Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa
File:                     3137372e38362e3139302e302f32332d3233203d3e203532353735.roa (raw, json)
Hash identifier:          dBpTd9zbyQ99fW9Os4r6ymPar2puZE+YfS0R73iPaNo=
Subject key identifier:   E7:1D:D6:34:8C:26:8D:C3:A0:3D:A2:63:76:B8:76:F3:7A:FD:61:32
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       3A0A01E9F054A2E7FEE8A7DD0A994D6BCDBC5498
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa
Signing time:             Thu 23 Apr 2026 16:10:55 +0000
ROA not before:           Thu 23 Apr 2026 16:05:55 +0000
ROA not after:            Thu 22 Apr 2027 16:10:55 +0000
asID:                     52575
IP address blocks:        177.86.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0a:01:e9:f0:54:a2:e7:fe:e8:a7:dd:0a:99:4d:6b:cd:bc:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 23 16:05:55 2026 GMT
            Not After : Apr 22 16:10:55 2027 GMT
        Subject: CN=E71DD6348C268DC3A03DA26376B876F37AFD6132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:b4:e3:a3:3b:f8:25:9b:de:00:d6:2a:17:
                    1e:17:b3:c1:3f:40:e6:ce:ad:9d:64:73:36:5f:10:
                    80:f6:66:60:93:01:72:be:34:99:a8:b5:d0:ab:13:
                    34:df:83:75:a4:33:c2:91:5f:78:ca:de:79:b9:3e:
                    83:d9:bd:6f:1a:dd:96:db:13:c3:1b:8a:92:1d:f3:
                    3a:ba:5d:fc:a2:7c:ed:cc:c9:8a:3f:f2:88:33:3c:
                    55:1f:44:f0:0c:fc:de:da:a0:29:23:65:d2:ea:c3:
                    e3:c3:96:cf:bd:7a:78:22:4d:a1:fa:30:f8:d4:2e:
                    27:2d:97:fb:5b:4e:fa:a6:d0:ea:b3:db:7d:47:72:
                    43:b0:2c:21:45:82:0b:9a:a0:be:da:5e:e2:42:81:
                    e8:9d:9f:74:43:40:01:5b:ff:53:2e:ac:c3:a3:46:
                    d9:13:c7:76:0a:62:cd:b4:76:fe:b3:25:f4:68:68:
                    d7:59:f2:a9:61:6c:e6:d8:fd:d1:e9:d3:7d:68:2d:
                    e4:e4:7a:98:7f:00:30:10:de:07:f4:9d:c8:a0:9e:
                    9c:a9:7a:81:db:55:76:98:7d:cc:85:73:08:ca:d2:
                    1f:5f:da:46:08:c1:1e:5d:b4:6b:6b:13:2c:05:7f:
                    16:1d:65:eb:0d:58:25:1d:0e:cd:37:a5:8b:74:db:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:D6:34:8C:26:8D:C3:A0:3D:A2:63:76:B8:76:F3:7A:FD:61:32
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3139302e302f32332d3233203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:c3:a1:21:b1:66:5c:2d:ee:0f:c8:6a:88:4c:95:e0:bf:
         32:65:b8:f2:dc:ad:9c:63:20:bf:33:a2:4e:2a:ce:68:35:62:
         7c:7b:ec:96:e3:ca:f7:87:82:38:c0:ee:97:19:5b:8a:2e:15:
         c1:03:24:c8:dd:96:33:62:f7:c9:94:18:f3:38:7a:df:04:f7:
         89:6d:82:10:a0:f2:ff:55:5c:a4:be:6d:6e:fa:16:ba:56:07:
         da:cd:43:e1:66:0a:25:d4:4d:3d:c5:cc:6c:b0:e8:51:e6:b8:
         f0:94:b3:7d:f9:7d:c4:79:41:e8:0a:4e:9d:ad:26:5d:7d:13:
         9c:64:01:67:0c:5e:b9:2a:d0:cd:84:30:bf:f5:6a:e0:b9:35:
         7d:59:f0:bf:94:58:23:6d:6a:62:0d:ee:6b:5b:d8:23:ef:93:
         35:47:37:3e:04:2e:b7:b6:1f:28:9f:ea:8b:f0:d7:93:cd:61:
         e9:0b:34:24:89:50:f7:65:72:53:5c:bb:98:82:f7:83:a5:d2:
         43:66:a2:cd:0f:91:a8:45:52:d8:64:75:e8:fd:80:6a:f7:8e:
         25:3f:d3:24:c4:4a:af:5d:d4:2a:fb:73:9c:ef:26:de:94:73:
         13:15:f1:f7:7f:48:f8:e9:2e:67:04:27:fd:0c:1c:b7:f7:a9:
         04:49:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:49:36 2026 by rpki-client