Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/3137372e3130352e3230312e302f32342d3234203d3e20323731363633.roa
File:                     3137372e3130352e3230312e302f32342d3234203d3e20323731363633.roa (raw, json)
Hash identifier:          tAd3fKpfj0IdieGMX1sFOod/XAVIEtM5/BMZJQLKNaI=
Subject key identifier:   25:D8:BB:A9:8E:4A:E4:BA:1F:37:E7:49:68:F1:97:7E:F9:17:49:E2
Certificate issuer:       /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial:       3A08E2DEC43718F882E12FC9DA6D3018969CA2A2
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/3137372e3130352e3230312e302f32342d3234203d3e20323731363633.roa
Signing time:             Wed 22 Apr 2026 21:24:00 +0000
ROA not before:           Wed 22 Apr 2026 21:19:00 +0000
ROA not after:            Wed 21 Apr 2027 21:24:00 +0000
asID:                     271663
IP address blocks:        177.105.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
                          rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:08:e2:de:c4:37:18:f8:82:e1:2f:c9:da:6d:30:18:96:9c:a2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
        Validity
            Not Before: Apr 22 21:19:00 2026 GMT
            Not After : Apr 21 21:24:00 2027 GMT
        Subject: CN=25D8BBA98E4AE4BA1F37E74968F1977EF91749E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:ed:c1:2d:cf:89:56:3c:de:68:80:7a:16:
                    8e:62:fd:bc:9b:72:10:c1:08:f0:a8:9c:0f:fd:94:
                    f5:ef:4e:92:ac:a8:e0:f4:60:5c:2b:e2:f3:fe:9e:
                    50:e7:6e:00:a0:cd:e8:3f:5e:c7:10:c9:8f:43:99:
                    1a:ee:74:c1:8b:d1:32:fb:23:b3:2c:1b:3a:27:94:
                    c1:bd:e5:44:6e:15:b7:18:27:be:65:10:eb:86:3e:
                    e5:34:52:73:25:02:e4:e1:a5:80:be:14:cc:94:55:
                    da:fb:34:2f:9c:78:7c:b4:46:5d:36:3a:ad:a9:dd:
                    55:33:6c:d6:1d:ca:a1:b7:39:50:0e:09:14:9b:44:
                    83:e1:d5:15:53:fc:1c:6b:0e:e1:9c:ec:d3:27:ee:
                    02:ba:c7:83:4f:d5:40:5b:11:35:e2:a5:13:f1:e7:
                    6b:aa:1c:ef:3b:53:b5:0c:65:97:6f:ca:56:b5:67:
                    bb:b9:d1:4b:4f:22:67:ff:26:57:a5:82:a1:0d:70:
                    3d:40:ef:c3:f2:c6:67:08:cb:34:00:82:8b:77:b8:
                    5e:eb:0a:54:89:73:cf:91:e1:69:48:ae:97:a3:d1:
                    52:06:c9:f3:68:5b:12:b7:d5:8a:ca:35:92:59:74:
                    5c:dc:fe:7f:3b:a4:49:a8:8f:f2:51:c9:6b:79:8e:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:BB:A9:8E:4A:E4:BA:1F:37:E7:49:68:F1:97:7E:F9:17:49:E2
            X509v3 Authority Key Identifier:
                keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/3137372e3130352e3230312e302f32342d3234203d3e20323731363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:24:5f:54:0e:b7:76:41:72:07:80:c2:ed:b2:6f:aa:f2:d4:
         82:52:6a:0f:17:aa:3f:3a:1a:a8:3c:eb:d4:ae:52:c9:9f:a0:
         6f:4c:cd:f6:1b:7d:83:66:ba:7c:9e:1b:ea:9b:fc:d8:ac:9a:
         59:87:ba:51:fb:1f:63:44:09:28:21:b6:fe:77:3e:07:c7:25:
         74:cf:d4:d0:2c:99:75:7d:dc:49:95:01:92:34:5d:92:e6:ec:
         1e:a4:88:7c:50:8e:bd:82:09:cc:af:f0:5a:3f:1b:38:a0:74:
         5d:81:7f:6e:69:0d:bc:48:36:ac:7a:ca:42:22:cf:49:42:3b:
         d6:85:92:6d:3d:37:bb:ce:5e:d0:0c:f5:80:6b:52:3e:42:0e:
         a5:6c:e2:92:cb:bc:1e:7b:6d:f4:d3:52:f6:f5:bf:1f:cc:d1:
         9c:1f:d7:a0:e1:9f:0e:1e:32:a1:95:c9:5e:00:4d:d5:77:67:
         d0:3c:58:6e:1d:74:c5:36:6f:54:f1:94:24:1e:f0:ab:f0:36:
         a9:54:14:e6:66:01:22:78:3f:32:9f:b0:c8:29:c9:2b:2a:08:
         d8:f7:9e:57:ea:66:85:c4:f7:6c:82:d6:32:51:a8:5a:fe:53:
         ec:f1:98:46:e4:0e:d9:33:10:23:8f:39:cc:24:16:bd:f9:dd:
         1a:57:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:23 2026 by rpki-client