Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          Kf5P8fIHP4fJHEgGArgqQppNGmOCX/MVd7DXr4MevSM=
Subject key identifier:   FA:90:91:09:E4:00:DF:28:AB:18:7F:F2:94:22:EE:91:D2:19:21:50
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       136979873DBBC11C1E88BC95A2EEA13D9610B937
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:42 +0000
ROA not before:           Thu 08 Oct 2026 13:34:42 +0000
ROA not after:            Thu 07 Oct 2027 13:39:42 +0000
asID:                     53047
IP address blocks:        177.101.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:69:79:87:3d:bb:c1:1c:1e:88:bc:95:a2:ee:a1:3d:96:10:b9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:42 2026 GMT
            Not After : Oct  7 13:39:42 2027 GMT
        Subject: CN=FA909109E400DF28AB187FF29422EE91D2192150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:91:9a:aa:98:61:d4:fb:70:78:91:2d:cb:
                    39:28:27:e8:4b:37:02:79:bf:59:2c:ba:30:06:12:
                    0b:5e:8a:47:3c:3d:05:1f:0c:a9:d4:a3:3a:36:00:
                    b7:e8:d1:fc:06:00:86:3a:c6:69:bb:77:6f:6a:d1:
                    29:0e:76:2d:9b:f0:77:f1:5e:83:1f:f2:00:be:55:
                    96:e2:03:10:6e:0f:b2:6a:59:f2:77:bf:80:84:5f:
                    7f:33:cc:89:a5:0c:43:3c:f8:e1:ac:65:ae:2b:58:
                    e3:25:8c:38:d0:e6:2f:0e:59:db:ce:ee:53:44:d6:
                    8e:13:2d:14:e9:0b:67:56:be:79:e5:25:c5:a0:42:
                    36:55:c6:3f:2b:f6:c5:00:68:cc:e5:35:e2:3d:bc:
                    7c:f9:f1:7c:d5:47:4a:26:8b:0f:0e:dc:47:e6:96:
                    ef:70:05:d1:70:bf:29:1f:f9:f3:c7:38:d2:a6:ce:
                    13:a5:aa:cb:3f:18:86:49:1b:88:db:98:dc:f5:ce:
                    f7:03:99:a8:24:6b:1e:b8:42:b3:30:39:fa:f6:af:
                    a9:d0:65:ed:64:32:7d:b1:70:22:c5:f0:f1:22:92:
                    50:98:a3:65:0b:8e:d9:7d:9d:ba:86:32:8a:24:c5:
                    44:74:f6:12:89:00:37:0b:c1:d0:a0:57:48:46:b9:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:91:09:E4:00:DF:28:AB:18:7F:F2:94:22:EE:91:D2:19:21:50
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:82:bf:5b:04:d6:b7:fe:b9:f1:c5:a2:be:2a:ee:46:e3:
         8e:34:2c:03:c5:99:52:08:5a:05:10:51:43:0e:64:38:61:ef:
         a3:c2:56:47:74:c7:f3:70:71:49:01:ea:95:78:db:5f:cc:f9:
         ea:d7:e8:c1:d8:10:49:94:32:da:48:50:5c:9c:23:d3:5b:43:
         21:90:71:56:96:29:4e:e4:d2:e9:29:ec:1c:de:3e:d8:1e:8b:
         36:89:6d:19:f5:bd:aa:89:27:c1:92:34:be:0f:64:67:86:88:
         a7:71:f8:bb:d1:10:46:e0:1c:08:91:3a:93:3c:51:3f:ee:65:
         e6:0e:68:6c:ea:1c:ad:e2:6b:8a:1d:14:72:b1:48:53:5e:3d:
         9a:59:69:e9:63:d3:66:77:1a:2e:5b:36:94:a4:0b:74:3b:81:
         e6:81:4f:55:51:7b:ff:3d:6a:bd:f8:ba:08:55:6d:3d:98:fc:
         9b:55:6d:ba:c5:78:a1:65:60:91:ba:cf:40:b1:5b:cc:31:88:
         bf:5d:93:f0:dd:17:0e:3c:0d:66:c2:6f:f5:be:26:a0:76:72:
         62:e1:f6:35:f8:ef:cb:27:ac:3c:cb:05:29:4d:bc:18:ef:2b:
         75:e7:cd:ef:1e:19:bd:fb:15:dd:cb:60:61:6f:f9:82:91:f3:
         20:37:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:09:06 2026 by rpki-client