c:ab:1b:
                    7e:eb:b9:b0:20:84:e4:ee:c0:cf:c7:28:08:d8:de:
                    39:a8:c5:47:dd:ad:8a:45:68:ac:92:1d:31:31:67:
                    1d:ef:cd:51:49:e3:37:5f:8a:62:dd:0d:17:62:3a:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:4B:95:7A:FD:AF:13:11:F7:68:0C:39:A9:F1:5B:88:A5:26:B2
            X509v3 Authority Key Identifier:
                keyid:EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:20:c9:c0:db:8a:ef:05:e9:32:92:08:ce:68:a0:73:72:
         e8:07:b6:2c:88:43:45:06:5f:57:52:69:03:f4:f1:e1:e1:fb:
         e1:2b:b7:31:ad:a7:58:0f:03:ae:8d:44:ba:cf:78:74:30:a2:
         6b:ca:6d:60:d4:9c:b4:9d:9a:8e:08:54:de:ea:54:46:8a:49:
         d3:ba:be:94:26:89:1b:29:87:18:ca:15:5b:22:f2:54:c9:e4:
         b5:9f:99:fe:11:61:4d:43:e7:e0:c8:18:44:b5:d3:40:68:42:
         6c:14:16:35:75:0f:98:10:63:2e:4d:11:70:3b:57:4a:05:52:
         72:06:56:e8:4d:5b:9e:5f:9c:95:64:d7:ca:e6:4b:8e:86:f8:
         48:a9:a4:1a:85:6b:cd:cf:2c:85:35:f1:d6:a6:72:57:c1:58:
         c6:01:cf:7e:61:a5:16:52:e3:9d:30:d0:d3:e5:0a:b0:a5:df:
         3c:c7:7f:da:6e:34:c6:82:11:5e:39:21:6f:63:08:0e:68:4f:
         7e:e2:39:a9:84:2b:02:05:aa:f5:5f:e3:19:d6:c6:95:42:6e:
         6b:ac:46:d1:1a:ad:e7:13:1c:6f:25:fd:e0:88:a5:e0:bc:d8:
         bb:86:74:4f:6a:13:2a:54:ef:77:e1:c2:1b:34:dc:91:87:5f:
         1d:2e:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:16:36 2026 by rpki-client