Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38352e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          IUHb7ffCHkBHX73GJYJsxnUMVCwZn08sMkMPpc0DDE8=
Subject key identifier:   13:E7:5A:82:F4:04:F4:8A:3D:13:15:A9:83:9B:41:E4:1B:32:D4:B2
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       12EE15B97AA2D600AB40A3A7DBD6D179BD5BDF4F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:42 +0000
ROA not before:           Thu 08 Oct 2026 13:34:42 +0000
ROA not after:            Thu 07 Oct 2027 13:39:42 +0000
asID:                     53047
IP address blocks:        177.101.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:15:b9:7a:a2:d6:00:ab:40:a3:a7:db:d6:d1:79:bd:5b:df:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:42 2026 GMT
            Not After : Oct  7 13:39:42 2027 GMT
        Subject: CN=13E75A82F404F48A3D1315A9839B41E41B32D4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:d9:41:03:2a:c4:6e:b1:e5:2c:77:5c:b0:
                    53:5b:a4:bd:35:e1:1e:9d:34:d7:4e:2a:e5:68:54:
                    0a:51:28:49:b3:50:05:3a:6b:bb:0c:92:d8:90:72:
                    e3:32:ba:21:c2:5f:51:a9:88:0e:7d:22:68:49:7c:
                    83:20:2b:dc:d6:ee:33:d1:72:53:a9:36:da:81:19:
                    8c:c9:77:d3:8e:26:fa:b2:43:02:1c:a2:00:a3:44:
                    a1:94:55:57:59:f2:3e:57:19:9e:90:ac:17:60:2e:
                    ac:99:79:5c:5d:2b:0b:f5:ae:76:98:92:e1:45:7c:
                    71:c7:c2:3b:6e:2e:78:a1:43:c8:f5:75:79:7b:37:
                    4e:0e:7f:37:d0:7d:1b:d0:69:39:7f:03:e9:6f:79:
                    d9:51:e5:6a:22:7f:67:69:93:d1:42:44:9f:f6:94:
                    26:f4:a3:80:94:68:32:50:8e:06:21:c7:62:28:52:
                    1e:2e:8d:ec:b4:78:70:ba:b4:65:d4:ca:49:33:ff:
                    d7:55:95:65:47:19:8d:30:ae:98:8b:42:5a:b9:c1:
                    57:ff:f4:3e:d6:00:3c:58:a8:72:e4:9a:a1:6a:bb:
                    f1:ec:21:8f:95:1d:0c:49:ae:9c:66:93:d7:98:cb:
                    19:51:21:c4:38:a5:8c:50:2f:a0:b1:f8:3b:c8:02:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:5A:82:F4:04:F4:8A:3D:13:15:A9:83:9B:41:E4:1B:32:D4:B2
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:b7:46:b8:08:9c:e5:99:d8:7a:22:4e:ec:58:80:ad:4f:
         99:a0:59:55:0d:1e:66:ac:22:da:4d:4b:2f:ae:6b:96:05:91:
         37:66:7c:f1:d7:9a:3f:23:30:e0:53:2a:8e:42:8f:93:17:99:
         ce:6c:18:2e:12:1a:f2:1d:a3:ad:ed:a9:71:0b:f2:e4:a2:02:
         fe:18:c9:65:b9:75:48:7f:40:e7:c0:98:9b:98:42:ae:b8:91:
         b3:8c:17:8e:d5:12:e3:ef:9a:e3:70:99:35:11:51:3d:5b:7e:
         3c:7d:72:b8:09:8b:27:4f:fd:0e:87:a7:b2:3d:10:60:eb:a6:
         6a:a9:d6:6d:44:aa:2f:a5:5f:17:c9:a0:a7:d0:f6:f7:c7:b2:
         ca:55:8c:56:63:f5:be:a3:63:a3:96:52:85:40:7e:e6:f9:92:
         e5:68:db:df:15:4a:07:f6:e2:a3:8d:38:7d:e3:55:01:10:2e:
         91:f9:da:74:4d:59:e3:3a:69:0f:fb:ed:0b:79:cc:a1:a3:5e:
         3d:52:a0:c2:cb:cf:da:5b:d6:5c:00:56:86:e6:aa:e3:c8:5f:
         66:1b:6f:42:36:9b:05:47:e5:64:0f:f1:4f:a1:7c:67:b2:94:
         8b:c6:6f:c0:30:4f:7a:6d:4d:5b:f9:27:0e:4f:43:39:92:57:
         70:c6:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:41:08 2026 by rpki-client