Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
File:                     3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier:          OjR8Fjdj4CB1u12CYILF2Z1v0vcRWPrMb7ycq482jYA=
Subject key identifier:   CC:B2:9A:2D:E3:6C:C1:9E:34:26:6B:8F:3B:C4:B2:00:45:2D:A6:AD
Certificate issuer:       /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial:       3BE092ECB7EBC69FB31E4A262A3383AC135DB89C
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
Signing time:             Mon 26 Oct 2026 13:33:26 +0000
ROA not before:           Mon 26 Oct 2026 13:28:26 +0000
ROA not after:            Mon 25 Oct 2027 13:33:26 +0000
asID:                     28306
IP address blocks:        177.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 11:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e0:92:ec:b7:eb:c6:9f:b3:1e:4a:26:2a:33:83:ac:13:5d:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Validity
            Not Before: Oct 26 13:28:26 2026 GMT
            Not After : Oct 25 13:33:26 2027 GMT
        Subject: CN=CCB29A2DE36CC19E34266B8F3BC4B200452DA6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:3d:d9:b8:f0:7b:6e:29:e4:7c:f1:a2:c7:
                    8c:76:4f:b5:fa:fc:44:94:eb:d2:28:2c:bd:6c:01:
                    87:40:94:f9:a7:d0:76:b2:76:79:bf:64:cf:be:f7:
                    6a:53:81:ac:a7:6d:9f:e5:33:1c:2b:cb:2f:35:ea:
                    02:eb:86:63:68:21:5c:7a:14:a0:0f:21:ca:bd:88:
                    28:a9:d7:ca:60:c1:8e:c8:62:f0:d2:48:97:7b:ae:
                    53:3d:f2:8c:07:71:6a:07:1e:0c:85:6b:1e:99:25:
                    00:23:e4:fa:9b:61:6b:d9:b3:e0:62:75:4a:3f:5e:
                    d3:49:79:f8:0e:b9:bb:e3:51:58:ab:ad:5f:9e:8a:
                    1d:50:ff:f9:fb:03:01:42:bb:2b:99:af:c7:32:8f:
                    80:a3:cb:72:26:86:f4:bf:ef:c6:61:0c:bc:0f:32:
                    a4:e7:81:1e:61:0f:cb:7d:5b:09:c5:4a:d9:02:c2:
                    95:14:d9:ab:09:a0:8e:68:ff:bf:f8:f0:e7:37:62:
                    d9:6a:7a:00:69:90:09:cc:e8:e1:0d:7f:a6:c0:f4:
                    3b:0a:46:9c:a9:e3:38:fe:f3:b5:3d:d7:fb:b2:5c:
                    4c:bf:5f:c9:1d:73:6b:c6:01:03:d7:1e:31:01:98:
                    3a:4a:57:0d:56:d3:a0:e8:42:a1:a4:b2:6a:f5:2e:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B2:9A:2D:E3:6C:C1:9E:34:26:6B:8F:3B:C4:B2:00:45:2D:A6:AD
            X509v3 Authority Key Identifier:
                keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:4f:ca:7a:25:3f:94:67:6b:50:07:fc:6b:ff:53:7d:55:
         23:b0:f1:68:9d:a7:ed:64:36:e5:ce:c3:f8:76:ea:d6:ed:4c:
         44:6f:12:2e:a4:f2:85:f2:15:ed:9b:be:00:c2:2f:e6:98:7c:
         c9:02:2d:e9:68:a0:83:74:ef:09:2b:06:f2:91:81:9d:ff:ef:
         86:d6:1e:f9:e5:e1:c1:8a:3d:ee:6e:7f:a9:71:87:48:f7:6d:
         52:58:36:bd:64:87:5f:f9:45:62:a0:e4:5c:1a:07:c0:6f:79:
         98:22:8c:4d:f2:62:de:c4:71:56:27:c2:db:5f:94:45:81:8f:
         1e:94:32:04:12:f0:53:ba:3e:a9:22:a0:f3:6c:47:16:e0:ff:
         90:18:b8:7e:23:64:5f:6e:1f:40:21:a9:df:04:c3:9d:04:b2:
         08:62:c9:a6:79:c0:c4:7d:35:dd:38:a3:79:35:30:cb:94:ac:
         c7:6b:fe:d4:2c:bf:34:0e:5a:04:e9:c6:77:a3:11:0e:1a:64:
         4f:1c:12:39:a8:13:df:e5:a2:42:bb:0e:df:75:a1:fd:ac:17:
         6a:b4:1b:99:1c:3e:4b:79:ee:98:48:24:9c:0b:ba:8b:8a:63:
         c6:7e:db:e0:66:57:5f:e9:f8:cc:f2:b3:c2:c5:e7:31:2e:e4:
         a3:dc:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:22:57 2026 by rpki-client