Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          TrjP1LS3PJAL8S5L2LUwcFDrWERJSzqbGas/dC5L1gk=
Subject key identifier:   8B:83:38:52:59:6C:77:62:77:E1:82:74:ED:47:D3:71:9F:A7:B2:1C
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       3051865D7A12404A5E4E312C4EEE08C0635F3F93
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:43 +0000
ROA not before:           Thu 08 Oct 2026 13:34:43 +0000
ROA not after:            Thu 07 Oct 2027 13:39:43 +0000
asID:                     53047
IP address blocks:        177.101.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 10:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:51:86:5d:7a:12:40:4a:5e:4e:31:2c:4e:ee:08:c0:63:5f:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:43 2026 GMT
            Not After : Oct  7 13:39:43 2027 GMT
        Subject: CN=8B833852596C776277E18274ED47D3719FA7B21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:d0:50:1d:68:70:33:3b:0e:f7:da:7e:78:
                    21:45:47:31:85:b3:2b:01:d8:1d:88:34:3d:cf:cf:
                    b2:b2:fe:50:92:60:52:ee:2a:ec:b2:84:e4:5e:88:
                    09:34:bc:ee:c8:24:7c:33:67:ad:ca:1a:e8:d7:da:
                    08:65:86:fd:07:66:22:44:c2:8a:ba:65:30:0c:51:
                    40:f7:d9:e2:eb:ae:f1:cf:dc:d5:e5:f2:72:34:a8:
                    13:1c:b1:3b:15:1a:a8:80:a1:d1:fc:66:98:22:f3:
                    af:48:1b:12:64:76:8a:70:7f:c7:5e:09:4d:06:22:
                    78:28:9d:d1:e7:04:77:b1:79:8b:e7:fb:c4:af:92:
                    77:4c:c1:27:13:bf:c5:5a:63:33:fe:c8:ff:d5:cc:
                    de:6a:42:ad:fd:ad:68:1a:2d:83:e8:de:57:2a:21:
                    3c:14:95:bd:33:6d:f7:3a:15:e3:be:8a:3d:47:9c:
                    25:a3:23:87:a8:54:22:0b:07:9b:62:47:0d:b1:88:
                    be:84:56:69:73:99:21:b7:0d:34:a7:e9:f2:d9:ec:
                    ff:23:f3:79:b8:9a:8c:61:0f:0c:57:6b:07:51:67:
                    45:36:07:52:c6:67:67:8f:c2:94:6f:bd:d8:21:f7:
                    60:30:19:ef:1b:13:e4:0b:87:eb:57:ea:ec:7c:f0:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:38:52:59:6C:77:62:77:E1:82:74:ED:47:D3:71:9F:A7:B2:1C
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:37:fe:63:6b:b2:ec:d8:b7:8b:05:db:9b:ac:8d:7f:84:6f:
         df:b3:32:49:63:28:be:ce:64:91:0c:25:55:da:5a:c2:65:7e:
         d4:95:09:0e:46:d1:95:d1:44:a8:3d:6d:ee:be:fe:54:29:67:
         9c:35:05:0f:c0:85:ad:33:61:6c:1a:ef:8b:bb:a7:95:3b:ab:
         c4:63:68:8b:35:80:8a:cd:7d:54:de:bc:c3:a1:1f:02:09:82:
         7e:56:29:15:32:43:a6:da:ee:d0:cc:10:9f:e2:37:b4:54:f9:
         64:f2:98:0a:44:42:e8:e4:64:df:43:75:ea:14:ae:39:87:09:
         7a:0f:f6:db:ab:a4:9e:47:95:35:aa:54:d8:16:17:0a:54:bb:
         87:77:a2:e2:cd:e7:c7:08:fd:89:90:d4:82:64:73:df:df:f7:
         a6:ff:cb:bb:02:34:5a:98:91:87:ba:7a:cf:83:7b:69:a8:ec:
         0e:f1:35:42:2a:ee:72:3d:8f:ea:2a:80:18:8c:83:87:8f:91:
         8d:cf:56:2d:d8:a3:b7:23:90:c0:ee:a6:ff:ea:e9:9b:ad:06:
         9e:7c:16:b0:a4:21:38:03:89:7c:b2:0f:69:a4:57:a0:5f:92:
         4a:72:af:f1:ce:c1:3c:c4:c9:5e:5e:68:88:0d:b2:a0:a6:04:
         4c:d2:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:15:47 2026 by rpki-client