Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
File:                     3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          ZmSm3VvhaTbmuYdXl+BY0jG5qTujj6wfwikjMsguDaU=
Subject key identifier:   D9:9D:50:A5:E4:42:C1:79:9E:F0:E3:10:1A:25:9A:BA:04:BE:AC:8B
Certificate issuer:       /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
Certificate serial:       36C5583ED8E275EC2B956418375B9FB0E48E7AB5
Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
Signing time:             Fri 25 Sep 2026 15:07:07 +0000
ROA not before:           Fri 25 Sep 2026 15:02:07 +0000
ROA not after:            Fri 24 Sep 2027 15:07:07 +0000
asID:                     263424
IP address blocks:        177.91.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl
                          rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c5:58:3e:d8:e2:75:ec:2b:95:64:18:37:5b:9f:b0:e4:8e:7a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
        Validity
            Not Before: Sep 25 15:02:07 2026 GMT
            Not After : Sep 24 15:07:07 2027 GMT
        Subject: CN=D99D50A5E442C1799EF0E3101A259ABA04BEAC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:29:ce:4e:3f:e3:b1:f7:05:84:8f:39:8c:
                    28:cd:28:bf:df:c1:bc:2a:1c:13:87:d5:2d:13:35:
                    e1:5e:18:2e:ce:53:85:eb:2b:43:38:2d:e1:e7:5d:
                    74:c7:5c:ff:3a:5b:b9:d3:a2:de:c3:76:54:14:79:
                    73:28:d7:aa:6c:18:a9:e6:d8:97:d7:a6:1c:25:2d:
                    da:54:4b:99:51:88:0b:3a:37:44:d0:c8:ba:69:51:
                    e9:9b:0a:bd:87:e1:55:a3:6a:90:58:3e:bc:86:a7:
                    74:d9:0b:fd:6b:05:9b:72:e4:f5:ad:c8:33:1c:bf:
                    02:17:d2:ad:69:c6:f1:ac:81:61:45:16:16:d9:20:
                    03:82:5a:1a:61:4e:8d:2f:fa:52:02:1a:fb:27:3e:
                    02:11:85:2d:b2:c5:6a:d7:f4:98:a9:ca:b1:f6:ce:
                    b8:21:08:58:da:49:34:f1:12:0e:e4:c7:4f:0c:ad:
                    23:43:4e:78:29:c4:fc:21:6f:5c:57:59:e2:e1:8e:
                    f5:a0:07:9e:0c:46:fd:d3:8b:bb:67:27:55:27:e1:
                    d0:e9:7e:65:bd:6e:77:44:fc:ef:a4:05:54:61:45:
                    22:01:13:e0:8b:e1:fd:f1:2d:9b:46:ac:1f:0f:5c:
                    2f:f7:46:4e:07:0b:3f:42:f6:9e:3e:c3:0c:95:40:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:50:A5:E4:42:C1:79:9E:F0:E3:10:1A:25:9A:BA:04:BE:AC:8B
            X509v3 Authority Key Identifier:
                keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:6d:77:61:05:84:b7:3a:d2:6b:de:53:b1:3c:79:2c:f5:
         1d:89:1e:fd:11:62:73:e9:54:6d:4b:5a:2f:34:25:b4:e7:55:
         de:0a:29:f0:fc:90:0a:b6:68:8b:ca:e3:38:5c:42:3a:4e:1f:
         7d:f5:e7:82:c5:29:58:9e:de:53:bd:4a:52:73:63:d7:71:ee:
         a1:50:4f:f4:0e:82:91:c8:40:55:65:1d:e8:db:52:41:89:22:
         bc:b6:08:bf:fc:bd:c1:fe:74:eb:aa:b7:0c:64:f6:c0:26:28:
         df:e2:57:4f:ae:3a:74:78:10:0c:e9:43:9f:49:f9:46:e6:ce:
         5d:ee:b0:6a:83:78:d6:08:eb:ae:e6:4b:af:21:42:ac:b9:b5:
         5c:9a:5f:9d:29:35:44:bf:94:93:e2:fa:11:1d:e7:04:aa:aa:
         ca:16:18:5f:50:07:dd:77:e4:b6:f6:dc:bc:2a:4c:a3:08:23:
         76:5a:05:d3:d3:31:75:ad:5b:19:44:4a:bd:41:cf:49:5a:76:
         f0:ca:18:2d:16:ff:2f:66:5c:17:58:18:de:39:2e:cb:a1:78:
         10:c2:90:b9:8f:38:97:6a:c7:d2:c6:ce:5a:b7:5e:9a:25:06:
         b5:bf:66:d5:c4:b8:e5:45:69:6c:e4:d9:78:67:c4:1b:50:c7:
         4b:aa:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:29:35 2026 by rpki-client