Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          P0E9sfGdye7l/YbpdqbynpgijaGjLuUgHQE0MhGOVIU=
Subject key identifier:   2F:7B:20:FB:7A:49:96:38:AF:13:36:49:64:0B:59:88:5C:1E:14:D0
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       45DCC52530EA9F068AD179F907F6140D1B72E004
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:45 +0000
ROA not before:           Thu 08 Oct 2026 13:34:45 +0000
ROA not after:            Thu 07 Oct 2027 13:39:45 +0000
asID:                     53047
IP address blocks:        177.101.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dc:c5:25:30:ea:9f:06:8a:d1:79:f9:07:f6:14:0d:1b:72:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:45 2026 GMT
            Not After : Oct  7 13:39:45 2027 GMT
        Subject: CN=2F7B20FB7A499638AF133649640B59885C1E14D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:cd:8d:61:2f:b9:76:68:57:9a:6a:7f:bf:
                    b4:1b:9d:ec:48:c3:c4:d7:0b:11:af:94:d5:71:c1:
                    12:5e:c1:43:aa:8a:91:3c:44:68:38:e7:0b:4f:02:
                    30:16:00:b9:b8:76:7c:c6:d5:93:01:33:f7:05:e1:
                    2e:7b:2b:76:af:bb:40:22:01:f5:0f:93:fe:26:7e:
                    53:69:a4:09:24:0f:df:ad:10:47:62:e4:ae:64:91:
                    0f:11:52:ab:8c:61:92:28:3f:1e:14:47:a4:a5:17:
                    d1:3e:35:89:5f:a4:f2:6f:ee:8f:5e:b1:7c:7c:cc:
                    8c:b0:b3:22:fa:d0:1d:35:6b:e2:3a:09:4f:0d:03:
                    40:87:c2:e4:56:bb:c3:e3:d2:26:2a:53:3a:67:f0:
                    30:35:56:fc:31:1e:a6:b3:59:10:ba:ab:d2:35:82:
                    66:0c:93:6f:67:af:eb:a0:13:9f:b6:cd:5d:29:92:
                    e1:b5:d0:5c:66:f1:72:0b:2f:dc:f1:bc:86:e5:5d:
                    36:4a:63:a3:2a:84:64:ad:97:e1:90:66:7e:dc:7d:
                    80:16:ad:5c:2f:12:c3:81:d0:25:64:f8:6b:7d:20:
                    67:7d:b1:20:6d:81:e8:a9:bf:dc:2d:3c:8b:13:d7:
                    72:3e:57:3b:bf:f0:e0:90:06:d3:e3:2a:8f:81:42:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7B:20:FB:7A:49:96:38:AF:13:36:49:64:0B:59:88:5C:1E:14:D0
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:5b:c8:35:a8:63:53:4c:00:16:25:5a:a8:38:f2:b1:6f:a8:
         23:fa:ce:a3:86:c5:cc:cf:fc:c8:6d:c2:87:e3:e5:65:51:40:
         7a:1a:8b:f1:be:bd:9a:4f:bd:f7:44:54:2b:53:ef:24:7f:62:
         9a:b4:6b:83:58:cb:bd:b6:41:55:ac:85:72:f5:1d:bd:b8:d3:
         04:0e:08:db:50:9e:6d:17:f8:7f:55:5e:7b:9f:c5:47:90:f3:
         05:fe:dc:2f:78:20:22:a3:db:06:98:d7:fe:1f:f3:de:51:14:
         ca:b6:63:e3:43:0f:93:2a:86:83:8a:ee:c4:5f:db:19:3e:ce:
         eb:50:1d:1f:e6:33:4e:fd:6e:32:b8:cf:a0:3b:6f:71:55:a8:
         d2:de:dd:31:9a:7f:bf:84:81:01:f3:03:8c:03:4c:c2:0f:9d:
         b8:3e:52:e9:41:23:2c:3a:2e:5f:98:e1:f5:09:87:34:4a:3f:
         ef:77:ab:52:1f:2b:46:60:df:5d:be:e3:47:af:92:7b:b0:74:
         18:f1:e9:ba:60:3e:84:bc:b7:2b:16:70:23:69:eb:90:c6:db:
         b0:f7:4a:af:cc:0d:fe:6f:66:47:cd:37:44:fd:64:b6:4a:ac:
         2c:4b:bf:da:2f:c9:f9:d1:4b:f6:76:ed:c5:1b:8b:cf:77:8d:
         27:d5:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:17:38 2026 by rpki-client