Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/3137372e3132382e32342e302f32312d3234203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32312d3234203d3e203532363331.roa (raw, json)
Hash identifier:          fgD0NMFvbqshFTHC7S3sRJ/LIbWLbd7maQUQFeOzZ7w=
Subject key identifier:   7B:BA:45:62:45:5D:6C:68:5E:35:9A:B8:ED:A7:6B:1B:7E:C6:7C:E9
Certificate issuer:       /CN=B918B6CD4D0436C084D841220DA710E9EAC36315
Certificate serial:       0CFD5C76452D8E3BA7F9B4ADEF4C6A5426DF739F
Authority key identifier: B9:18:B6:CD:4D:04:36:C0:84:D8:41:22:0D:A7:10:E9:EA:C3:63:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/3137372e3132382e32342e302f32312d3234203d3e203532363331.roa
Signing time:             Wed 07 Oct 2026 13:51:10 +0000
ROA not before:           Wed 07 Oct 2026 13:46:10 +0000
ROA not after:            Wed 06 Oct 2027 13:51:10 +0000
asID:                     52631
IP address blocks:        177.128.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.crl
                          rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:5c:76:45:2d:8e:3b:a7:f9:b4:ad:ef:4c:6a:54:26:df:73:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B918B6CD4D0436C084D841220DA710E9EAC36315
        Validity
            Not Before: Oct  7 13:46:10 2026 GMT
            Not After : Oct  6 13:51:10 2027 GMT
        Subject: CN=7BBA4562455D6C685E359AB8EDA76B1B7EC67CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:5b:bc:e3:91:c3:88:41:82:3f:dd:e5:77:
                    a3:e0:6f:c7:bd:c1:88:09:99:5c:ed:85:09:5e:8b:
                    26:3c:20:86:f6:05:80:b4:59:e5:20:18:77:02:b2:
                    c9:ba:8c:3f:b1:ab:11:80:91:a9:c7:93:51:9f:f4:
                    85:a4:18:5d:f4:26:f9:9c:d0:5e:42:4a:61:f9:c3:
                    a5:06:94:48:62:41:28:6d:84:9f:ea:10:87:6b:48:
                    0d:ce:e2:2a:47:6e:4a:cd:6b:69:13:96:b4:4b:b5:
                    16:e4:5d:db:c5:22:3d:b9:2c:52:b8:41:00:5b:cc:
                    f9:46:98:a1:ed:29:db:51:67:50:39:79:29:6c:a4:
                    2f:c1:8d:51:43:be:b7:b1:1a:d7:d5:73:88:5d:d0:
                    a1:e8:87:b6:1e:d9:05:e5:4c:cf:39:27:9b:bc:4a:
                    07:c5:4f:84:dc:bb:ee:b6:c7:9c:c8:c8:d5:ba:1f:
                    79:b3:96:f9:5d:d4:ad:ca:1a:0c:84:41:82:a1:d3:
                    0d:8d:bc:e7:3d:de:c7:cb:29:06:13:c3:eb:22:45:
                    20:6f:06:48:bc:58:56:af:1c:31:86:fe:84:7e:eb:
                    47:e3:70:73:02:14:f2:c8:2e:1e:4e:bf:4a:02:08:
                    b5:05:04:54:97:ef:ce:8e:12:0d:ea:53:1e:95:bd:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:45:62:45:5D:6C:68:5E:35:9A:B8:ED:A7:6B:1B:7E:C6:7C:E9
            X509v3 Authority Key Identifier:
                keyid:B9:18:B6:CD:4D:04:36:C0:84:D8:41:22:0D:A7:10:E9:EA:C3:63:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/3137372e3132382e32342e302f32312d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:59:82:41:99:28:91:a4:2d:80:9e:bb:d3:7b:a4:98:4e:
         61:5f:9f:39:a8:56:15:da:42:be:01:d6:70:9d:f2:fc:04:5e:
         78:d3:b5:af:74:4f:b9:75:d9:fe:98:39:04:4c:79:90:aa:11:
         6f:26:80:50:bc:d6:24:02:cc:fd:51:96:24:c6:4f:d2:23:f7:
         48:6d:1b:a3:ca:57:e6:5e:09:f8:15:d8:4f:77:5d:a4:0a:9f:
         c4:02:51:81:ee:81:0a:f0:5e:0f:3c:84:54:5d:99:23:81:bc:
         5e:49:e2:12:ac:d8:3f:b7:92:6e:77:a9:d2:58:d3:64:fc:eb:
         ec:18:25:50:ba:44:de:b6:25:9c:43:b7:fd:db:a1:82:7b:d7:
         5a:18:f7:8a:02:09:d2:d8:9a:2c:c4:2d:ef:39:1a:10:5b:74:
         08:3b:47:c0:6e:aa:80:35:37:c9:2a:82:ce:2a:c2:4f:c8:53:
         a2:aa:bd:68:ce:f9:e9:da:87:b3:c8:bd:68:63:b4:9a:39:43:
         5d:ce:82:eb:a1:23:c6:3f:af:b7:77:a5:01:57:7f:c3:67:98:
         21:a6:c7:82:e2:b4:14:a5:48:ed:49:8a:6f:74:c8:e9:37:03:
         33:a5:cb:1a:fd:b5:93:58:fb:5d:e9:b6:6a:a0:b4:f9:5f:a4:
         88:aa:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:51:55 2026 by rpki-client