Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          dDB5+dak6XtedRtvVNseIbXyOkUnbV3Ur2GHhTeyNsA=
Subject key identifier:   20:B5:B2:96:FC:9B:DC:F7:CB:AA:64:75:C4:29:35:AB:48:60:86:30
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       0E76745F61C6F5C5A48FFCD7F1CC6370241D2C1D
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
Signing time:             Mon 11 May 2026 04:46:15 +0000
ROA not before:           Mon 11 May 2026 04:41:15 +0000
ROA not after:            Mon 10 May 2027 04:46:15 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:76:74:5f:61:c6:f5:c5:a4:8f:fc:d7:f1:cc:63:70:24:1d:2c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May 11 04:41:15 2026 GMT
            Not After : May 10 04:46:15 2027 GMT
        Subject: CN=20B5B296FC9BDCF7CBAA6475C42935AB48608630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:b8:32:c9:91:4f:9b:e8:72:06:80:81:00:
                    81:26:8e:57:81:65:9d:ec:3e:f2:57:e0:59:25:b1:
                    e0:2b:48:7c:44:75:2b:a6:18:17:0d:a7:ab:61:71:
                    12:c7:cb:37:fe:3d:bb:bd:6d:e5:9c:30:59:86:ff:
                    e9:57:06:31:91:9a:9f:3c:7c:73:42:eb:e0:e7:4b:
                    3f:91:79:d5:df:e1:9b:dc:05:22:aa:ec:79:42:1f:
                    ee:ad:27:29:88:57:29:36:fa:cc:a3:9a:fd:c0:0f:
                    1c:cb:78:6e:dc:21:48:3c:53:87:ec:97:4c:43:c3:
                    19:51:82:1d:01:98:dd:d3:de:3a:16:5a:80:e2:eb:
                    ae:b9:d6:3c:33:28:6b:c0:a7:17:21:55:c5:37:55:
                    ee:63:1f:9c:b3:b0:4c:6e:4a:30:70:b3:f2:a0:df:
                    be:4d:18:ff:f3:d4:f8:e9:7b:3f:b1:c4:34:c9:06:
                    40:74:d3:da:e1:b0:94:5d:13:9e:91:5e:f7:74:38:
                    94:df:e6:a7:bb:ba:5e:53:ed:bb:65:09:29:50:52:
                    4c:7f:fe:59:59:f3:ef:50:5e:2b:59:48:d9:d3:e0:
                    3f:c2:f4:36:09:0d:40:ee:72:4f:c0:b5:92:e7:e4:
                    87:31:e5:1b:b5:41:44:67:e5:24:fb:3a:74:10:72:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:B2:96:FC:9B:DC:F7:CB:AA:64:75:C4:29:35:AB:48:60:86:30
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:1f:3d:1a:02:5b:3e:88:2f:46:68:6d:90:d6:cb:8e:14:
         e6:b9:95:d8:44:70:3e:56:98:2c:af:3f:7f:67:a1:cc:be:ed:
         f4:a1:a8:5c:05:cc:dd:c7:f6:85:45:48:79:63:83:35:80:fb:
         cd:95:b3:e1:2e:2c:06:8f:80:d3:ac:2a:ac:21:8b:12:03:ad:
         d6:ea:9a:b7:c0:b4:13:b7:0a:0f:7a:98:84:59:94:d2:2c:47:
         28:f6:75:d2:1c:c3:d8:82:a2:f5:b8:b6:a8:c0:3f:21:2e:9b:
         a4:6a:61:0c:2b:3f:92:9c:26:40:69:6a:40:b5:fc:12:aa:93:
         84:da:ae:4d:a5:74:a3:ca:cf:7a:d8:41:a0:dc:21:e2:6d:11:
         23:54:45:44:06:f1:af:28:fd:a1:b7:28:e5:f4:0c:2d:8f:1a:
         77:67:b0:ee:83:12:c3:41:35:38:0c:38:70:33:9c:45:e5:56:
         36:e0:fb:22:e0:0f:50:48:b2:58:4d:41:a1:d8:c1:76:f6:71:
         42:38:e9:2e:b1:0f:31:33:00:76:2f:1e:a3:38:c5:38:fd:91:
         25:af:76:a7:9e:1a:c5:02:b8:fc:38:e2:2e:1e:46:31:18:04:
         3f:6a:e7:3a:a9:f4:a6:14:b3:e6:50:b4:96:4c:07:f0:9d:61:
         97:7e:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:53:29 2026 by rpki-client