Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3133322e302f32322d3332203d3e20323639353534.roa
File:                     3137372e3132392e3133322e302f32322d3332203d3e20323639353534.roa (raw, json)
Hash identifier:          2E39PfYxy5zBJJLTtMkKFNP8Q/6Wr4SuCS/LErHuOeU=
Subject key identifier:   D6:03:41:2B:76:A7:98:4A:2D:62:6B:4C:8D:31:1D:0A:B4:CB:1A:5D
Certificate issuer:       /CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
Certificate serial:       78C42D70A48CEBBE3E8CDB15FEFFB2C248D810CC
Authority key identifier: 73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3133322e302f32322d3332203d3e20323639353534.roa
Signing time:             Fri 02 Oct 2026 18:30:14 +0000
ROA not before:           Fri 02 Oct 2026 18:25:14 +0000
ROA not after:            Fri 01 Oct 2027 18:30:14 +0000
asID:                     269554
IP address blocks:        177.129.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl
                          rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:2d:70:a4:8c:eb:be:3e:8c:db:15:fe:ff:b2:c2:48:d8:10:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
        Validity
            Not Before: Oct  2 18:25:14 2026 GMT
            Not After : Oct  1 18:30:14 2027 GMT
        Subject: CN=D603412B76A7984A2D626B4C8D311D0AB4CB1A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:38:fb:c7:f0:f4:63:0c:42:16:6e:6f:20:
                    cf:e8:2e:be:ec:b7:9d:77:f8:ca:66:b3:79:00:89:
                    c7:74:56:a7:fc:a3:d9:0f:8d:39:2b:e7:56:57:06:
                    13:f1:d7:2b:e4:0d:ac:70:bf:77:c6:2b:49:b7:99:
                    88:16:1b:16:96:e2:d4:4e:25:fb:ec:01:72:2b:f2:
                    ce:e7:e0:d5:90:a5:28:6f:e1:99:48:20:3b:5b:7d:
                    fd:73:a3:e5:0e:53:ef:a9:79:1e:15:b2:17:d2:3e:
                    d2:1f:26:ee:0a:65:31:f8:85:e7:be:77:61:94:3b:
                    bf:ef:79:52:6e:89:cb:94:26:e7:49:7e:47:8e:f6:
                    14:96:7d:17:c1:3e:7f:b5:64:02:b1:10:b3:c8:9d:
                    58:a7:84:0f:ba:eb:65:70:4c:57:c2:fe:56:12:54:
                    9e:af:61:f3:a5:d1:99:34:38:5e:01:93:8d:28:fe:
                    7e:61:61:0f:7a:91:db:ad:4c:e9:e3:05:b7:f0:d7:
                    02:14:45:e2:13:7c:f8:00:f4:b0:79:b6:0a:a4:d2:
                    4b:bf:00:38:66:fa:cc:f4:67:72:fb:73:54:d1:21:
                    b6:f4:5c:ec:3b:51:80:40:87:c5:7e:61:9c:c5:2a:
                    3c:39:fe:4a:d0:d9:30:4c:e6:10:7f:c5:60:26:2c:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:41:2B:76:A7:98:4A:2D:62:6B:4C:8D:31:1D:0A:B4:CB:1A:5D
            X509v3 Authority Key Identifier:
                keyid:73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3137372e3132392e3133322e302f32322d3332203d3e20323639353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:18:ce:23:5b:a2:bf:0a:78:5a:d4:e5:98:5c:3e:28:a3:
         c8:a6:80:cc:71:ab:b4:74:14:be:95:27:f1:ed:20:48:e9:7e:
         d3:33:70:59:dc:c4:ef:fb:f5:63:85:39:43:80:2a:87:e3:cf:
         99:60:53:e4:58:ef:df:b7:75:ae:9b:89:9a:62:2e:d1:f7:d8:
         7d:b3:a0:e9:35:16:44:98:8b:7b:b3:03:5c:7c:ef:f4:74:40:
         37:6d:b3:32:2f:59:8a:bf:85:92:60:2a:ef:bd:fb:71:7c:2c:
         42:e7:1a:af:01:04:64:47:b5:d7:5a:e4:10:19:f0:e9:47:f8:
         b6:b0:09:c5:56:3e:ba:dd:05:22:4b:20:d5:fe:60:fa:0a:ec:
         17:88:12:52:35:92:2d:7e:60:b5:bc:63:b6:b2:98:ed:ce:69:
         d4:55:4e:e4:5b:7a:a9:1a:de:da:9a:5e:8d:62:a7:c2:cf:0b:
         9c:ee:ec:86:f0:cf:58:d4:7d:d0:69:50:f9:06:f5:4f:5e:9c:
         46:2e:ca:df:89:61:ab:fc:aa:a2:a1:4c:65:53:21:09:2b:34:
         c9:61:43:71:aa:7d:0c:63:10:25:0d:44:87:01:42:f8:0f:90:
         b6:88:6e:79:be:84:2a:58:c5:5f:a2:9c:82:ed:8f:03:d4:10:
         af:d2:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:31 2026 by rpki-client