Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          bA1pBm3R0Bwdk2BPMDjBK4O4DjGLNwdDdylGRbsRsTY=
Subject key identifier:   8A:31:BC:25:1A:A0:AA:B5:DF:B7:C3:9D:32:BF:22:92:1A:0D:A1:6A
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       3F8BFED081B11561372E2856588E101D3965A770
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
Signing time:             Wed 26 Aug 2026 11:58:04 +0000
ROA not before:           Wed 26 Aug 2026 11:53:04 +0000
ROA not after:            Wed 25 Aug 2027 11:58:04 +0000
asID:                     262462
IP address blocks:        177.105.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 15:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8b:fe:d0:81:b1:15:61:37:2e:28:56:58:8e:10:1d:39:65:a7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Aug 26 11:53:04 2026 GMT
            Not After : Aug 25 11:58:04 2027 GMT
        Subject: CN=8A31BC251AA0AAB5DFB7C39D32BF22921A0DA16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:9e:bf:f8:3a:df:62:c1:cc:55:49:a9:4a:
                    ff:93:72:86:74:f6:fe:b3:c3:2c:5b:3d:54:1f:ca:
                    01:ee:1c:a7:aa:ed:a6:2e:18:2f:52:c0:ad:6e:32:
                    c7:2f:c8:a4:2e:34:0a:9b:b2:e5:98:a0:de:10:0d:
                    b8:e6:cc:f9:ff:30:78:57:8a:99:9a:cc:6c:5f:a6:
                    39:57:17:ba:7c:8f:a1:e9:2c:d2:fa:b3:5a:33:41:
                    d6:0c:b6:0f:dd:35:ae:97:5d:56:7b:8b:28:08:cd:
                    63:8e:bd:b3:aa:0d:4e:d3:c8:b1:40:65:97:06:b1:
                    25:17:55:f3:c7:b3:ec:71:bd:01:f8:ca:c3:e7:2d:
                    79:cf:00:ce:65:9f:85:c7:4d:1f:5f:8a:62:fd:cd:
                    3c:27:b3:0d:10:6e:77:13:a9:16:f3:66:25:1c:c9:
                    e2:54:e4:af:b5:fd:a7:19:3a:a9:78:af:7e:ef:f2:
                    64:83:32:03:e6:b6:d7:01:26:36:01:a1:f2:ce:1c:
                    d8:3e:b7:d1:91:06:1a:b0:71:92:30:27:d1:29:da:
                    40:2c:ab:9a:2a:74:b9:a2:08:07:eb:9d:1a:f9:8f:
                    a4:6d:97:f0:02:79:30:a3:84:7a:32:c5:e5:73:ec:
                    1f:ad:bc:7d:a1:6e:04:94:2e:9d:55:bc:77:a0:38:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:31:BC:25:1A:A0:AA:B5:DF:B7:C3:9D:32:BF:22:92:1A:0D:A1:6A
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:08:a1:63:71:5c:a0:26:7c:a7:20:43:0c:d3:4b:af:64:
         f9:5b:3c:0c:ff:11:c2:09:5c:ec:d0:2a:63:68:3a:c4:86:d1:
         77:93:b7:8c:f2:af:25:67:6e:5e:7a:50:5b:58:82:71:a1:c3:
         12:b9:1e:94:38:a1:66:64:8f:cc:28:d9:32:d2:3e:eb:79:44:
         75:f9:e8:f1:28:a2:6a:b6:d6:92:4a:db:9d:09:02:cd:c1:a8:
         86:d7:c5:18:fa:c4:d2:7f:4e:86:2f:e1:6d:4e:b7:4a:0b:40:
         60:f7:c0:37:b0:35:e8:95:49:06:c4:d6:fe:10:4e:d2:b5:9e:
         ba:97:bb:8e:64:42:52:77:88:ad:43:a1:f9:19:44:0a:97:ce:
         45:1b:c6:f4:42:dc:2b:bf:2e:74:c5:4c:f3:26:bf:14:6a:5d:
         35:d8:01:76:7c:57:c4:8a:4d:cd:64:b6:b5:28:c3:4d:d1:81:
         68:a2:bf:73:35:6d:4e:78:25:55:2a:95:76:89:97:d6:e7:aa:
         be:f6:aa:f3:7d:93:43:d1:db:a4:0f:66:5d:2d:28:e6:3b:99:
         4c:9b:04:b9:12:a0:86:65:c8:93:1b:23:2e:df:fc:80:50:64:
         a0:c6:f0:34:11:d1:c5:4a:a8:31:37:07:a4:e9:85:1a:96:5a:
         03:45:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:23:49 2026 by rpki-client