Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          C3TOuKAbZfxmRO7B2Dj4DAwrDBMpH46pBAhhgd3aKmM=
Subject key identifier:   A8:E1:CA:D2:22:70:D2:1D:86:40:D7:88:78:AB:5A:7E:9B:C1:DF:0B
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       1FC24E1A50B90B1AF3C4EC0853B0E75DCBBFD4BD
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:44 +0000
ROA not before:           Thu 08 Oct 2026 13:34:44 +0000
ROA not after:            Thu 07 Oct 2027 13:39:44 +0000
asID:                     53047
IP address blocks:        177.101.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c2:4e:1a:50:b9:0b:1a:f3:c4:ec:08:53:b0:e7:5d:cb:bf:d4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:44 2026 GMT
            Not After : Oct  7 13:39:44 2027 GMT
        Subject: CN=A8E1CAD22270D21D8640D78878AB5A7E9BC1DF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:ae:bf:9f:65:1d:49:f8:ba:d5:93:2f:6c:
                    54:77:3d:f2:72:6d:ef:41:8d:e2:df:6b:bb:3e:4f:
                    ce:7c:68:ad:45:13:4b:0c:55:53:76:56:7b:fa:2a:
                    fb:38:07:a2:c8:65:71:fb:87:b8:d6:87:16:17:50:
                    ac:f3:5a:69:54:ab:ce:bc:6a:35:2e:85:72:4c:e1:
                    04:05:f6:96:cd:6f:83:ee:bd:fa:d2:bb:dd:9a:04:
                    49:fe:26:47:22:d8:5f:fa:e4:0e:df:11:f1:16:a1:
                    99:8b:25:f6:22:c7:ab:da:5f:11:6a:5c:86:39:00:
                    3e:01:b9:07:e4:3a:d5:bc:d0:96:77:ce:1f:fc:0d:
                    03:f5:05:60:5b:93:39:44:60:f1:07:97:8c:24:71:
                    04:32:2d:72:49:43:a8:07:20:31:4f:31:1d:f2:bf:
                    e4:36:d1:4f:98:2f:0b:a9:2f:94:c8:4c:98:4c:01:
                    db:51:fa:3c:94:8c:69:46:b6:56:0f:8b:b0:3b:7c:
                    d1:c9:4b:17:79:12:e4:cb:81:c0:a0:31:87:4d:8d:
                    95:c0:22:e7:34:4a:68:fd:2f:7e:37:78:a9:83:56:
                    5e:9e:bd:db:41:ba:5d:15:18:7f:72:d2:b9:86:a1:
                    d6:69:18:6a:13:87:48:4e:a5:59:01:70:f7:fd:19:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:CA:D2:22:70:D2:1D:86:40:D7:88:78:AB:5A:7E:9B:C1:DF:0B
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:76:4e:7c:53:58:41:80:5a:fe:3f:96:86:07:b6:b7:1a:8f:
         6c:f5:b7:b0:3f:0d:e3:38:b0:9f:2e:50:5f:ae:f1:98:20:88:
         77:a3:03:5a:e0:42:db:47:0f:a7:39:5a:fe:ed:93:56:06:b3:
         6d:39:33:f2:0d:6c:91:13:14:30:e3:37:c5:96:39:55:50:04:
         66:5a:50:e7:00:b9:f6:1f:95:a7:09:fe:4a:2c:b7:a1:6f:b6:
         31:1e:55:c3:71:b6:5b:d4:5f:19:12:6a:46:5c:a1:1d:9b:a8:
         5f:50:a6:01:f9:12:82:82:d9:72:6f:84:52:e1:10:92:be:fe:
         0a:fe:a1:40:02:7a:73:5c:c7:02:b6:37:09:22:23:3f:a6:34:
         5d:f5:7c:a2:58:82:41:7b:1d:7a:40:72:71:98:77:1a:7f:95:
         a2:d2:0b:ed:e3:cd:43:c1:10:a9:1e:1a:81:3a:cc:55:3e:33:
         a7:b0:07:01:ef:e4:71:ff:47:4a:93:96:ac:d1:fb:ab:1b:35:
         c5:30:93:eb:22:11:1e:3f:79:55:13:c4:08:b6:4f:7a:8b:d9:
         2f:ae:23:47:4c:7f:fb:5c:f0:96:15:28:d5:40:1a:7e:7c:96:
         99:2f:de:9b:8d:2c:a1:8d:71:1e:3b:72:73:03:ad:ab:c9:57:
         ee:2a:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:42:52 2026 by rpki-client