Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa
File:                     3137372e38362e3138362e302f32342d3234203d3e203532353735.roa (raw, json)
Hash identifier:          RKSEQ9qHZ4jLlGx252s5bc8lC/ibf6dv+2dj+hZLhwM=
Subject key identifier:   9C:F1:56:26:B8:80:2E:45:A6:49:58:EE:CA:71:E4:F3:C3:E1:6A:3C
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       4BC6EE257DA3E25882BEDA2C65CD224E520713B9
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa
Signing time:             Thu 23 Apr 2026 16:10:56 +0000
ROA not before:           Thu 23 Apr 2026 16:05:56 +0000
ROA not after:            Thu 22 Apr 2027 16:10:56 +0000
asID:                     52575
IP address blocks:        177.86.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c6:ee:25:7d:a3:e2:58:82:be:da:2c:65:cd:22:4e:52:07:13:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 23 16:05:56 2026 GMT
            Not After : Apr 22 16:10:56 2027 GMT
        Subject: CN=9CF15626B8802E45A64958EECA71E4F3C3E16A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:f1:89:fe:19:41:4f:5c:e5:ab:c3:d3:cb:
                    60:b6:09:03:45:1f:ec:24:41:d5:69:e0:90:37:8c:
                    76:4e:c3:ee:cd:39:f4:aa:c9:29:55:96:82:8d:cf:
                    ed:22:24:ad:90:95:e6:dc:89:cb:7f:62:3a:48:bb:
                    da:35:a4:27:4a:e1:7c:1b:12:f2:9f:a7:b4:80:5f:
                    58:e6:56:ae:ac:c0:05:64:82:1e:a1:02:46:bd:80:
                    07:15:74:52:d0:f2:1a:53:6d:cb:64:15:c2:16:68:
                    c9:e7:6f:01:f6:d1:98:78:4a:da:62:6b:b4:b7:8a:
                    3b:40:a0:58:a7:6c:c0:ed:6d:5c:61:f0:d1:a4:d9:
                    bb:50:1b:39:14:52:4d:34:c4:4d:c2:9a:05:8f:e2:
                    73:f9:f4:f9:8a:50:4c:36:fe:40:52:73:88:43:b0:
                    51:0f:b4:e5:48:c4:4d:dd:d6:cd:fd:e9:47:6c:a1:
                    89:e1:9e:b7:9c:c5:15:59:01:a7:3f:36:ff:0d:24:
                    15:bf:50:53:9e:f3:01:6d:9c:a0:4e:c9:4a:1c:84:
                    54:9f:6d:a0:f2:20:09:10:57:95:8a:95:2a:cb:b0:
                    d2:c8:a4:bd:fb:a3:8e:0f:09:8a:c1:02:34:f7:7b:
                    9b:43:44:8e:73:0b:22:46:32:9f:a5:19:a8:fa:e2:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F1:56:26:B8:80:2E:45:A6:49:58:EE:CA:71:E4:F3:C3:E1:6A:3C
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32342d3234203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:34:93:fa:08:63:bb:ce:59:f3:1d:12:17:61:c7:73:94:b0:
         61:03:4e:b4:1b:90:3f:b2:9b:ce:4c:c1:0d:a0:a7:ea:21:b0:
         2d:72:52:98:ef:ad:44:89:a8:15:6c:4f:bb:a6:70:d9:13:1f:
         5f:dc:35:d5:52:7e:71:9b:21:a1:22:67:8e:16:d3:2f:70:63:
         a9:d9:2f:0e:c5:96:33:91:cb:d8:40:01:92:9c:c5:97:11:32:
         f1:bc:0b:07:b5:df:0b:49:09:ab:a5:55:b9:2a:aa:e5:83:76:
         04:38:3b:38:78:cd:a2:84:17:c9:0f:5b:19:e3:6e:e4:a7:c1:
         b6:de:d2:bd:26:40:d8:5d:ba:a4:c7:7b:93:6f:d8:25:15:af:
         32:dd:99:a6:31:e3:a9:1b:d0:fd:37:55:67:3c:49:00:99:65:
         df:da:09:4a:c2:3d:d3:73:c4:fa:cd:df:11:c5:f8:05:1b:1b:
         3c:74:3b:f6:68:ed:6a:0e:58:2c:6c:36:5b:0d:9b:e5:3f:49:
         00:78:23:24:7a:1c:13:a3:73:82:95:0b:27:2e:3c:50:75:40:
         bb:ab:aa:a4:3b:78:7d:c7:8b:22:a7:73:f1:75:21:6a:47:09:
         c1:5a:d2:76:8f:c8:80:cf:27:98:f0:e1:eb:d8:a3:86:b7:af:
         50:c2:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:49:35 2026 by rpki-client