Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
File:                     3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (raw, json)
Hash identifier:          NSq/Nhoj5+NiGEuddAu4CiMGvP4ppHYT67jibtutopo=
Subject key identifier:   0B:14:E8:32:B4:A2:AD:8C:44:E6:91:C7:BB:38:61:C8:5F:5D:84:31
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       285742934CAC64AB3F0967115F060363C1082C44
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
Signing time:             Sat 02 May 2026 13:28:51 +0000
ROA not before:           Sat 02 May 2026 13:23:51 +0000
ROA not after:            Sat 01 May 2027 13:28:51 +0000
asID:                     52573
IP address blocks:        177.86.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:42:93:4c:ac:64:ab:3f:09:67:11:5f:06:03:63:c1:08:2c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: May  2 13:23:51 2026 GMT
            Not After : May  1 13:28:51 2027 GMT
        Subject: CN=0B14E832B4A2AD8C44E691C7BB3861C85F5D8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:9d:b4:c8:ce:da:0e:ff:68:97:4d:13:e6:
                    21:38:92:2f:27:cd:ea:c9:e5:76:c4:4a:2f:28:1f:
                    0b:45:05:ee:d1:42:f9:43:2f:ed:6e:f1:f1:f8:a7:
                    da:0a:8b:db:a7:ee:8c:a7:3d:e0:92:0d:eb:c8:83:
                    96:d6:cd:af:cc:bf:0a:22:1a:7a:4c:2e:c6:af:98:
                    4c:63:6d:3a:91:07:cd:41:54:3d:42:20:46:17:65:
                    77:5e:bf:7b:24:06:66:28:48:eb:9d:3c:2f:96:e6:
                    e0:df:c0:a0:06:f4:d6:70:3a:a8:62:e5:d1:69:cd:
                    a5:41:b9:aa:63:df:bb:f3:d4:f2:84:6c:8e:0c:eb:
                    03:0f:c3:e6:ec:db:f7:5a:10:53:eb:05:39:d1:77:
                    5b:78:34:dd:b7:cb:f4:ea:0e:ae:05:81:b6:3a:e5:
                    5e:08:c9:18:a2:75:c6:8f:7a:f5:70:de:cf:f1:db:
                    e8:4a:ef:a3:a2:89:69:7e:60:32:31:84:7b:bc:58:
                    3f:40:eb:97:b7:fe:5b:58:45:9b:1b:5c:43:10:8f:
                    89:5d:7b:bf:36:32:c7:b9:fc:27:93:05:a5:89:81:
                    15:76:0d:04:2c:37:42:e8:cc:52:fa:e4:3a:9d:18:
                    1d:6f:28:8b:6e:f1:db:1d:ea:8c:0e:45:d7:85:76:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:E8:32:B4:A2:AD:8C:44:E6:91:C7:BB:38:61:C8:5F:5D:84:31
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:3b:5e:7a:0b:64:c5:18:ea:f1:47:6d:d5:88:8f:cc:1f:
         5a:8b:a5:e9:4a:09:f2:dc:f0:5d:af:56:46:11:da:51:c9:3f:
         55:59:06:eb:a4:ce:53:f4:65:a3:ad:47:c3:6c:c4:cb:b8:1d:
         5d:b6:24:98:08:b8:a2:60:07:67:11:04:5f:69:c5:da:90:d9:
         b0:21:bc:0c:9b:ed:a3:b1:a1:be:eb:d5:74:d6:64:c7:6e:d6:
         21:23:de:ee:37:06:ab:69:a4:01:c9:1c:d2:ff:04:8d:5d:fb:
         cb:bb:58:78:32:31:fb:95:7d:04:83:42:5b:e8:e9:87:1f:5e:
         94:eb:49:ff:ca:9e:ce:ce:8e:69:ee:7e:39:b4:c5:54:12:35:
         7c:d8:c0:d2:29:74:f9:d6:8f:78:c2:aa:dc:e4:7b:4c:50:de:
         25:97:86:78:09:5a:7d:29:9a:4f:68:98:9b:63:24:e0:a3:34:
         ea:c9:56:91:ee:89:2f:b1:51:c6:68:fe:88:0f:04:f0:cf:26:
         ae:09:1a:09:4e:a5:a9:26:be:3f:68:73:ba:6b:36:b6:de:31:
         a7:f7:bc:b0:f6:39:96:63:82:5f:c2:71:34:b2:19:d5:be:14:
         08:6a:fa:5b:a6:f5:ca:e7:87:18:13:f6:a2:3d:01:3d:c0:7d:
         2a:76:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:16:11 2026 by rpki-client