Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa
File:                     3137372e38372e33362e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          rqwpaGsoyZgUgWIFLAVnn6Utu5w8bVoBui5BN9hEL1o=
Subject key identifier:   B8:CE:06:06:38:71:AA:C8:3B:FD:77:20:F3:38:07:5A:76:E8:16:5A
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       0CFEC2EF2E69C10F3729C813A38261592EF70AE0
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:52 +0000
ROA not before:           Mon 11 May 2026 17:42:52 +0000
ROA not after:            Mon 10 May 2027 17:47:52 +0000
asID:                     268976
IP address blocks:        177.87.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:c2:ef:2e:69:c1:0f:37:29:c8:13:a3:82:61:59:2e:f7:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:52 2026 GMT
            Not After : May 10 17:47:52 2027 GMT
        Subject: CN=B8CE06063871AAC83BFD7720F338075A76E8165A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:25:72:63:7c:72:5c:bc:a1:5d:89:fb:e9:
                    0c:c2:1d:cc:0e:fc:8c:5c:a7:49:4b:5c:59:e2:1a:
                    31:2d:02:9e:5e:c6:88:5a:b2:09:d6:f9:0b:d2:ce:
                    e1:bf:ec:6c:e1:26:aa:69:91:a5:fc:f8:f4:69:42:
                    bc:a2:6a:80:52:d2:88:fa:0d:dd:00:db:b0:92:9f:
                    4d:7b:4a:46:96:0d:b9:71:02:86:cf:51:7f:9a:75:
                    7f:94:fb:cf:d9:d5:78:ca:b6:91:f8:fa:6a:c3:97:
                    b9:91:4f:de:09:90:8d:16:86:45:a9:bf:1a:41:05:
                    52:be:ab:99:ea:99:c3:5e:fd:65:9b:50:f9:52:c3:
                    fc:f5:0f:ad:dc:6b:8e:e6:42:7c:19:03:79:3b:48:
                    35:dd:0b:24:d6:cd:13:70:b6:7e:b9:58:06:a0:04:
                    ff:0a:37:5b:03:ab:65:55:0f:c9:58:d6:89:4d:9c:
                    2d:1f:79:93:62:33:89:1a:08:13:f8:fe:44:29:9b:
                    bf:13:e1:f6:dd:d7:2a:00:c9:a5:fa:62:cf:e3:15:
                    6b:d9:6d:38:64:3e:51:bd:3e:90:62:08:6a:3d:7b:
                    dc:e6:3d:fd:98:fb:c8:04:cc:3d:88:14:8e:37:3c:
                    e0:31:54:9f:03:32:7d:58:0b:14:2d:19:06:fd:1f:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CE:06:06:38:71:AA:C8:3B:FD:77:20:F3:38:07:5A:76:E8:16:5A
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:46:28:8c:b0:43:e4:01:9b:3f:4a:c1:cc:48:10:37:2f:
         e9:9c:d3:8d:eb:c3:e3:fe:b3:39:4b:8e:61:4e:59:a8:7d:ec:
         2f:37:29:9c:ae:98:02:aa:6e:90:25:3e:a6:4d:8a:77:1a:1f:
         98:33:a7:d8:ac:45:9e:6e:e5:83:c4:2d:da:e8:d0:38:a5:8f:
         82:90:d0:3f:5f:76:70:eb:68:7f:d6:96:71:62:e0:d5:a0:21:
         d1:96:25:a4:63:5b:8d:69:4f:f7:f4:31:43:37:33:42:96:ae:
         9c:dc:71:f8:a9:ee:5b:3e:d5:72:c8:80:cc:9d:6d:25:5f:98:
         24:02:f5:6f:1d:2f:0b:b4:c4:d9:32:a8:a6:13:f7:b2:e4:7e:
         c9:05:f5:d0:cd:97:5c:e7:49:19:25:1b:fb:bc:2a:18:02:bb:
         a5:45:f4:dc:c8:48:f5:a0:81:70:4e:7f:8e:01:ad:ba:77:01:
         28:ab:58:01:80:14:e3:f8:fe:39:09:87:16:e8:fa:93:4a:e5:
         5e:d3:a1:66:a9:19:4f:59:31:d6:f5:ba:03:40:5c:7e:69:81:
         35:bf:9d:13:04:eb:a1:ce:0c:f2:55:dd:31:98:4d:71:aa:36:
         e3:f3:94:fb:ef:c8:e7:16:32:ab:d8:85:a3:9d:53:dd:ee:c3:
         0d:d9:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:38 2026 by rpki-client