Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3231203d3e20323634323934.roa
File:                     3137372e3130372e31362e302f32312d3231203d3e20323634323934.roa (raw, json)
Hash identifier:          69WlHCdWysf7dLCmBVdFPkkbtOfUcmwU9JPeT6RbxbA=
Subject key identifier:   82:37:EB:4F:C5:41:92:6C:EB:D8:E8:07:66:2A:68:E8:F3:64:0A:CD
Certificate issuer:       /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial:       436F9C38F9BF54F6ABC9416E745F92749D699597
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3231203d3e20323634323934.roa
Signing time:             Wed 25 Mar 2026 13:37:04 +0000
ROA not before:           Wed 25 Mar 2026 13:32:04 +0000
ROA not after:            Wed 24 Mar 2027 13:37:04 +0000
asID:                     264294
IP address blocks:        177.107.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6f:9c:38:f9:bf:54:f6:ab:c9:41:6e:74:5f:92:74:9d:69:95:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
        Validity
            Not Before: Mar 25 13:32:04 2026 GMT
            Not After : Mar 24 13:37:04 2027 GMT
        Subject: CN=8237EB4FC541926CEBD8E807662A68E8F3640ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:a1:ec:a6:2f:8c:0a:71:3f:e4:f5:94:48:
                    fd:1c:a7:27:10:ef:f1:c0:c0:7c:78:86:11:41:11:
                    89:88:c8:cc:bb:b5:04:0f:90:c5:b1:87:72:d6:82:
                    94:0f:3f:5a:3e:3d:fe:e7:bb:00:49:1a:c8:5e:1d:
                    4b:d0:2e:2f:98:1d:c5:f3:76:ab:33:25:8d:fe:ac:
                    43:d6:02:83:76:86:93:f3:1d:f3:52:20:e2:f7:38:
                    a2:c5:3e:05:2c:37:d4:40:a4:06:d4:69:a7:cc:f4:
                    89:02:5a:22:fc:3c:32:bc:b4:a9:d2:6f:cd:e8:32:
                    58:73:6a:d2:d8:ed:42:72:1b:a9:dd:46:7e:7f:e7:
                    0e:1b:ea:78:b8:b0:b8:2f:3f:37:55:c9:07:6d:66:
                    87:51:b1:9b:0e:b9:1b:da:94:8d:93:a9:ce:94:75:
                    02:b8:81:ec:ec:75:f7:5b:d4:81:1e:0b:5a:95:1e:
                    11:1b:b1:c2:d2:62:df:94:6f:ad:d4:5a:ff:e1:49:
                    06:d8:fe:cd:99:b9:1d:e7:0b:76:7b:f8:23:b1:96:
                    a1:f1:ea:db:63:08:9f:8a:2d:d0:80:a6:78:40:88:
                    65:04:ce:3e:50:0a:82:57:03:29:44:98:39:2d:23:
                    9f:9f:a6:9a:4f:9d:44:ed:7e:64:2b:65:61:f3:5d:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:EB:4F:C5:41:92:6C:EB:D8:E8:07:66:2A:68:E8:F3:64:0A:CD
            X509v3 Authority Key Identifier:
                keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3231203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:f4:87:08:21:fb:eb:e9:ed:28:07:ca:a1:84:f2:f2:14:f7:
         c8:0a:bf:44:57:27:b4:59:2b:0d:bd:4e:1f:a5:f3:b1:d3:be:
         81:91:91:cd:95:3a:58:46:f6:ea:af:b4:29:75:38:bb:62:fb:
         de:59:0e:e0:39:fb:12:c0:06:f3:c6:d5:95:56:c9:43:5b:52:
         24:35:e6:48:da:5c:b6:44:b9:8e:00:be:45:01:5e:73:69:db:
         69:2e:79:9b:5e:b4:da:84:df:61:52:b7:a6:b0:5a:84:a1:a0:
         83:82:56:62:f8:c6:5a:7c:04:65:9f:28:a8:11:b3:d2:30:35:
         f5:07:c6:5c:b0:b5:1c:6d:6e:37:89:4c:10:1d:f1:88:d3:5f:
         e3:21:0a:40:be:be:a8:e9:fa:67:2f:3b:3a:68:86:c5:b2:ec:
         ae:e7:04:66:6c:a5:59:66:42:6b:ae:eb:9e:0b:bb:12:7d:02:
         1b:60:ba:df:ad:04:46:fa:12:81:b7:1a:6c:55:8a:d2:bb:a1:
         42:75:c0:ae:ff:39:5a:97:56:6b:6d:44:03:f2:06:5d:0f:84:
         73:c6:a3:fd:6a:c8:65:7c:33:4b:d8:3b:06:a2:2a:de:82:11:
         ba:50:5a:59:93:85:6d:08:ea:22:8e:72:00:50:54:a9:ad:e7:
         7d:bb:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:18 2026 by rpki-client