Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32322e302f32342d3234203d3e20323636313239.roa
File:                     3137372e33362e32322e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          6MX+9ZM2UwpfSbtN+WPVR3jo1fYYWTOzdzP3v3bg+AE=
Subject key identifier:   02:F2:FD:B8:C4:EE:7C:40:8E:F6:AB:15:2B:B6:0B:4C:28:2A:A4:DA
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       57A63DB484DDE4487AE2FF5DC79411C54086FA7D
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32322e302f32342d3234203d3e20323636313239.roa
Signing time:             Tue 22 Sep 2026 18:00:00 +0000
ROA not before:           Tue 22 Sep 2026 17:55:00 +0000
ROA not after:            Tue 21 Sep 2027 18:00:00 +0000
asID:                     266129
IP address blocks:        177.36.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a6:3d:b4:84:dd:e4:48:7a:e2:ff:5d:c7:94:11:c5:40:86:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Sep 22 17:55:00 2026 GMT
            Not After : Sep 21 18:00:00 2027 GMT
        Subject: CN=02F2FDB8C4EE7C408EF6AB152BB60B4C282AA4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:06:33:4a:a7:a5:08:7d:ad:32:91:db:c9:ab:
                    f7:33:e3:c5:4e:73:2c:15:62:06:fb:5a:8c:b8:dd:
                    ad:a2:22:14:1f:f4:d7:3a:2f:86:37:bc:ba:75:d0:
                    2d:be:07:17:48:6b:58:13:88:98:10:3a:d0:f2:a9:
                    11:77:92:f5:2d:8a:15:fe:a4:b0:db:b1:05:9f:bb:
                    16:40:bf:fc:2a:7f:91:d8:ff:03:de:d1:63:fe:1b:
                    a4:75:2d:7b:65:15:30:ef:23:3d:f2:7f:ff:fe:f9:
                    69:3c:e1:28:d0:4d:24:1f:e9:ce:38:f8:95:0f:29:
                    22:eb:28:05:00:31:16:05:b3:b0:40:cb:eb:01:14:
                    39:ce:45:bd:9b:3c:34:fd:49:15:ae:25:87:30:06:
                    fe:de:10:41:0f:ed:4f:ea:d1:be:e3:98:50:1c:52:
                    d2:71:70:42:18:12:76:1d:73:2f:38:10:8c:ab:ce:
                    4f:52:ba:1d:ee:7c:75:79:40:68:a4:7f:a0:a2:66:
                    83:62:30:4e:1a:a0:35:c6:e9:4f:8c:a8:01:8b:4c:
                    5b:66:1e:35:31:08:26:8b:bd:45:80:a0:ed:b6:c7:
                    cc:66:2b:26:c1:ba:49:3c:77:78:3b:8f:91:9a:57:
                    c0:b0:f7:94:ba:a1:93:7b:5f:87:ab:71:e4:82:65:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F2:FD:B8:C4:EE:7C:40:8E:F6:AB:15:2B:B6:0B:4C:28:2A:A4:DA
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32322e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:39:9d:39:5b:34:30:95:05:1e:74:ab:5a:82:5b:57:84:7b:
         f5:23:e0:8a:75:7e:b7:a0:95:13:23:e6:ef:f5:4c:b8:a0:05:
         02:fe:8a:29:f0:c5:73:ea:09:bb:c4:c6:5a:e3:69:67:8b:6d:
         a4:a7:8f:ad:20:99:1a:af:2e:ad:2a:b7:e1:6f:24:42:84:29:
         d3:6f:13:df:d0:fb:63:97:b1:1e:84:ef:b0:b5:da:4e:72:12:
         62:39:66:b1:27:5e:68:91:58:49:06:a3:5b:f2:1e:ef:00:23:
         8f:4a:b3:5b:6b:94:eb:12:9a:19:28:f4:1d:4c:d2:41:b3:97:
         21:0b:ee:71:7a:a1:84:6e:9f:53:54:82:06:aa:50:09:c3:73:
         44:72:3e:3b:33:ba:ce:e0:b2:e9:13:43:34:d0:17:d6:0e:42:
         b6:9b:76:c9:67:b7:30:38:d0:ba:e3:0b:d1:2c:ea:97:0f:b7:
         0a:a5:cf:82:d9:44:44:e4:6f:09:3a:b7:a1:37:1d:38:db:82:
         a4:4a:c0:d1:84:29:78:38:d0:18:a8:e3:22:9c:25:8e:ed:5e:
         f2:e3:29:d9:38:da:3b:5a:6c:d5:43:51:9f:d3:97:2f:20:32:
         42:e8:c7:f1:b6:c3:2b:da:a2:90:be:24:2b:24:ec:09:1c:8b:
         3c:d7:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----