Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa
File:                     3137372e38362e3138362e302f32332d3233203d3e203532353735.roa (raw, json)
Hash identifier:          zm1QreWJ00F6Z5Nn5u4nzdXBwm1j6LuVhTHuf9Dhm2w=
Subject key identifier:   F7:2B:19:D9:CB:CB:13:46:F7:A7:E1:50:7A:36:F9:F5:98:F4:0D:D4
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       3995093E84A60C24CDB768AFCD065D4273CA6C
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa
Signing time:             Thu 23 Apr 2026 16:10:55 +0000
ROA not before:           Thu 23 Apr 2026 16:05:55 +0000
ROA not after:            Thu 22 Apr 2027 16:10:55 +0000
asID:                     52575
IP address blocks:        177.86.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:95:09:3e:84:a6:0c:24:cd:b7:68:af:cd:06:5d:42:73:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 23 16:05:55 2026 GMT
            Not After : Apr 22 16:10:55 2027 GMT
        Subject: CN=F72B19D9CBCB1346F7A7E1507A36F9F598F40DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:b5:0a:0a:97:66:42:27:69:a8:62:13:62:
                    13:2e:d5:c6:fe:c5:9d:83:55:f5:43:7d:19:ee:82:
                    66:ea:0c:49:43:76:48:00:82:b0:78:4b:e2:43:da:
                    0d:93:e2:27:be:3a:5f:01:90:a2:bd:ed:f7:c7:31:
                    41:a1:58:b1:be:19:22:b6:dc:59:13:94:12:f3:08:
                    83:ee:5b:e0:14:24:06:58:d3:09:6e:da:2e:b8:1a:
                    3a:dd:8a:0c:d3:08:61:9e:76:e2:d4:d0:0b:6e:41:
                    0a:8c:20:3d:69:a3:18:2d:ed:68:23:60:1a:1a:68:
                    34:8d:d5:00:af:33:9b:d5:eb:4b:af:13:e5:bf:05:
                    85:53:ca:23:03:23:36:f6:d7:ad:a7:13:12:4d:5c:
                    07:93:d2:3a:57:b4:b8:b2:2a:5f:d9:d4:6b:39:59:
                    cb:32:f2:41:34:70:f5:db:a5:d2:b2:25:f3:74:ec:
                    bd:da:7f:82:4d:17:d4:20:21:1d:6a:a0:e6:ab:be:
                    24:dc:d9:b2:cf:bc:e6:81:5b:a5:b3:98:fd:14:46:
                    0e:fe:78:46:d2:96:53:7b:09:86:b5:ff:3b:72:53:
                    1b:5e:6f:f2:cd:8e:cf:04:5e:d6:7d:c2:b1:32:5f:
                    2b:ec:e2:14:93:e6:9a:65:2c:85:d7:86:e8:aa:50:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:19:D9:CB:CB:13:46:F7:A7:E1:50:7A:36:F9:F5:98:F4:0D:D4
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:06:8b:7a:7f:be:59:99:0a:52:f2:70:2b:b4:13:7a:ed:0e:
         9d:b7:a8:cb:e7:a4:98:1e:b8:53:f7:37:b5:40:42:e3:06:d0:
         55:f5:09:c1:3f:34:35:42:d0:df:a1:d6:8e:82:56:24:7e:a0:
         2a:85:b9:8d:a4:76:83:b3:2d:9b:b1:92:fc:90:99:09:b0:7b:
         b0:e8:6e:68:35:ba:42:5f:b1:f9:aa:e6:5c:cc:f8:b0:f8:fb:
         36:7c:77:cb:4d:77:de:7f:fc:66:db:8c:fd:85:c6:57:b8:e0:
         a6:6d:0f:e0:eb:0d:8f:d6:f6:f9:c6:1c:dc:16:6c:a2:9f:d8:
         30:ab:93:a3:aa:7f:85:8b:84:9d:ce:8d:e2:04:e0:a9:d8:ab:
         f8:a1:1a:7b:30:e2:77:89:61:e4:d9:61:7d:bd:33:5b:c6:33:
         ae:8e:bd:e2:12:bd:76:be:5f:46:ae:15:86:08:4b:f1:02:77:
         80:9d:6c:94:2a:cf:a3:a2:0c:fe:82:3c:28:d8:17:8e:0d:7b:
         89:ba:fd:1c:27:d6:db:c7:62:78:4c:62:a1:a5:a6:ed:b1:2f:
         13:23:27:cd:ee:1b:a4:6b:f1:b9:c1:30:6d:44:60:a0:16:b4:
         43:82:2a:77:3b:ec:21:01:30:a5:dd:9e:c0:b9:ab:58:7b:16:
         66:55:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:49:37 2026 by rpki-client