Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa
File:                     3137372e33382e3233322e302f32312d3232203d3e203134383638.roa (raw, json)
Hash identifier:          V0sxadlRo/CGQjfKFDhSW3tRpIPu/gKcMbkFwyg+8Ic=
Subject key identifier:   F9:E4:C9:53:C7:73:0F:D5:37:4A:14:67:50:D7:15:2D:1E:BF:92:63
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       0B4F3FADCD2B4073D22DC54C0F26E40AD832F953
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:33 +0000
ROA not before:           Mon 17 Aug 2026 17:43:33 +0000
ROA not after:            Mon 16 Aug 2027 17:48:33 +0000
asID:                     14868
IP address blocks:        177.38.232.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:3f:ad:cd:2b:40:73:d2:2d:c5:4c:0f:26:e4:0a:d8:32:f9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:33 2026 GMT
            Not After : Aug 16 17:48:33 2027 GMT
        Subject: CN=F9E4C953C7730FD5374A146750D7152D1EBF9263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:33:03:dd:07:0a:df:09:bd:c0:77:36:2f:
                    f3:2d:f0:2f:5a:f3:f7:07:fa:18:28:79:6c:73:c6:
                    f3:8b:4a:52:4b:8f:9e:22:eb:52:1a:55:04:2b:5d:
                    d6:f9:be:2e:99:6d:12:17:b3:b9:bb:d2:af:91:cf:
                    96:01:25:c3:ef:9f:ad:74:87:50:22:57:1b:35:92:
                    ca:3b:cf:c0:6c:74:d6:b3:dd:f3:1c:59:22:a6:dc:
                    c8:e3:57:4f:35:24:d3:f9:47:9d:00:c9:18:5c:a9:
                    e8:32:c8:61:78:ce:bc:f4:d8:4a:d7:b7:10:7e:45:
                    4f:54:e4:fd:68:83:f8:ce:f2:ee:e8:91:3b:54:62:
                    4e:63:36:76:86:8b:66:a3:58:33:51:64:ab:83:dc:
                    cb:7b:84:fb:1a:64:bc:8a:b6:eb:d5:13:6e:fc:ef:
                    9f:f3:f0:14:66:f5:10:43:14:32:f1:68:62:f4:73:
                    92:f3:35:7e:a8:3d:d3:cb:9f:0e:7c:51:99:6a:4a:
                    8a:91:25:53:b5:e3:2e:11:b7:3f:cc:3c:11:05:58:
                    15:2d:0f:d6:af:e1:4a:d2:3a:7f:99:d2:9e:fe:03:
                    3c:4c:a7:1f:54:75:13:7b:87:36:89:0a:53:0b:5b:
                    67:da:2e:5a:ad:4d:96:90:b7:02:61:04:a6:a9:74:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E4:C9:53:C7:73:0F:D5:37:4A:14:67:50:D7:15:2D:1E:BF:92:63
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e33382e3233322e302f32312d3232203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:25:d2:4d:c6:5d:c3:fe:11:f2:de:ee:10:b8:95:bb:dc:
         0c:f5:0b:01:7d:fe:83:ef:13:c2:c8:d6:77:00:1e:52:9e:27:
         5b:91:27:57:6f:a3:b2:10:0d:20:72:eb:48:f9:8c:43:c6:bd:
         3b:68:c7:15:bc:b4:aa:8e:e1:07:36:15:95:8d:fd:b8:2d:70:
         1d:e4:4c:b5:d7:52:8b:63:84:eb:ab:bc:db:e5:c9:2b:ad:23:
         9b:1b:82:f7:7f:f8:2d:92:47:1a:32:78:28:5a:f5:7f:15:54:
         6f:15:2d:df:e5:26:18:2a:4e:89:2e:46:03:69:f7:07:9d:66:
         8c:ae:e6:c7:8e:9b:9c:c4:3f:2a:28:bf:d2:12:88:b5:a0:4b:
         85:22:56:c9:f9:26:f0:65:fe:d9:2f:9d:05:bc:98:a7:36:39:
         c3:8a:89:d0:93:8d:25:e0:9e:f9:ef:1b:e6:32:64:e9:6d:04:
         97:3d:40:df:14:8b:c5:e8:c0:dd:01:a9:f1:34:26:ed:79:f6:
         f5:d2:18:85:a5:ab:14:29:a1:b4:19:12:50:90:65:61:d2:b4:
         d9:ce:fa:f2:6c:bf:b8:ec:ba:3e:7b:32:3b:63:c6:0e:32:f2:
         3a:f1:bc:0e:55:9d:04:8c:25:dd:c5:0f:c5:a2:b7:fb:f5:6a:
         b6:6d:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:38:26 2026 by rpki-client